Notification Type
Security Notification
Service Affecting
No
Message
We have noticed a very large number of user webspaces that have been attacked by the Gumblar virus (or a derivative of it)If you are using a Windows based PC we urge you to:
- keep your antivirus software up to date
- scan your PC thoroughly
NB: If your PC or that of one of your colleagues is infected you will need to clean it properly BEFORE you attempt to fix your website, as otherwise it will simply re-infect the site
UPDATE: Some people have reported success in using this web service to scan their sites for malicious code
UPDATE 2: Some more details on what Gumblar does on an infected PC and how it stops antivirus etc., from detecting it.
More information here
![Reblog this post [with Zemanta]](http://img.zemanta.com/reblog_e.png?x-id=16a7156b-54d5-4545-8e7c-b6a537809229)
Further detailed info on Gumblar can be found at:
http://www.martinsecurity.net/2009/05/20/inside-the-massive-gumblar-attacka-dentro-del-enorme-ataque-gumblar/
This one helped me out last month:
http://webpayments.ie/blog/Gumblar-What-is-it-How-to-I-remove-it-.html
Site scan and instructions to remove from your PC
http://www.danielansari.com/wordpress/2009/05/automatic-removal-of-gumblarmartuz-trojan/
Check if its still on your PC
http://blog.scansafe.com/journal/2009/5/27/gumblar-modified-sqlsodbcchm-clue-to-infection.html