Let's face it, I'm just a streetwise aging dirtbag, 11th grade dropout and general ne'er do well but I manage some muddled version of a Thoreauish life and have lots of free time from living on the cheap. I am not an IT person in any way, just a schlub who finds his way around a beat up Inspiron and mends it in the way some other time's dirtbag would fix a muffler with a beer can sleeve.
So the unravelling of May 14th, 2009 can only be described as near traumatic. A Gumblar attack hit the shores and began crippling web sites and making a havoc of search engines. And the redirects were gawdawful. I soon found a work around by just pasting the url snippets at the base of the search description into the browser. Time consuming but useful enough to get to two critical pieces from Mary Landesman at Scansafe and the blogger at the charmingly named Unmasked Parasites. The latter also has an essential tool albeit in a beta stage that allows you to check web site url for infection evidence.
Ms Landesman helpfully suggested that Malwarebytes.org had the efficacy to unravel this thing and so it did.
But the rest of the story is where it gets interesting. Most of the big picture security software outfits like McAffee and such were caught flat footed and useless. The above cited sources both offer outstanding accounts of the thing and its origins that could almost be like battle accounts from world war two.
It is an unprecedented attack with a very disturbing intent, to hijack searches using SEO methods and hitting vulnerable FTP regions in addition to all manner of browser files, media files, system 32 files, registry and memory zones in a clusterfuck mishmash.
Malwarebyte found more than 170 infections and this after 5 harrowing scans with McAfee, Ad Aware, Spybot Search and Destroy, a crack at AVG and finally CA..whee..I got to beta test the daylights out of all these puppies and handle a flurry of wrenching crazy bug events, blue death screens, looping reboots, a barrage of fake ware intrusions, more or less an all out assault.
Each of the other systems did find stuff and kick it out and I'm keeping the Computer Associates Anti Virus coverage as I like the company, McAffee is another critter..obnoxious, intrusive, whiney, memory hog pest thing that is clumsy and dumb. Ditching it was almost as much fun as uninstalling Internet Exploder.
But at the end of the day, none of em found the right stuff and I had already resigned myself to losing the old thing and seeking some new cheap Craigslist rig. And I had some very gifted people rising to the occasion of help with indispensable insights that nudged the process forward and helped me prepare for this.
The real lesson is we are seeing a new phase. This is a real multi pronged assault that could almost be the work of a government although the origin appears to be Moscow hackers and possibly China. As of today the rate of web site infection appears to be declining as noted by Ms Landesman.
And the winning team at Malwarebytes is getting pummled by a different form of attack as if the invaders know this is the only working answer right now. This was on their site yesterday.
"Malwarebytes.org is being maliciously targeted by spam bots who demand in an email that our linking partners remove links to the our website in an effort to hurt our search engine rankings. These spam emails are fraudulent and not from us and we encourage you, our community, to spread the word and add links to us and to continue promoting our products across the Internet."
This, when added to all the other data suggests something like a cyber D Day invasion and may be an epochal event in the lightspeed pace of web world. My own little corner of the battlefield owes its minor triumph to the insight and persistance of the Indomitable Doberman, who suggested Malware Bytes and my office neighbor Brad, who runs a cutting edge web marketing shop . Both gave hours of their valuable time to make sense of this nightmare. The sum of all these participations and contributions was a crash course in current security issues and a vital element in the resolution of this harrowing mess.














