Comments on: New PHP Exploit on the Loose

By: Frank J

Frank J — Sat, 20 Jun 2009 21:06:43 +0000

Allan,

Thanks and glad we could share.

By: Allan

Allan — Sat, 20 Jun 2009 17:56:53 +0000

Wow nice info you have here. I hope this will help a lot of people. I will tell my friends to read this. Thanks

By: David

David — Sun, 07 Jun 2009 11:10:12 +0000

I have an oscommerce site and it keeps coming back for some pesky reason. It adds code to my php pages, i download the whole site then do a find for the malicious code. I go to view the site in my browser and i get the virus on my PC again. Grrrrrr.

Any tips for OSCommerce?

By: Frank J

Frank J — Tue, 02 Jun 2009 17:59:16 +0000

Better late than never.

By: Rome Flights

Rome Flights — Tue, 02 Jun 2009 17:49:03 +0000

Thanks for sharing the links. Specially the ones with the wordpress security.

I think it mostly happens in the new wordpress, but I just found out too late I guess.

By: Frank J

Frank J — Wed, 27 May 2009 16:53:42 +0000

There are many great places to get free scans. Try these;

Symantec.com
TrendMicro.com
McAfee.com

By: B. Djassi

B. Djassi — Wed, 27 May 2009 15:02:13 +0000

All of the information is good, but it only seems to cover what the malware is and how to keep yourself from getting it. I have it and i need to know how to REMOVE it.

Please help.

By: Kill that Gumblar Worm!

Kill that Gumblar Worm! — Wed, 27 May 2009 14:21:18 +0000

[...] of links related to the Gumblar trojan : Gumblar explode across the Web Beware of the Gumblar Worm PHP exploit on the loose 12 Facts about the Gumblar Exploit Removal and Prevention of [...]

By: Frank J

Frank J — Fri, 22 May 2009 11:39:59 +0000

Jeet,

Glad you were able to combat the issue.

By: Jeet

Jeet — Fri, 22 May 2009 11:29:48 +0000

I had to also edit default-filters.php in one of my wordpress blogs that was affected by this. One of the worst part was I couldn’t login because even wp-admin index.php was affected.