Plakias Forums

Administration, Feedback and Bugs => Forum and Website discussion => Topic started by: Robin Young on May 13, 2009, 09:28:25 AM

Title: gumblar.cn
Post by: Robin Young on May 13, 2009, 09:28:25 AM: For some days now I have been getting reports of a phishing site "gumblar.cn" from Kaspersky
Internet Security when I open the Plakias site.
Has anyone any comments?
Robin Young
Title: gumblar.cn
Post by: John R on May 13, 2009, 11:49:12 AM: Quote from: Robin Young
For some days now I have been getting reports of a phishing site "gumblar.cn" from Kaspersky
Internet Security when I open the Plakias site.
Has anyone any comments?
Robin Young

I got exactly the same with same software in use. I reported to Paul, site administrator and he took the site down a few days ago to clear it. My software says all ok now. It appears that some virus software programs did not spot it ??

John R
Title: gumblar.cn
Post by: Ploppy on May 13, 2009, 12:16:38 PM: Hi Robin,

Yes unfortunately this particular trojan is becoming a bit of a nuisance. It no longer affects our site.

There is plenty of stuff on Google if you want to read further.

Regards,

Paul

Quote from: Robin Young
For some days now I have been getting reports of a phishing site "gumblar.cn" from Kaspersky
Internet Security when I open the Plakias site.
Has anyone any comments?
Robin Young
Title: gumblar.cn
Post by: Robin Young on May 13, 2009, 02:57:10 PM: Hi Paul
Thankyou for your reply

I am still getting the message from Kaspersky regarding "gumblar.cn/rss/?id=5818702"
You say that our site is no longer affected so does this mean that I have a problem on my computer?

The Plakias site is the only site that it comes up on.

I am not very literate as far as problems like this are concerned so your help would be appreciated.

Regards

Robin

Quote from: Ploppy
Hi Robin,

Yes unfortunately this particular trojan is becoming a bit of a nuisance. It no longer affects our site.

There is plenty of stuff on Google if you want to read further.

Regards,

Paul

Quote from: Robin Young
For some days now I have been getting reports of a phishing site "gumblar.cn" from Kaspersky
Internet Security when I open the Plakias site.
Has anyone any comments?
Robin Young
Title: gumblar.cn
Post by: Robin Young on May 15, 2009, 12:23:29 PM: Quote from: Robin Young
Hi Paul
Thankyou for your reply

I am still getting the message from Kaspersky regarding "gumblar.cn/rss/?id=5818702"
You say that our site is no longer affected so does this mean that I have a problem on my computer?

The Plakias site is the only site that it comes up on.

I am not very literate as far as problems like this are concerned so your help would be appreciated.

Regards

Robin

Quote from: Ploppy
Hi Robin,

Yes unfortunately this particular trojan is becoming a bit of a nuisance. It no longer affects our site.

There is plenty of stuff on Google if you want to read further.

Regards,

Paul

Quote from: Robin Young
For some days now I have been getting reports of a phishing site "gumblar.cn" from Kaspersky
Internet Security when I open the Plakias site.
Has anyone any comments?
Robin Young
Hi Paul

The warning from Kaspersky has disappeared this morning.

The site is now very slow to open

Regards

Robin
Title: gumblar.cn
Post by: Ploppy on May 15, 2009, 08:04:21 PM: Quote from: Robin Young
Hi Paul

The warning from Kaspersky has disappeared this morning.

The site is now very slow to open

Regards

Robin

Hi Robin,

Don't think it will have affected your PC, Kapersky should have protected you.
Maybe worth running a system scan.

Maybe you were referencing cached files which is why the warning wasn't going away until your browser downloaded fresh files today.

Cheers,

Paul
Title: gumblar.cn
Post by: Robin Young on May 16, 2009, 09:15:14 AM: Quote from: Ploppy
Quote from: Robin Young
Hi Paul

The warning from Kaspersky has disappeared this morning.

The site is now very slow to open

Regards

Robin

Hi Robin,

Don't think it will have affected your PC, Kapersky should have protected you.
Maybe worth running a system scan.

Maybe you were referencing cached files which is why the warning wasn't going away until your browser downloaded fresh files today.

Cheers,

Paul
Hi Paul

Thanks for the information

Regards

Robin
Title: gumblar.cn
Post by: travellingran on May 17, 2009, 05:57:48 PM: Quote from: Robin Young
Quote from: Ploppy
Quote from: Robin Young
Hi Paul

The warning from Kaspersky has disappeared this morning.

The site is now very slow to open

Regards

Robin

Hi Robin,

Don't think it will have affected your PC, Kapersky should have protected you.
Maybe worth running a system scan.

Maybe you were referencing cached files which is why the warning wasn't going away until your browser downloaded fresh files today.

Cheers,

Paul
Hi Paul

Thanks for the information

Regards

Robin

Hello,

I have been getting a warning all today.When just going to the Plakias Forum fromt page I am getting a message telling me "My Computer will be harmed if I open this site ." I am on the site here via a bookmark. Is the site once again being tinkered with or is my computer up to it's old tricks ?.

travellingran.
Title: gumblar.cn
Post by: travellingran on May 17, 2009, 06:03:48 PM: Quote from: travellingran
 
Quote from: Robin Young
Quote from: Ploppy
Quote from: Robin Young
Hi Paul The warning from Kaspersky has disappeared this morning. The site is now very slow to open Regards Robin
 Hi Robin, Don't think it will have affected your PC, Kapersky should have protected you. Maybe worth running a system scan. Maybe you were referencing cached files which is why the warning wasn't going away until your browser downloaded fresh files today. Cheers, Paul 
 Hi Paul Thanks for the information Regards Robin 
 Hello, I have been getting a warning all today.When just going to the Plakias Forum fromt page I am getting a message telling me "My Computer will be harmed if I open this site ." I am on the site here via a bookmark. Is the site once again being tinkered with or is my computer up to it's old tricks ?. travellingran. 
 

PS,
It only appears through Firefox. I have just tried Internet Explorer and the message was not there.

Now I am really confused !!!!!!!!!!

travellingran
Title: gumblar.cn
Post by: Kerstin on May 17, 2009, 07:42:46 PM: Quote from: travellingran
Quote from: travellingran
 
Quote from: Robin Young
Quote from: Ploppy
Quote from: Robin Young
Hi Paul The warning from Kaspersky has disappeared this morning. The site is now very slow to open Regards Robin
 Hi Robin, Don't think it will have affected your PC, Kapersky should have protected you. Maybe worth running a system scan. Maybe you were referencing cached files which is why the warning wasn't going away until your browser downloaded fresh files today. Cheers, Paul 
 Hi Paul Thanks for the information Regards Robin 
 Hello, I have been getting a warning all today.When just going to the Plakias Forum fromt page I am getting a message telling me "My Computer will be harmed if I open this site ." I am on the site here via a bookmark. Is the site once again being tinkered with or is my computer up to it's old tricks ?. travellingran. 
 

PS,
It only appears through Firefox. I have just tried Internet Explorer and the message was not there.

Now I am really confused !!!!!!!!!!

travellingran

Heather,

I agree with you. I had the same problems.

Firefox sent me the German Version:

Als attackierend gemeldete Website!
Die Website auf forums.plakias.co.uk wurde als attackierende Seite gemeldet und auf Grund Ihrer Sicherheitseinstellungen blockiert.
Attackierende Websites versuchen, Programme zu installieren, die private Informationen stehlen, Ihren Computer verwenden, um andere zu attackieren oder Ihr System beschädigen.
Manche Websites vertreiben bewusst Viren und ähnlich schädliche Software, aber viele Websites sind auch ohne das Wissen oder die Erlaubnis des Betreibers kompromittiert.

Shortly translated: A attacked registered web-site.

I am working with the newest Firefox version: 3.0.10

Kerstin
Title: gumblar.cn
Post by: travellingran on May 17, 2009, 09:45:05 PM: Quote from: Kerstin
Quote from: travellingran
Quote from: travellingran
 
Quote from: Robin Young
Quote from: Ploppy
Quote from: Robin Young
Hi Paul The warning from Kaspersky has disappeared this morning. The site is now very slow to open Regards Robin
 Hi Robin, Don't think it will have affected your PC, Kapersky should have protected you. Maybe worth running a system scan. Maybe you were referencing cached files which is why the warning wasn't going away until your browser downloaded fresh files today. Cheers, Paul 
 Hi Paul Thanks for the information Regards Robin 
 Hello, I have been getting a warning all today.When just going to the Plakias Forum fromt page I am getting a message telling me "My Computer will be harmed if I open this site ." I am on the site here via a bookmark. Is the site once again being tinkered with or is my computer up to it's old tricks ?. travellingran. 
 

PS,
It only appears through Firefox. I have just tried Internet Explorer and the message was not there.

Now I am really confused !!!!!!!!!!

travellingran

Heather,

I agree with you. I had the same problems.

Firefox sent me the German Version:

Als attackierend gemeldete Website!
Die Website auf forums.plakias.co.uk wurde als attackierende Seite gemeldet und auf Grund Ihrer Sicherheitseinstellungen blockiert.
Attackierende Websites versuchen, Programme zu installieren, die private Informationen stehlen, Ihren Computer verwenden, um andere zu attackieren oder Ihr System beschädigen.
Manche Websites vertreiben bewusst Viren und ähnlich schädliche Software, aber viele Websites sind auch ohne das Wissen oder die Erlaubnis des Betreibers kompromittiert.

Shortly translated: A attacked registered web-site.

I am working with the newest Firefox version: 3.0.10

Kerstin

Hi Kerstin.

Thankyou for telling me that, I am not so worried now. I cannot upgrade to 3.0.10 as I am still using windows 98 and it will not support a Firefox upgrade.

Maybe next year I should get a decent computer and stop going on holiday. Well,maybe not.

Heather.
Title: gumblar.cn
Post by: Robin Young on May 18, 2009, 09:52:44 AM: Quote from: Ploppy
Quote from: Robin Young
Hi Paul

The warning from Kaspersky has disappeared this morning.

The site is now very slow to open

Regards

Robin

Hi Robin,

Don't think it will have affected your PC, Kapersky should have protected you.
Maybe worth running a system scan.

Maybe you were referencing cached files which is why the warning wasn't going away until your browser downloaded fresh files today.

Cheers,

Paul
Hi Paul

The Kaspersky warnings are back again this morning.
"gumblar.cn/rss/?id=5818702" is still the message.

I have carried out a full system scanwhich detected nothing.

Regards

Robin
Title: gumblar.cn
Post by: harribobs on May 18, 2009, 10:04:45 AM: i'm getting the same warnings as well now
Title: gumblar.cn
Post by: Ploppy on May 18, 2009, 10:38:43 AM: Hi Guys,

The whole 'Attack Site' thing is a Firefox feature in conjunction with Google.

We did have an issue with the the Gumblar thing on the 8th/9th. Not sure why Google is reporting on the 16th.

As far as I am aware the site is OK. I have asked Google to review this and 'whitelist' the site. Not sure how long this will take.

I've done what I can and two different system scans have detected nothing but obviously the decision is yours.

Thanks,

Paul
Title: gumblar.cn
Post by: Ploppy on May 18, 2009, 10:48:25 AM: Looks like we are ok now:

http://google.com/safebrowsing/diagnostic?...s.plakias.co.uk (http://google.com/safebrowsing/diagnostic?site=forums.plakias.co.uk)

Thanks Google for spicing up my weekend
Title: gumblar.cn
Post by: Chas on May 18, 2009, 04:28:44 PM: Quote from: Ploppy
Looks like we are ok now:

[url]http://google.com/safebrowsing/diagnostic?...s.plakias.co.uk[/url] ([url]http://google.com/safebrowsing/diagnostic?site=forums.plakias.co.uk[/url])

Thanks Google for spicing up my weekend

Monday 18 May - 15:20 UTC/GMT

Oh no you're not!!!!!

When I clicked on the "Welcome to Plakias" link, above - I got this ....

http://safebrowsing.clients.google.com/saf....plakias.co.uk/ (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=http://www.plakias.co.uk/)

So much for my feeling smug because I didn't have any problems serves me right!
Title: gumblar.cn
Post by: Kerstin on May 18, 2009, 06:09:19 PM: Quote from: Ploppy
Looks like we are ok now:

[url]http://google.com/safebrowsing/diagnostic?...s.plakias.co.uk[/url] ([url]http://google.com/safebrowsing/diagnostic?site=forums.plakias.co.uk[/url])

Thanks Google for spicing up my weekend

Many thanks, Paul.
I am online with Firefox and I have no problems.

Kerstin
Title: gumblar.cn
Post by: Ploppy on May 18, 2009, 07:14:01 PM: Quote from: Chas
Monday 18 May - 15:20 UTC/GMT

Oh no you're not!!!!!

When I clicked on the "Welcome to Plakias" link, above - I got this ....

[url]http://safebrowsing.clients.google.com/saf....plakias.co.uk/[/url] ([url]http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=http://www.plakias.co.uk/[/url])

So much for my feeling smug because I didn't have any problems serves me right!

Ahhh ok the main site, fixing it now.

Hopefully nobody uses it (somewhat out of date!)

Thanks for bringing it to my attention Chas.
Title: gumblar.cn
Post by: Graham_and_Karen on May 18, 2009, 08:49:49 PM: Thanks for sorting it Paul. The Google block was worrying and very effective. All seems ok now.
Title: gumblar.cn
Post by: Robin Young on May 19, 2009, 12:52:13 PM: All OK with me too now.

Thanks

Robin Young
Title: gumblar.cn
Post by: Chas on June 01, 2009, 11:58:54 AM: Just before this thread vanishes into the mist of time (and/or raki) .....

CNET Security News article (http://news.cnet.com/8301-1009_3-10251779-83.html?tag=nl.e757)

A couple of thought came as I read it:

1. I'm glad I use Firefox rather than Internet Explorer (I also have NoScript for extra safety).

2. It's a grade one pain if you have been infected - full system rebuild to get rid! .... Even more relived I use Firefox.
Title: gumblar.cn
Post by: Graham_and_Karen on June 01, 2009, 09:22:27 PM: Quote from: Graeme
Thanks for that info Chas, much appreciated, (thumbs up emoticon) I guess enabling NoScript means no more emoticons .......sad face

Ach well ...security takes priority.

BTW I noticed it not only targets IE users but also Google searchers !
I use NoScript but can use emoticons - there's lots of permissions you can set
Title: gumblar.cn
Post by: Chas on June 03, 2009, 05:34:48 PM: You can set each individual script-source on each webpage as "allow temporarily" or "allow permanently" .... there should be a NoScript toolbar at the bottom of the screen with a button labelled "Options" on the right-hand end. Any new scripts are blocked by default; YOU decide exactly which and what to allow.

Once a site has been permanently allowed, the toolbar disappears until a new script arrives. That level of paranoia suits me fine.(http://www.chatitaliachat.it/serpe/diablos/37.gif)