Gumblar virus is spreading on a web server near you

We had some big problems at work yesterday, someone, one of our clients or us, we don’t know, got the Gumblar virus. For now this virus is hard to detect,you get it by visiting a website with a malicious embedded js, and from what I heard safari and firefox will not help you out (on pc).

This funny virus block access to your antivirus update, and even block access to cuteftp, because it want you to use Filezilla to steal your passwords.

After it got your passwords it will infect your servers! It has the courtesy to upload an hidden php script and change your folder permissions, it does that in the event you delete the js tag from all your files, it will be able to come back after some times with the hidden php script.

As most web developer, we have more than 40 ftp in our filezilla list, let me tell you we were on the verge of all having seizure.

Be cautious web workers!