<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Gumblar/Martuz Aftermath</title>
	<atom:link href="http://blog.unmaskparasites.com/2009/05/26/gumblar-martuz-aftermath/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.unmaskparasites.com/2009/05/26/gumblar-martuz-aftermath/</link>
	<description>Website insecurity by example</description>
	<lastBuildDate>Thu, 04 Mar 2010 20:24:35 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Viruses attacking Irish Websites &#171; Piers Dillon-Scott</title>
		<link>http://blog.unmaskparasites.com/2009/05/26/gumblar-martuz-aftermath/comment-page-1/#comment-6794</link>
		<dc:creator>Viruses attacking Irish Websites &#171; Piers Dillon-Scott</dc:creator>
		<pubDate>Sat, 27 Feb 2010 11:20:09 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=216#comment-6794</guid>
		<description>[...] to the company attackers are using viruses called &#8216;Gumblar&#8216; and &#8216;Martuz&#8216; to target website [...]</description>
		<content:encoded><![CDATA[<p>[...] to the company attackers are using viruses called &#8216;Gumblar&#8216; and &#8216;Martuz&#8216; to target website [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: UnderForge of Lack &#187; Blog Archive &#187; Gumblar は H1N1 に乗ってやってくる？</title>
		<link>http://blog.unmaskparasites.com/2009/05/26/gumblar-martuz-aftermath/comment-page-1/#comment-1489</link>
		<dc:creator>UnderForge of Lack &#187; Blog Archive &#187; Gumblar は H1N1 に乗ってやってくる？</dc:creator>
		<pubDate>Sun, 21 Jun 2009 10:38:37 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=216#comment-1489</guid>
		<description>[...] されている場合の解除方法が Unmask Parasiteに記載されていました。  Gumblar/Martuz Aftermath  -------------- [...]</description>
		<content:encoded><![CDATA[<p>[...] されている場合の解除方法が Unmask Parasiteに記載されていました。  Gumblar/Martuz Aftermath  &#8212;&#8212;&#8212;&#8212;&#8211; [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Char</title>
		<link>http://blog.unmaskparasites.com/2009/05/26/gumblar-martuz-aftermath/comment-page-1/#comment-1381</link>
		<dc:creator>Char</dc:creator>
		<pubDate>Sat, 06 Jun 2009 21:01:31 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=216#comment-1381</guid>
		<description>We found an iFrame tag right after the opening body tag.</description>
		<content:encoded><![CDATA[<p>We found an iFrame tag right after the opening body tag.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Estadd</title>
		<link>http://blog.unmaskparasites.com/2009/05/26/gumblar-martuz-aftermath/comment-page-1/#comment-1380</link>
		<dc:creator>Estadd</dc:creator>
		<pubDate>Sat, 06 Jun 2009 21:00:22 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=216#comment-1380</guid>
		<description>&quot;but sometimes are not very current &quot;

If they are not current, they are screwing up everything like blocking users to visit a clean site!

&quot;Even if a domain no longer resolve but you site contains code that load tries to load something from that domain&quot;

It was not about another site but that non-resolving domain itself. Google finds a domain that does not resolve and finds malware in it too !! It is not that they say &quot;Hey, though this site does not exist now we found this site bad in past !&quot;

it would have been ok if Google kept the mess within themselves but they are spreading it like anything blocking many users to visit clean, legit sites with NONCURRENT information or very flawed techniques</description>
		<content:encoded><![CDATA[<p>&#8220;but sometimes are not very current &#8221;</p>
<p>If they are not current, they are screwing up everything like blocking users to visit a clean site!</p>
<p>&#8220;Even if a domain no longer resolve but you site contains code that load tries to load something from that domain&#8221;</p>
<p>It was not about another site but that non-resolving domain itself. Google finds a domain that does not resolve and finds malware in it too !! It is not that they say &#8220;Hey, though this site does not exist now we found this site bad in past !&#8221;</p>
<p>it would have been ok if Google kept the mess within themselves but they are spreading it like anything blocking many users to visit clean, legit sites with NONCURRENT information or very flawed techniques</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Denis</title>
		<link>http://blog.unmaskparasites.com/2009/05/26/gumblar-martuz-aftermath/comment-page-1/#comment-1379</link>
		<dc:creator>Denis</dc:creator>
		<pubDate>Fri, 05 Jun 2009 14:57:06 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=216#comment-1379</guid>
		<description>Hi,

I read every comment. Ijust don&#039;t have time to respond to them as &lt;a href=&quot;http://blog.unmaskparasites.com/2009/06/06/blog-moved-to-vps/&quot; rel=&quot;nofollow&quot;&gt;I&#039;m moving my blog to a new server&lt;/a&gt;.

The import didn&#039;t went smoothly and comment threads got broken.

Regarding Google Malware warnings: they are usually very accurate but sometimes are not very current (you should check the date on diagnostic pages).

Even if a domain no longer resolve but you site contains code that load tries to load something from that domain, your site is considered potentially dangerous since the malicious domain can be reactivated any time.

Don&#039;t rely on Unmask Parasites too much though. It just highlights suspicious things but in some cases they may be legitimate. It&#039;s just an advice to a webmaster to take a closer look at highlighted items.</description>
		<content:encoded><![CDATA[<p>Hi,</p>
<p>I read every comment. Ijust don&#8217;t have time to respond to them as <a href="http://blog.unmaskparasites.com/2009/06/06/blog-moved-to-vps/" rel="nofollow">I&#8217;m moving my blog to a new server</a>.</p>
<p>The import didn&#8217;t went smoothly and comment threads got broken.</p>
<p>Regarding Google Malware warnings: they are usually very accurate but sometimes are not very current (you should check the date on diagnostic pages).</p>
<p>Even if a domain no longer resolve but you site contains code that load tries to load something from that domain, your site is considered potentially dangerous since the malicious domain can be reactivated any time.</p>
<p>Don&#8217;t rely on Unmask Parasites too much though. It just highlights suspicious things but in some cases they may be legitimate. It&#8217;s just an advice to a webmaster to take a closer look at highlighted items.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Estadd</title>
		<link>http://blog.unmaskparasites.com/2009/05/26/gumblar-martuz-aftermath/comment-page-1/#comment-1376</link>
		<dc:creator>Estadd</dc:creator>
		<pubDate>Fri, 05 Jun 2009 14:25:17 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=216#comment-1376</guid>
		<description>Hi Denis! If you said to me, I have read all comments. Google continues to mark clean page as bad, as also shows that as sample page which has nothing.

Googles technique seem to be severely flawed as they marked certain stuffs safe when unmaskparasites was catching those inline susp. things.

Moreover did you read my above comment that Google still finds a domain containing bad things on a date when already that domain has vanished ( or not resolving )</description>
		<content:encoded><![CDATA[<p>Hi Denis! If you said to me, I have read all comments. Google continues to mark clean page as bad, as also shows that as sample page which has nothing.</p>
<p>Googles technique seem to be severely flawed as they marked certain stuffs safe when unmaskparasites was catching those inline susp. things.</p>
<p>Moreover did you read my above comment that Google still finds a domain containing bad things on a date when already that domain has vanished ( or not resolving )</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Estadd</title>
		<link>http://blog.unmaskparasites.com/2009/05/26/gumblar-martuz-aftermath/comment-page-1/#comment-1361</link>
		<dc:creator>Estadd</dc:creator>
		<pubDate>Wed, 03 Jun 2009 09:06:24 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=216#comment-1361</guid>
		<description>I find it interesting that while you write
&quot;“Martuz .cn” domain no longer resolve&quot;
Google finds &quot;The last time Google visited this site was on 2009-06-02, and the last time suspicious content was found on this site was on 2009-06-02.&quot;

Its serious that either Google corrects its techniques or we discard it.</description>
		<content:encoded><![CDATA[<p>I find it interesting that while you write<br />
&#8220;“Martuz .cn” domain no longer resolve&#8221;<br />
Google finds &#8220;The last time Google visited this site was on 2009-06-02, and the last time suspicious content was found on this site was on 2009-06-02.&#8221;</p>
<p>Its serious that either Google corrects its techniques or we discard it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Estadd</title>
		<link>http://blog.unmaskparasites.com/2009/05/26/gumblar-martuz-aftermath/comment-page-1/#comment-1360</link>
		<dc:creator>Estadd</dc:creator>
		<pubDate>Wed, 03 Jun 2009 08:57:39 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=216#comment-1360</guid>
		<description>I was about to write an angry letter to you when I found this article.

I have made several &quot;request a review&quot; but Google still has the site as listed suspicious. There is no external js file, the site is clean by unmaskparasites as well as safe by AV like AVG. Google was not listing any sample page as infectious in the inbetween days, after the 3rd or 4th review request it did list one page which is clean by any standards.

It may be well worth considering that logarithms or techniques adopted by Google need serious review ( like many of their bad policies are under scanner and Google has been discarded by many too ). Blocking pages on browser like FF is like evil dictatorship, which very small noncommercial website owners cannot fight.

May be unmaskparasites should judge by its own technique and discard what Google says. I think unmaskparasite judges better and in useful way because when unmaskparasite actually detected an inline script google was saying things were safe when it was not.This is documented and this is serious : Google has no reliability.

Are there any tips so that visitors using FF or Chrome can actually deactivate and so some browsing comfortably? Most users have their own AV with webshield which works practically and usefully.

IE 7 now seems a lot more safer and comfortabler to browse not bogged by these nuisances.</description>
		<content:encoded><![CDATA[<p>I was about to write an angry letter to you when I found this article.</p>
<p>I have made several &#8220;request a review&#8221; but Google still has the site as listed suspicious. There is no external js file, the site is clean by unmaskparasites as well as safe by AV like AVG. Google was not listing any sample page as infectious in the inbetween days, after the 3rd or 4th review request it did list one page which is clean by any standards.</p>
<p>It may be well worth considering that logarithms or techniques adopted by Google need serious review ( like many of their bad policies are under scanner and Google has been discarded by many too ). Blocking pages on browser like FF is like evil dictatorship, which very small noncommercial website owners cannot fight.</p>
<p>May be unmaskparasites should judge by its own technique and discard what Google says. I think unmaskparasite judges better and in useful way because when unmaskparasite actually detected an inline script google was saying things were safe when it was not.This is documented and this is serious : Google has no reliability.</p>
<p>Are there any tips so that visitors using FF or Chrome can actually deactivate and so some browsing comfortably? Most users have their own AV with webshield which works practically and usefully.</p>
<p>IE 7 now seems a lot more safer and comfortabler to browse not bogged by these nuisances.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Denis</title>
		<link>http://blog.unmaskparasites.com/2009/05/26/gumblar-martuz-aftermath/comment-page-1/#comment-1308</link>
		<dc:creator>Denis</dc:creator>
		<pubDate>Wed, 27 May 2009 14:33:00 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=216#comment-1308</guid>
		<description>Plese read comments to &lt;a href=&quot;http://blog.unmaskparasites.com/2009/05/07/gumblar-cn-exploit-12-facts-about-this-injected-script/&quot; rel=&quot;nofollow&quot;&gt;this article&lt;/a&gt;</description>
		<content:encoded><![CDATA[<p>Plese read comments to <a href="http://blog.unmaskparasites.com/2009/05/07/gumblar-cn-exploit-12-facts-about-this-injected-script/" rel="nofollow">this article</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dave</title>
		<link>http://blog.unmaskparasites.com/2009/05/26/gumblar-martuz-aftermath/comment-page-1/#comment-1306</link>
		<dc:creator>Dave</dc:creator>
		<pubDate>Wed, 27 May 2009 02:28:59 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=216#comment-1306</guid>
		<description>Hey Guys. I really need help. Can anyone tell me how to find this martuz.cn script in my website files? Its horrible for business.

&lt;em&gt;Edit by Denis: Site address was removed from your signature. It still contains malware.
http://www.UnmaskParasites.com/security-report/?page=nriinternet.com&lt;/em&gt;</description>
		<content:encoded><![CDATA[<p>Hey Guys. I really need help. Can anyone tell me how to find this martuz.cn script in my website files? Its horrible for business.</p>
<p><em>Edit by Denis: Site address was removed from your signature. It still contains malware.<br />
<a href="http://www.UnmaskParasites.com/security-report/?page=nriinternet.com" rel="nofollow">http://www.UnmaskParasites.com/security-report/?page=nriinternet.com</a></em></p>
]]></content:encoded>
	</item>
</channel>
</rss>
