Gootloader infection cleaned up

Posted on February 27, 2022 by Kelly aka LadyOTrout

Dear blog owner and visitors,

This blog had been infected to serve up Gootloader malware to Google search victims, via a common tactic known as SEO (Search Engine Optimization) poisioning. Your blog was serving up 164 malicious pages. Your blogged served up malware to 57 visitors.

I tried my best to clean up the infection, but I would do the following:

Upgrade WordPress to the latest version (one way the attackers might have gained access to your server)
Upgrade all WordPress themes to the latest versions (another way the attackers might have gained access to your server)
Upgrade all WordPress plugins (another way the attackers might have gained access to your server), and remove any unnecessary plugins.
Verify all users are valid (in case the attackers left a backup account, to get back in)
Change all passwords (for WordPress accounts, FTP, SSH, database, etc.) and keys. This is probably how the attackers got in, as they are known to brute force weak passwords
Run antivirus scans on your server
Block these IPs (5.8.18.7 and 89.238.176.151), either in your firewall, .htaccess file, or in your /etc/hosts file, as these are the attackers command and control servers, which send malicious commands for your blog to execute
Check cronjobs (both server and WordPress), aka scheduled tasks. This is a common method that an attacker will use to get back in. If you are not sure, what this is, Google it
Consider wiping the server completly, as you do not know how deep the infection is. If you decide not to, I recommend installing some security plugins for WordPress, to try and scan for any remaining malicious files. Integrity Checker, WordPress Core Integrity Checker, Sucuri Security,
and Wordfence Security, all do some level of detection, but not 100% guaranteed
Go through the process for Google to recrawl your site, to remove the malcious links (to see what malicious pages there were, Go to Google and search site:your_site.com agreement)
Check subdomains, to see if they were infected as well
Check file permissions

Gootloader (previously Gootkit) malware has been around since 2014, and is used to initally infect a system, and then sell that access off to other attackers, who then usually deploy additional malware, to include ransomware and banking trojans. By cleaning up your blog, it will make a dent in how they infect victims. PLEASE try to keep it up-to-date and secure, so this does not happen again.

Sincerly,

The Internet Janitor

Below are some links to research/further explaination on Gootloader:

https://news.sophos.com/en-us/2021/03/01/gootloader-expands-its-payload-delivery-options/

https://news.sophos.com/en-us/2021/08/12/gootloaders-mothership-controls-malicious-content/

https://www.richinfante.com/2020/04/12/reverse-engineering-dolly-wordpress-malware

https://blog.sucuri.net/2018/12/clever-seo-spam-injection.html

This message

It’s TOMORROW!!

Posted on May 31, 2016May 31, 2016 by Kelly aka LadyOTrout

Over the past few weeks I have been involved in some Senior Expo style events. It has been fun and I am meeting lots of people of all ages. To be honest I was shocked to see how many people turned out at Husson and what a vast collection of things to learn about!

Don’t Let Fraud Get You Down

Learn about it -Knowledge is POWER! Tomorrow, Senator Susan Collins, our Senator and th e Chair of the Special Committee on Aging, will be speaking at the Scam Jam that AARP is putting on at Spectacular Events Center in Bangor. It’s FREE and click here to watch more about it . You don’t have to be an AARP Member to Register and it is still FREE, here is a printed description.

You might be asking, “What does this Scam Jam have to do with Technology, Kelly?”

There will be many discussions about Cybersecurity. There is a workshop by the State Police: “Staying Safe Online: Maine State Police Cyber Security Unit.”

Come down and join us! It will be fun, coffee, food, free.

“If You Are A Senior or Love Someone Who Is….*”

Posted on May 12, 2016 by Kelly aka LadyOTrout

Then this blog is for you!

When we started our business we were located in the same building as Eastern Agency on Aging – 81 Main Street in Downtown Bangor, Maine. The building is small and there always seemed to be a steady stream of people going in and out of their offices. One of those people, Carol Higgins-Taylor was one of those people. She worked for the agency. I met her one day and every day since when I see her she puts a smile on my face. She is warm, smart and hysterical.

My Resource

I met Carol 15 years ago. Lots of things were different back then, my father was alive, my Mom newly widowed, I was newly divorced and living in a new town with a new company. But Carol is the same. Friendly, kind and whenever I have a question about getting help or advice in being a better daughter to aging parents, I can email Carol. Today, Carol owns a PR Agency, (and our office has moved too), her specialty is Seniors and families. She often points me back to Eastern Agency on Aging and even though Mom is in Southern Maine, the resources are there too.

Knowledge is Power

I say this all the time. Usually, it means, Knowledge gives me “piece of mind.” I hate feeling like I cannot help my Mother. I need support to navigate our (Mom’s and mine) journey together.

Senior Expo 2016

Thursday, May 26th at Husson is the Senior Expo. While you may think this is JUST for the OLD FOLKS it isn’t. In the Newman Gym there are exhibitors – It really is a big Resource Room. Come through, browse at your leisure. It’s FREE. And starting at 10am are Presentations in the Meeting House/Gracie Theatre Building. A Wide range of topics, Living With a Wound, Healthy Living For Your Brain and Body, Caregiving for your loved one with Dementia to Chair Yoga.

Come See, Come Learn. Stay for as long as you can. Feel the power of the Network. With Carol at the Helm of this Event, it is something not to miss.

*Carol Higgins-Taylor – preceding her weekly Radio Show Senior Talk on WVOM. Click here FMI.

We Are In This Together

Posted on April 25, 2016 by Kelly aka LadyOTrout

I am a daughter and the primary “Go – To” for my Mom. Mom lives 2 hours south of here in the same house I grew up in. I am not exactly sure how it happened, over the years, we have become closer and closer. I call her my best friend. We talk every day.

Elbow Surgery

Last December, Mom had elbow surgery. It was something we planned ahead for, what I didn’t know at the time was that it was a “dry run” for what was the emergency we had last week.

Setting Up Contact Groups In My Phone

I never bothered to set up groups in my cell phone for myself, but when Mom had her elbow surgery, I set them up for her numbers. Doctors, relatives and neighbors on the street that could help out if we needed them. I never had her Doctor’s numbers before. Turns out we didn’t need them – until last week.

Contact Groups

Depending on your phone type, you probably have the ability to create these lists/groups. I have a separate list for those I can text and those I can’t (Doctor’s office numbers don’t text!) You may be able to have multiple lists/groups yourself. Mine look like this Depot Rd. Neighbors (who let the dogs out), Mom’s Doctors, Close Family (that can help that are close by) Other Family (for update only, living far away)

Don’t Wait For the Emergency

Take the opportunity to go through these numbers with your “loved ones.” Put these numbers in your phone – do it. It makes functioning under an emergency so much easier, knowing that I could do what I needed to do, contact who I needed to contact, gave me a little direction under a pretty stressful time.

Emergency Rooms Have Crappy Cell Service

Every ER I have been in, perhaps due to all the electronics, machines and monitoring devices required for the patients, your cell phone may not work. No reception. And for those of us that are “lone rangers” – sitting next to Mom’s bed waiting for the Doctor, without any backup, you don’t want to leave. When you do leave you would like the easiest and quickest way to touch base with a group.

Your Cell Phone is a Lifeline

Sure, we all have fun taking selfies, perhaps we get texts by the kids to be picked up from choir practice. We use our phones every day. But take a little time to set up your phone, NOW. You can save

You can save yourself from any extra stress under an emergency situation. I am sure glad I did.

Things You Should Know

Posted on April 8, 2016 by Kelly aka LadyOTrout

Anyone that knows me, knows that I reluctant to discuss politics or publically take stands on issues. That being said, I do try to get the word out for things that may be helpful to other people. By passing on an event or announcement does not mean that I am supporting or not supporting something necessarily.

Recently I Joined AARP

I have many friends and family members that are not AARP Members and they all have their reasons. My reason to join is because for this blog and for other information that affect the Senior population, I use their information on their website and blog. Even tho it is available for free, I felt that I should join the organization if I was using them as a “Go To” for information- yes it was the GUILT factor.

I am a Daughter, Companion, Friend

I have lots of friends and a Mom that is in “that demographic.” I get asked lots of questions. And I try and be patient. As I revitalized this blog I felt compelled to share the information that I was passing out to these folks in my life. I hope you find it useful. I also have been blessed with a personality that loves people and I network every chance I get. Helping people meet one another is great. “Connection” is everything.

Technology

This blog is about technology and all the frustrations that come with it comes some great benefits. Maybe I can sift through some of these things to help you navigate it. I also will post on the Facebook Page events that I know about that may be helpful. Some of them may involve technology, but not all. Some things just events that I may hear about – (AARP Membership not required.)

It’s About You

As I celebrated my 54th birthday last month and my Mom celebrates her _____(she will kill me if I tell you) in July, we are navigating these days together. I am sure we aren’t the only ones! This blog is free to use and I don’t make money writing it. It is just a way that I can give back to the people in my life that have helped me and believed in me along the way. Please join us – share it with your friends – if you have any questions go on over to the Facebook page, leave a comment here or send me an email. Would love to help.

Who Do I Believe?

Posted on February 16, 2016February 17, 2016 by Kelly aka LadyOTrout

With actual “person to person” communication becoming a rarity these days, everything seems to be done by robots or people in foreign countries that cannot speak the language of the majority of the customer base of the companies they “represent.” Calling the cable company? I did once, was on the phone for over an hour, I even had to charge my cell phone in the process. Only to speak to “Ricky” who spoke little or no English and in the end, did not help me. It is no wonder we have no idea what or who to believe anymore!

When “They” Call You or Email You

The IRS continues to warn people about a telephone and email “phishing” scam that has been going on for a few years and ramps up around tax time. Below are some links to help in being able to SPOT such a scheme. First and foremost – the IRS won’t initiate a phone call to you or email you out of the clear blue sky. Here are some links below to some evidence:

You Have the Power

YOU know this information now and don’t have to become a victim. Tell your friends, share this post and follow us on Facebook. Technology is not to be feared. We just want to help you in understanding and to use it to your advantage! Don’t be fooled and remember, breathe.

Meditation Isn’t Just for Hippies

Posted on February 12, 2016February 12, 2016 by Kelly aka LadyOTrout

Back in the late 60’s, the Beatles blew the lid off of this “thing” called Meditation. They met this man, Maharishi Mahesh Yogi and learned about Transcendental Meditation and if you were paying attention to what the Beatles were doing at the time, at best it seemed weird and worst it seemed sorta creepy. What is happening with these musicians? This and Woodstock would certainly make a person stop and know something new was going on!

Scientific Proof

There is proof that meditation actually CHANGES how your brain responds. Psychology Today talks about this in great detail. But the important thing isn’t how long you meditate, if you sit cross legged or make funny chant sounds that scare the dog, it is that you START.

How To Start

Anywhere. This blog focuses on how to make technology work for you. This post is no different. There are many apps available that you can download many for FREE to start Meditating. Using a “Guided” type first was most helpful when I started. I have written about Andrew Johnson before, he has great apps and downloadable audio files for relaxation of all types. There are also other free ones, in both the Apple App and Google Play Stores for your phone or mobile device.

Latest one I am trying is “Guided Journey,” you can pick the setting (like the beach or forest) and the time that you would like to Meditate: 1 minute to :59 Minutes. The sounds of the setting you pick (waves, etc.) and a very sweet voice “guides” you through a visualization that helps focus you away from all the jumbled thoughts you have and onto something else to help you clear your head. Just follow along. It is that easy.

Keep On Keepin’ On

Start with short intervals and try to sit at the same time(s) during the day. I started with 2 minutes, twice a day for the first week. The second week I tried 4 minutes and so on. Do what works for you. I “sit” in the morning, first thing still in my PJ’s and at night after I am ready to go to bed, but before I am in bed.

I also have used these apps when I was in a stressful situation, I have my phone with me so when I was waiting in a waiting room while my Mom was in the Operating Room. It was a great way to stay calm and feel fresh and focused. Then if you really get into it, you may want to start meditating in a group, but for now, just START.

I am a big believer in Meditation for just about everything. Great option to try before turning to medication. If you have any questions, like always please drop me an email and I am happy to help.

Having Fun Exercising Your Brain

Posted on February 10, 2016February 17, 2016 by Kelly aka LadyOTrout

Let’s face it, we all do it. Sit in front of the TV, space out. Sitting at a Doctor’s office or picking up someone, waiting. Twiddling your thumbs. How about using that time productively?

Puzzles, Crosswords, Sudoku like the books we bought in the Drug Store to play at camp, have really improved these days. If you have a smartphone or a tablet, you can occupy your time as well as exercise your brain like never before. And the possibilities are endless, there are free ones and there are games that you pay a subscription fee to use. But I always try the free ones first to see if I will really enjoy them. I don’t mind paying for something I really am going to use.

What’s the Point?

If you have never had a brain injury or a stroke you may think this is silly. But if you have or you have been the caregiver of someone you know just how frightening this can be. All of a sudden those things you could do, you can’t. One of the outcomes with my Dad, was his ability to read and do the JUMBLE puzzle. He could read to himself, but he could not read out loud to me. He also had trouble with word finding.

In order to get better, there are lots of exercises that were very simple-but tiring to get the brain to work again. The more you exercise your brain today the better fit your brain is to handle some of the bumps in the road that may cause stroke and memory loss the list goes on from bad to worse. Also, as a population, we aren’t using our brains the same way anymore and if you are retired, it is possible your interactions with the outside world are different also. All of this causes your brain to slow down, get out of shape.

Some Options

Free for Fun games are some of your old favorites but rather than a deck of cards or a book they are on your computer, tablet or phone. These are free games that allow you to play and get a score. Each of these asks for a user name, or email address and a password to play. (Last post discussed having an extra email address – here is a use for that spare account that promotional materials can go to!)

Subscriptions (paying a little each month), may make you nervous but if you are serious about mental fitness, want to keep track of how you are doing, then a subscription site is worth considering, many sites allow for family plans. You may play the same games over again and watch your progress. This is also helpful information for sharing with your Doctor. Manufacturers also consistently introducing new games to try. For the price of one movie ticket a month there may be an option out there for you.

Let’s Play!

AARP – whether you are a member or not has free brain games and here is a link.
CNN- even has a free game area here.
Lumosity – Brain Games and Brain Training is the one you have heard of has a free evaluation tool and a subscription option.
Rosetta Stone has Fit Brain for focus, memory and brain speed also has a “try before you buy” option.

There are lots more if you go to the App Stores, Apple, Google or Amazon and browse around. Get them on your mobile device, keeping your brain and memory fit is as close as your purse or briefcase!

JUST What I need ONE MORE thing in my In-Box

Posted on January 5, 2016January 5, 2016 by Kelly aka LadyOTrout

We all get spam or emails from companies we have never heard of and have no interest in doing business with. Even though most of these emails are supposed to be “Permission Based,” which means you have given permission for them to send you emails. Sometimes we give permission without realizing we have or we have given permission and once we see the offers/messages we do not find them interesting.

Help Yourself

You can help yourself first off by paging to the bottom of the message and click on the UNSUBSCRIBE button. And theoretically, the list deletes your name and the next email that gets sent you wont receive. But you must be the one to unsubscribe and click that link.

“Special” Email Address

I mentioned in a couple posts before this, that it may be helpful to create a separate email account for Offers, Coupons, Etc. Gmail accounts are free. You can check that separate account only when you have time, or in the mood.

Not All Newsletters and Notifications are Created Equal

An important newsletter or notification that is especially valuable is one that your town or city puts out. Most Towns and Cities now have Facebook pages too. The City of Bangor Public Works Department has their own notifications for construction, parking bans, leaf pickup, holiday trash collection schedule. It is a great help to have that accessible. Then I don’t have to go look for it, because chances are I won’t and I will miss something important. Every town/city is different, but most often you can go to the home page of the website and sign up there, make sure you follow the instructions.

If you don’t see anything on the website, take a moment call the office and ask or send your local Councilor or Selectman an email requesting this. From their point of view, it saves phone calls answering the same questions and from your point of view, you get the help you need, when you need it.

Techno-Trapped at 50 North

Helping Us Gen-Xers Sort Through the Jungle of Technology

Author: Kelly aka LadyOTrout

Gootloader infection cleaned up