Gootloader infection cleaned up

Uncategorized Comments Off on Gootloader infection cleaned up

Dear blog owner and visitors,

This blog had been infected to serve up Gootloader malware to Google search victims, via a common tactic known as SEO (Search Engine Optimization) poisioning. Your blog was serving up 291 malicious pages. Your blogged served up malware to 0 visitors.

I tried my best to clean up the infection, but I would do the following:

  • Upgrade WordPress to the latest version (one way the attackers might have gained access to your server)
  • Upgrade all WordPress themes to the latest versions (another way the attackers might have gained access to your server)
  • Upgrade all WordPress plugins (another way the attackers might have gained access to your server), and remove any unnecessary plugins.
  • Verify all users are valid (in case the attackers left a backup account, to get back in)
  • Change all passwords (for WordPress accounts, FTP, SSH, database, etc.) and keys. This is probably how the attackers got in, as they are known to brute force weak passwords
  • Run antivirus scans on your server
  • Block these IPs (5.8.18.7 and 89.238.176.151), either in your firewall, .htaccess file, or in your /etc/hosts file, as these are the attackers command and control servers, which send malicious commands for your blog to execute
  • Check cronjobs (both server and WordPress), aka scheduled tasks. This is a common method that an attacker will use to get back in. If you are not sure, what this is, Google it
  • Consider wiping the server completly, as you do not know how deep the infection is. If you decide not to, I recommend installing some security plugins for WordPress, to try and scan for any remaining malicious files. Integrity Checker, WordPress Core Integrity Checker, Sucuri Security,
    and Wordfence Security, all do some level of detection, but not 100% guaranteed
  • Go through the process for Google to recrawl your site, to remove the malcious links (to see what malicious pages there were, Go to Google and search site:your_site.com agreement)
  • Check subdomains, to see if they were infected as well
  • Check file permissions

Gootloader (previously Gootkit) malware has been around since 2014, and is used to initally infect a system, and then sell that access off to other attackers, who then usually deploy additional malware, to include ransomware and banking trojans. By cleaning up your blog, it will make a dent in how they infect victims. PLEASE try to keep it up-to-date and secure, so this does not happen again.

Sincerly,

The Internet Janitor

Below are some links to research/further explaination on Gootloader:

https://news.sophos.com/en-us/2021/03/01/gootloader-expands-its-payload-delivery-options/

https://news.sophos.com/en-us/2021/08/12/gootloaders-mothership-controls-malicious-content/

https://www.richinfante.com/2020/04/12/reverse-engineering-dolly-wordpress-malware

https://blog.sucuri.net/2018/12/clever-seo-spam-injection.html

This message


Environmental Protection and Enhancement Act – Notice of Application

Public Notices Comments Off on Environmental Protection and Enhancement Act – Notice of Application

Installation of the rural water system in the Gem area completed

Latest News, Public Notices Comments Off on Installation of the rural water system in the Gem area completed

The County of Newell has completed installation of the rural water system in the Gem area and residents may make appointments for connection.

This represents the completion of both the Regional and Rural water systems.


Bassano and Tilley Bulk Water Station are now in operation

Archive Comments Off on Bassano and Tilley Bulk Water Station are now in operation

Newell Regional Services Corporation will be operating 2 new Bulk Water stations in the County of Newell. The new Bulk Water Stations are located in Bassano and Tilley. You must have a Customer number and Pin number issued by Newell Regional Services Corporation to access these locations. There are no cash Bulk Water stations available at these locations. If you currently have a Bulk Water account with Newell Regional Services Corporation your current Customer number and Pin number will let you access these new locations. If you require an account to access these new locations you must apply for an account with Newell Regional Services Corporation. Our office is located at 330 Canal St in Brooks and you can apply for an account at that location. If you have any questions or concerns please call (403)794-4000 or email info@nrsc.ca.


Notice to the Residents of the Town of Bassano

Archive Comments Off on Notice to the Residents of the Town of Bassano

Newell Regional Services Corporation and various contractors have been working together to complete all of the work required to bring potable water to Bassano. The contract to complete the booster pumps, in Rosemary, has been completed and since Friday, December 12, the transmission main to Bassano has begun to be flushed and chlorinated. NRSC had anticipated that water could be delivered to Bassano as early as mid-December.

However, flushing of the transmission main and disinfection has to occur before the main can be put into service. NRSC will not risk the health and safety of any residents with regards to safe drinking water. Flushing did begin but due to the holiday season, staff vacations and other support systems (Provincial Lab, equipment representatives, etc) not being readily available, we have decided that water will not be available until after the New Year. We will continue to operate the existing water treatment plant in Bassano until we are completely satisfied that water delivered from the Regional Water Treatment Plant is safe and meets all drinking water standards.

Once again, NRSC wishes to provide you with information concerning the disinfection process.

Since, October 2012, NRSC has been using a method of water disinfection with the addition of ammonia to chlorine to change the disinfection process to chloramines. Chloramines are proven to be very effective in the treatment of water that has to travel long distances from the treated source to the end user.

Chloramines have been approved for use by Health Canada, Alberta Health and Alberta Environment. NRSC meets and exceeds all Canadian Drinking Water Quality Standards. Those standards are rigorously monitored by our treatment plant operators, Alberta Health Services and Alberta Environment.

However, chloramines are required to be removed from water for those that are practicing home hemodialysis (kidney dialysis). Alberta Health Services monitors those home patients.

For those that have fish in home aquariums, chloramines should also be removed from the water. Chloramines can be removed using chemicals or a carbon filter before water is introduced into a fish tank or removed using special drops that are available at local pet stores.

If you require further information on chloramines please see our website at: www.nrsc.ca.

On the site are FAQ’s and Answers, directions to Health Canada and other water authorities in Canada and the United States.

NRSC welcomes all Town of Bassano residents and our system operators are keen to provide a Safe, Secure and Sustainable water System as well as dependable and excellent Service!


Notice to the Residents & Bulk Water Users of the Town of Bassano

Archive Comments Off on Notice to the Residents & Bulk Water Users of the Town of Bassano

The water transmission main from Newell Regional Services- Water Treatment Plant

in Brooks, to the Town of Bassano has been completed!

We are now building a pump station to increase the water flow and pressure to the Town of Bassano.

It is anticipated that by early December

Newell Regional Services Corporation (NRSC) will begin to supply water to the Town of Bassano

Further information on the exact date will be forthcoming.

Since, October 2012, NRSC has been using a method of water disinfection with the addition of ammonia to chlorine to change the disinfection process to chloramines. Chloramines are proven to be very effective in the treatment of water that has to travel long distances from the treated source to the end user.

Chloramines have been approved for use by Health Canada, Alberta Health and Alberta Environment. NRSC meets and exceeds all Canadian Drinking Water Quality Standards. Those standards are rigorously monitored by our treatment plant operators, Alberta Health Services and Alberta Environment.

However, chloramines are required to be removed from water for those that are practicing home hemodialysis (kidney dialysis). Alberta Health Services monitors those home patients.

For those that have fish in home aquariums, chloramines should also be removed from the water. Chloramines can be removed using chemicals or a carbon filter before water is introduced into a fish tank or removed using special drops that are available at local pet stores.

If you require further information on chloramines please see our website at: www.nrsc.ca.

On the site are FAQ’s and Answers, directions to Health Canada and other water authorities in Canada and the United States.

NRSC welcomes all Town of Bassano residents and our system operators are keen to provide a Safe, Secure and Sustainable water System as well as dependable and excellent Service!

Ralph Havinga
General Manager


Notice to the Residents & Bulk Water Users of the Village of Rosemary

Archive Comments Off on Notice to the Residents & Bulk Water Users of the Village of Rosemary

The water transmission main from the Newell Regional Water Services- Water Treatment Plant in Brooks, to the Village of Rosemary has been completed!

For residents safety we are performing bacteriological testing.

It is anticipated that on Monday, September 22 Newell Regional Services Corporation (NRSC) will begin to supply water to the Village of Rosemary

Since, October 2012, NRSC has been using a method of water disinfection with the addition of ammonia to chlorine to change the disinfection process to chloramines. Chloramines are proven to be very effective in the treatment of water that has to travel long distances from the treated source to the end user.

Chloramines have been approved for use by Health Canada, Alberta Health and Alberta Environment. NRSC meets and exceeds all Canadian Drinking Water Quality Standards. Those standards are rigorously monitored by our treatment plant operators, Alberta Health Services and Alberta Environment.

However, chloramines are required to be removed from water for those that are practicing home hemodialysis (kidney dialysis). Alberta Health Services monitors those home patients.

For those that have fish in home aquariums, chloramines should also be removed from the water. Chloramines can be removed using chemicals or a carbon filter before water is introduced into a fish tank or removed using special drops that are available at local pet stores.

If you require further information on chloramines please see our website at: www.nrsc.ca.

On the site are FAQ’s and Answers, directions to Health Canada and other water authorities in Canada and the United States

NRSC welcomes all Village of Rosemary residents and we are keen to provide a Safe, Secure and Sustainable water System as well as dependable and excellent Service!

Ralph Havinga
General Manager


Notice to the Residents Of the Village of Rosemary

Archive Comments Off on Notice to the Residents Of the Village of Rosemary

The water transmission main from the Newell Regional Water Services- Water Treatment Plant in Brooks, to the Village of Rosemary has almost been completed!

For residents safety we are performing pressure testing, flushing and bacteriological testing.

It is anticipated that around Monday, September 15 Newell Regional Services Corporation (NRSC) will begin to supply water to the Village of Rosemary

Further information on the exact date will be forthcoming.

Since, October 2012, NRSC has been using a method of water disinfection with the addition of ammonia to chlorine to change the disinfection process to chloramines. Chloramines are proven to be very effective in the treatment of water that has to travel long distances from the treated source to the end user.

Chloramines have been approved for use by Health Canada, Alberta Health and Alberta Environment. NRSC meets and exceeds all Canadian Drinking Water Quality Standards. Those standards are rigorously monitored by our treatment plant operators, Alberta Health Services and Alberta Environment.

However, chloramines are required to be removed from water for those that are practicing home hemodialysis (kidney dialysis). Alberta Health Services monitors those home patients.

For those that have fish in home aquariums, chloramines should also be removed from the water. Chloramines can be removed using chemicals or a carbon filter before water is introduced into a fish tank or removed using special drops that are available at local pet stores.

If you require further information on chloramines please see our website at: www.nrsc.ca.

On the site are FAQ’s and Answers, directions to Health Canada and other water authorities in Canada and the United States.

NRSC welcomes all Village of Rosemary residents and we are keen to provide a Safe, Secure and Sustainable water System as well as dependable and excellent Service!


City of Brooks to Patricia and Rosemary Water Transmission Main

Archive Comments Off on City of Brooks to Patricia and Rosemary Water Transmission Main

In April 2010, Newell Regional Services Corporation signed a contract with a pipeline contractor to install the water transmission main from the City of Brooks to Patricia and Rosemary. The pipeline was completed to Patricia and put into service in April 2012.

The pipeline to Rosemary presented many challenges to the contractor and as a result Newell Regional Services made a claim on the bonding company of the contractor to complete the project. The process to make a claim can be long however the legal work is complete and a new contract has been awarded to complete the project. In June 2014 the completion project was started and has a completion date of October. There will be some modifications to the existing plant in Rosemary. Modifications have been completed in Bassano.

Newell Regional Services Corporation looks forward to completion of the pipeline to Rosemary and the delivery of potable water to both the Village of Rosemary and the Town of Bassano. We anticipate this to happen in 2014. It has been a long wait but patience has its rewards. We also look forward to connecting the rural residents in the Rosemary, Bassano and Gem areas.

Many thanks to landowners along the route for their cooperation and patience. This will be the second time they have experienced disruption along the pipeline route.

There have been many agencies, regulators, oil and gas well and pipeline owners, government jurisdictions and various groups that have lent their support to the project. Hats off to all of the landowners that have been directly affected by pipeline installations.

Further information will be coming as we get closer to completion.


See our career section for a new job posting

Archive Comments Off on See our career section for a new job posting