Comments on: GMER Anti Rootkit & People Power http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/ Antirootkit Software, News, Articles and Forums Fri, 12 Mar 2010 04:27:42 +0000 http://wordpress.org/?v=2.0.4 by: ypigsfly http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-37961 Thu, 26 Jun 2008 07:05:06 +0000 http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-37961 hey, I provide ddos mitigation for sites such as yours that could become a victim to ddos attacks. let me know if you might be interested and we can work something out cheers, Ypigsfly hey,
I provide ddos mitigation for sites such as yours that could become a victim to ddos attacks. let me know if you might be interested and we can work something out

cheers,
Ypigsfly

]]> by: ipl_001 http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-799 Sat, 13 Jan 2007 23:02:01 +0000 http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-799 Hi Steven, steo, EP_X0FF, Cd-MaN, hi everyone, My Website was also attacked after I uploaded a mirror for GMER! Please, stop publishing the mirrors here as all of them (but MajorGeeks and Eraser's) are down! Steo, would you like to remove Eraser (Marco Guiliani)'s URL? Hi Steven, steo, EP_X0FF, Cd-MaN, hi everyone,

My Website was also attacked after I uploaded a mirror for GMER!

Please, stop publishing the mirrors here as all of them (but MajorGeeks and Eraser’s) are down!

Steo, would you like to remove Eraser (Marco Guiliani)’s URL?

]]> by: Aimee http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-798 Sat, 13 Jan 2007 22:11:38 +0000 http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-798 While my site stays up, you can download Gmer from here too: http://www.msfluffymuffin.com/gar/gmer.zip I just hope my poor lil' site stays un-harmed :o( , but I guess no matter what I feel I need to do my part and fight back and stand against these bullies!! I guess if it goes down I will find away to repost Gmer so it can be kept alive for everyone to download and to carry on the good cause :o) Big hugs to our good friend Gmer, Aimee oxo While my site stays up, you can download Gmer from here too:

http://www.msfluffymuffin.com/gar/gmer.zip

I just hope my poor lil’ site stays un-harmed :o ( , but I guess no matter what I feel I need to do my part and fight back and stand against these bullies!!

I guess if it goes down I will find away to repost Gmer so it can be kept alive for everyone to download and to carry on the good cause :o )

Big hugs to our good friend Gmer,

Aimee oxo

]]> by: Kuma http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-742 Fri, 12 Jan 2007 05:53:38 +0000 http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-742 I put the file (gmer) in my server http://www.kuma215.it/GMR.zip I put the file (gmer) in my server

http://www.kuma215.it/GMR.zip

]]> by: steo http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-715 Thu, 11 Jan 2007 02:01:35 +0000 http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-715 Be there in a second...:-) Be there in a second…:-)

]]> by: Steven http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-714 Thu, 11 Jan 2007 01:19:06 +0000 http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-714 I've still got the log's for a day in the life of one of the servers lying round somewhere but it's way too big to send (one of them is 870MB). If you'd like a copy of it, fire me an e-mail and I'll pop it onto HTTP for you .... Do you have access to Malware Research? (we've got a thread going there to share info on what exactly is going on and discussing ways to put a stop to it). I’ve still got the log’s for a day in the life of one of the servers lying round somewhere but it’s way too big to send (one of them is 870MB).

If you’d like a copy of it, fire me an e-mail and I’ll pop it onto HTTP for you ….

Do you have access to Malware Research? (we’ve got a thread going there to share info on what exactly is going on and discussing ways to put a stop to it).

]]> by: steo http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-712 Wed, 10 Jan 2007 23:15:19 +0000 http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-712 Steven, Thanks for the reply. Whats is happening is truly amazing. Do you have any stats that would show the magnitude of the DDoS attacks? On one server i heard there was 50K requests per second! regards Steo Steven,
Thanks for the reply.
Whats is happening is truly amazing.

Do you have any stats that would show the magnitude of the DDoS attacks?

On one server i heard there was 50K requests per second!

regards
Steo

]]> by: Steven http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-711 Wed, 10 Jan 2007 22:53:42 +0000 http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-711 Unfortunately, gmer.it-mate.co.uk was the target of a DDOS (suprise suprise) that apparently ended up taking down the entire FastHosts network, so FH deleted the site .... Similarly, archive.mysteryfcm.co.uk was the target of the same, and unfortunately, had to be deleted (I've already created an alternative, but for obvious reasons, am a little hesitant at publicizing it, so it's URL is only known by a few select individuals at present, as a backup) Unfortunately, gmer.it-mate.co.uk was the target of a DDOS (suprise suprise) that apparently ended up taking down the entire FastHosts network, so FH deleted the site ….

Similarly, archive.mysteryfcm.co.uk was the target of the same, and unfortunately, had to be deleted (I’ve already created an alternative, but for obvious reasons, am a little hesitant at publicizing it, so it’s URL is only known by a few select individuals at present, as a backup)

]]> by: EP_X0FF http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-683 Tue, 09 Jan 2007 11:18:50 +0000 http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-683 All these sites are dead. http://archive.mysteryfcm.co.uk/security/antirootkit/gmer/gmer.htm http://fbeej.dk/gmer/gmer.htm http://www.alexaur.com/anti-rk/ (403: "Forbidden, You don't have permission to access /anti-rk/ on this server") http://martijnc.be/tools/gmer/gmer.htm http://gmer.it-mate.co.uk/gmer.htm I think attackers target is not a GMER as software - GMER as Site. There are few threads on different forums (such as Wilders) about this problem. All these sites are dead.

http://archive.mysteryfcm.co.uk/security/antirootkit/gmer/gmer.htm
http://fbeej.dk/gmer/gmer.htm
http://www.alexaur.com/anti-rk/ (403: “Forbidden, You don’t have permission to access /anti-rk/ on this server”)
http://martijnc.be/tools/gmer/gmer.htm
http://gmer.it-mate.co.uk/gmer.htm

I think attackers target is not a GMER as software - GMER as Site. There are few threads on different forums (such as Wilders) about this problem.

]]> by: steo http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-667 Mon, 08 Jan 2007 17:41:33 +0000 http://www.antirootkit.com/blog/2007/01/07/gmer-people-power/#comment-667 Thanks for the replies guys... Steven, indeed it is and only after a few hours of the post. I am sure that as fast as they are taken down, new ones will be put up. Cd-MaN, great idea :-) One problem with the GMER site being offline is that tampered copies of GMER may start appearing and people should look out for the MD5 and SHA1 values on your blog post. Thanks for the replies guys…

Steven,
indeed it is and only after a few hours of the post. I am sure that as fast as they are taken down, new ones will be put up.

Cd-MaN,
great idea :-)
One problem with the GMER site being offline is that tampered copies of GMER may start appearing and people should look out for the MD5 and SHA1 values on your blog post.

]]>