Reply to "attention! urgent! virus on auctiva.com; Trojan-Clicker.HTML.IFrame.kr"

dannoMember

Hi,

If my posted steps help, please feel free to repost. I did the restore Friday and that system is still working fine today and rescans clean.

I wrote-down what I did from memory not thinking this might be a killer problem, so if anyone wants to add info, suggestions, or make corrections...please do.

I'm am staying off the Auctiva site until it gets a complete rescan by Google.

If you have a commercial Firewall product that can block specific addresses or URLs, a block list posted might help. Google suggests that

me9x.cn [121.14.137.36] and luckffxi.com [67.229.127.42]

are noted candidates to block.

Danno

2/22/0910:36 AM

<ul id="{%=id%}ButtonGroup" class="button-group h-popup-buttons even-button-group even-1">
    <li id="{%=id%}Okay_buttonContainer"><a id="{%=id%}Okay" href="javascript:void(0);" class="button success no-margin-bottom h-alert-modal-ok-button" role="button">OK</a><script type="text/javascript">
        (function() {
            function {%=id%}Okay_click(event, data) {
            {%=id%}Popup.hide();
        }
        
                $('#{%=id%}Okay').on('click', {%=id%}Okay_click);
        })();
    </script></li></ul><a href="javascript:void(0);" class="close-reveal-modal" aria-label="Close Modal">&#215;</a><div class="last-modal-focus focus-utility-element" tabindex="0"></div>
</div>
<script type="text/javascript">
        (function() {
            {%=id%}Popup = new SS.Popup.ModalPopup('{%=id%}');
        })();
    </script>

Skip to main content

Membership Required

Remove From Your Block List

Manage Follow Preferences

Block

Please wait...