Reply to "attention! urgent! virus on auctiva.com; Trojan-Clicker.HTML.IFrame.kr"

dannoMember

Hi Folks,

I just got news from a Seller friend that attempting to use System Restore was blocked by the malware. In their case, they waited too long and the malware had corrupted the system to the point that they had to work with Norton over the phone to get the malware removed. Their Norton AV had been giving alerts for two days.

(Note: I shut my system down within minutes of detecting the infection and got it off the net before it got to that condition.)

Norton told them they are "swamped" with cases, and it sounds like it may be more than just Auctiva under attack.

Danno

Edit: It looks like Google rescanned the site in the last hour. Their Safe Browsing page shows this update.

Of the 49 pages we tested on the site over the past 90 days, 5 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-02-22, and the last time suspicious content was found on this site was on 2009-02-21.

2/22/0912:39 PM

<ul id="{%=id%}ButtonGroup" class="button-group h-popup-buttons even-button-group even-1">
    <li id="{%=id%}Okay_buttonContainer"><a id="{%=id%}Okay" href="javascript:void(0);" class="button success no-margin-bottom h-alert-modal-ok-button" role="button">OK</a><script type="text/javascript">
        (function() {
            function {%=id%}Okay_click(event, data) {
            {%=id%}Popup.hide();
        }
        
                $('#{%=id%}Okay').on('click', {%=id%}Okay_click);
        })();
    </script></li></ul><a href="javascript:void(0);" class="close-reveal-modal" aria-label="Close Modal">&#215;</a><div class="last-modal-focus focus-utility-element" tabindex="0"></div>
</div>
<script type="text/javascript">
        (function() {
            {%=id%}Popup = new SS.Popup.ModalPopup('{%=id%}');
        })();
    </script>

Skip to main content

Membership Required

Remove From Your Block List

Manage Follow Preferences

Block

Please wait...