attention! urgent! virus on auctiva.com; Trojan-Clicker.HTML.IFrame.kr

Thanks DAnno. I would do all that but for some strange reason the calendar in my system restore will only let me choose Feb 20/21/22 (those are the only bold dates) and that's when this whole virus started. So now what to do? I can't even restore.

My Norton has been showing Virus alerts for 3 days. One medium risk = atlsystem _____ (with numbers after it) "is attempting to connect to a DNS server". One HIGH RISK = Virus Name "Downloader" (the past two days the high risk virus name was "trojanmalscript!html" Apparently NOrton can't get rid of it (unable to repair this file). I even went to malbytes? - something like that, the other day and scanned it it can't get rid of it either.

This thing is really huge, huh? I have no idea. I'm lost here! I just know I gotta work or there's no money for bills.

Hi womandi,

That does sound ugly.

Check January for any bold dates (use the back-arrow key on the calendar). If you run normal Windows Update installs, you should have gotten a February update around the 11th??? However, I'm hoping you at least have the January update.

Danno

18 hours and not a word from Auctiva on an update. Thanks a bunch. I have about 100 auctions ending tonight using Auctiva checkout. This is going to be real hard to explain to buyers and it is just ridiculous.

Hello ANYBODY OUT THERE AUCTIVA?

It's hit the press.

http://blog.auctionbytes.com/c...09/2/1235318918.html

Maybe they have thrown in the towel? It is very strange not to hear from them.

And Jeff is telling everybody there the exact opposite of what we get here. We are to disable are warning systems in our browser, according to them, and he is tell everybody in the press to make sure thery are up to date and turned on. HELLO!!!

As an aside, I am sure tonight that telling buyers to turn off their virus warnings and and forward me money through their Paypal account is going to work just fine. YEA RIGHT!

There is a new message from Mike at Auctiva support up at 9:09 stating they are aware of several issues causing site slowness and that they are working on them. DUH, THE PROBLEM ISN'T SLOWNESS!!! ITs the virus warning problems!

Getting real frustrating and more than a little PO'd

And while I am ranting, how about taking the CHECKOUT SYSYSTEM DOWN UNTIL THIS IS RESOLVED!!!

I would rather have to deal with ebay and Paypal invoices than folks thinking I am trying to steal their passwords and cash!

I just tried inkfrog but it is a real disaster compared to auctiva. This is a real nightmare all the way across the board. Is it safe to list with auctiva or is there actually a virus risk? I am going to lose an entire week here. I can find nothing to compare to auctiva and it's ease of use. any ideas?

Still waiting to hear from a legal speaking agent for Auctiva regarding whether or not our personal information has been compromised.

I have looked at both inkFrog and Vendio and have not come up with a viable alternative. InkFrog to small and cumbersome, Vendio to expensive but Auctiva's track record over the last 2 months has got me looking for the first time in about 4 years. I can't afford this every weekend and the support here has been slightly less than acceptable recently, relying on understatement ther to make the point.

I am going to list through auctiva for tonight. SCREW IT I can find no viable alternative. If it works I can make enough money to replace a damaged computer or buy a new windows copy. I am just plain sick. This is the best site I have ever found and now this. Are auctions posting?

No, you currently cannot, list, schedule or save auctions. For all intents and purposes Auctiva is down save this board and getting error messages on attmepts to do anything else.

I use firefox and the only problem I have is when supersizing a picture. Then the red page of death comes up. People are bidding like crazy on my current auctions. I do not use auctiva checkout. The templates and small pictures work just fine.

Hi,

If my posted steps help, please feel free to repost. I did the restore Friday and that system is still working fine today and rescans clean.

I wrote-down what I did from memory not thinking this might be a killer problem, so if anyone wants to add info, suggestions, or make corrections...please do.

I'm am staying off the Auctiva site until it gets a complete rescan by Google.

If you have a commercial Firewall product that can block specific addresses or URLs, a block list posted might help. Google suggests that

me9x.cn [121.14.137.36] and luckffxi.com [67.229.127.42]

are noted candidates to block.

Danno

Auctiva may have thought they fixed the virus alerts but I have gotten three e-mails today from customers getting the alert when trying to look at the posted photos in my auctions. This is turning into a nightmare.. Mike

Finally got a listing to save after hours of frustration. Maybe, just maybe, there is a glimmer of hope but I ain't holding my breath

Hi Folks,

I just got news from a Seller friend that attempting to use System Restore was blocked by the malware. In their case, they waited too long and the malware had corrupted the system to the point that they had to work with Norton over the phone to get the malware removed. Their Norton AV had been giving alerts for two days.

(Note: I shut my system down within minutes of detecting the infection and got it off the net before it got to that condition.)

Norton told them they are "swamped" with cases, and it sounds like it may be more than just Auctiva under attack.

Danno

Edit: It looks like Google rescanned the site in the last hour. Their Safe Browsing page shows this update.

Of the 49 pages we tested on the site over the past 90 days, 5 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-02-22, and the last time suspicious content was found on this site was on 2009-02-21.

I have been able to list right along. Listed 5 aucitons last night and several this morning. I normally use firefox, but used IE to list yesterday and today.

I do admit to being paranoid aobut it. I ran my virus scan twice yesterday, before and after listing on aucitva. And I ran Microsoft Malicious Software Removal tool today. No issues were found on my computer by McAfee or Microsoft. And a check of McAfee shows that their scan of the Aucitva site today found it free of viruses, malware and spyware.

Google may have rescanned but when I go to Auctiva using Firefox, I still get the "RED DEATH" warning.