attention! urgent! virus on auctiva.com; Trojan-Clicker.HTML.IFrame.kr

Thanks DAnno. I would do all that but for some strange reason the calendar in my system restore will only let me choose Feb 20/21/22 (those are the only bold dates) and that's when this whole virus started. So now what to do? I can't even restore.

My Norton has been showing Virus alerts for 3 days. One medium risk = atlsystem _____ (with numbers after it) "is attempting to connect to a DNS server". One HIGH RISK = Virus Name "Downloader" (the past two days the high risk virus name was "trojanmalscript!html" Apparently NOrton can't get rid of it (unable to repair this file). I even went to malbytes? - something like that, the other day and scanned it it can't get rid of it either.

This thing is really huge, huh? I have no idea. I'm lost here! I just know I gotta work or there's no money for bills.

Hi womandi,

That does sound ugly.

Check January for any bold dates (use the back-arrow key on the calendar). If you run normal Windows Update installs, you should have gotten a February update around the 11th??? However, I'm hoping you at least have the January update.

Danno

18 hours and not a word from Auctiva on an update. Thanks a bunch. I have about 100 auctions ending tonight using Auctiva checkout. This is going to be real hard to explain to buyers and it is just ridiculous.

Hello ANYBODY OUT THERE AUCTIVA?

It's hit the press.

http://blog.auctionbytes.com/c...09/2/1235318918.html

Maybe they have thrown in the towel? It is very strange not to hear from them.

And Jeff is telling everybody there the exact opposite of what we get here. We are to disable are warning systems in our browser, according to them, and he is tell everybody in the press to make sure thery are up to date and turned on. HELLO!!!

As an aside, I am sure tonight that telling buyers to turn off their virus warnings and and forward me money through their Paypal account is going to work just fine. YEA RIGHT!

There is a new message from Mike at Auctiva support up at 9:09 stating they are aware of several issues causing site slowness and that they are working on them. DUH, THE PROBLEM ISN'T SLOWNESS!!! ITs the virus warning problems!

Getting real frustrating and more than a little PO'd

And while I am ranting, how about taking the CHECKOUT SYSYSTEM DOWN UNTIL THIS IS RESOLVED!!!

I would rather have to deal with ebay and Paypal invoices than folks thinking I am trying to steal their passwords and cash!

I just tried inkfrog but it is a real disaster compared to auctiva. This is a real nightmare all the way across the board. Is it safe to list with auctiva or is there actually a virus risk? I am going to lose an entire week here. I can find nothing to compare to auctiva and it's ease of use. any ideas?

Still waiting to hear from a legal speaking agent for Auctiva regarding whether or not our personal information has been compromised.

I have looked at both inkFrog and Vendio and have not come up with a viable alternative. InkFrog to small and cumbersome, Vendio to expensive but Auctiva's track record over the last 2 months has got me looking for the first time in about 4 years. I can't afford this every weekend and the support here has been slightly less than acceptable recently, relying on understatement ther to make the point.

I am going to list through auctiva for tonight. SCREW IT I can find no viable alternative. If it works I can make enough money to replace a damaged computer or buy a new windows copy. I am just plain sick. This is the best site I have ever found and now this. Are auctions posting?

No, you currently cannot, list, schedule or save auctions. For all intents and purposes Auctiva is down save this board and getting error messages on attmepts to do anything else.

I use firefox and the only problem I have is when supersizing a picture. Then the red page of death comes up. People are bidding like crazy on my current auctions. I do not use auctiva checkout. The templates and small pictures work just fine.

Hi,

If my posted steps help, please feel free to repost. I did the restore Friday and that system is still working fine today and rescans clean.

I wrote-down what I did from memory not thinking this might be a killer problem, so if anyone wants to add info, suggestions, or make corrections...please do.

I'm am staying off the Auctiva site until it gets a complete rescan by Google.

If you have a commercial Firewall product that can block specific addresses or URLs, a block list posted might help. Google suggests that

me9x.cn [121.14.137.36] and luckffxi.com [67.229.127.42]

are noted candidates to block.

Danno

Auctiva may have thought they fixed the virus alerts but I have gotten three e-mails today from customers getting the alert when trying to look at the posted photos in my auctions. This is turning into a nightmare.. Mike

Finally got a listing to save after hours of frustration. Maybe, just maybe, there is a glimmer of hope but I ain't holding my breath

Hi Folks,

I just got news from a Seller friend that attempting to use System Restore was blocked by the malware. In their case, they waited too long and the malware had corrupted the system to the point that they had to work with Norton over the phone to get the malware removed. Their Norton AV had been giving alerts for two days.

(Note: I shut my system down within minutes of detecting the infection and got it off the net before it got to that condition.)

Norton told them they are "swamped" with cases, and it sounds like it may be more than just Auctiva under attack.

Danno

Edit: It looks like Google rescanned the site in the last hour. Their Safe Browsing page shows this update.

Of the 49 pages we tested on the site over the past 90 days, 5 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-02-22, and the last time suspicious content was found on this site was on 2009-02-21.

I have been able to list right along. Listed 5 aucitons last night and several this morning. I normally use firefox, but used IE to list yesterday and today.

I do admit to being paranoid aobut it. I ran my virus scan twice yesterday, before and after listing on aucitva. And I ran Microsoft Malicious Software Removal tool today. No issues were found on my computer by McAfee or Microsoft. And a check of McAfee shows that their scan of the Aucitva site today found it free of viruses, malware and spyware.

Google may have rescanned but when I go to Auctiva using Firefox, I still get the "RED DEATH" warning.

It is working OK for me. I did a little trick copy and pasting to get some done using ebay but Auctiva seems good again. I krrp running Norton and it comes up clean. One day the whole web is going to go POOF.

I just checked in Firefox and the Red Reported Attack screen is still coming up.

quote:

Originally posted by Mikebiker:
I am going to list through auctiva for tonight. SCREW IT I can find no viable alternative. If it works I can make enough money to replace a damaged computer or buy a new windows copy. I am just plain sick. This is the best site I have ever found and now this. Are auctions posting?

Well, I have been listing since 7 pm Eastern time last night. I got 59 up last night and a few more today. I don't have the virus and the only error or problem I am having is the enlarging picture warning others are talking about. I don't know if I am "lucky" as far as what servers I am working from or whether it is the fact that I did not list anything Friday or early Saturday.

Anyway, I will continue to list. I will also continue to virus scan. My AVG antivirus did warn me of the site early Saturday and I didn't go on-just went back later and listed, so it's not a matter of just not finding it.

Something killed a laptop yesterday but I do not think it was auctiva. Today is getting better all the time.

I've swapped to Internet Explorer - working fine for listings and sending to ebay ok. Checked ebay in Firefox and listings ok. Just don't select supersize image for now and your customers won't get the red warnings and you might be able to carry on using Auctiva whilst the problem is sorted.
Do check your image folder for unwanted photos -I had 2 that weren't added by me, so deleted immediately - countercredit.gif & deadflashcounter.jpg so beware and check your image folder.
My AVG picked up the trojan on Saturday.
Perhaps I'm just lucky to list at the moment??

Well I can tell you that I have lost NUMEROUS sales this weekend over this. People emailing and people complaining. This has been the worst so far.

I take back my earlier post of staying with Auctiva... I would much rather pay and feel secure than have a weekend like this. Especially since people are getting their Income Tax and finally spending!

This is absolutley ridiculous.

It's a bit naive to think that just because you pay, the site is going to be more secure. That hasn't proven true of any software in history. This could have happened to any site, pay or no pay. They can catch most of the stuff most of time, but no one can catch everything all of the time. In the 2 years I've been using Auctiva, this hasn't happened until yesterday. But I remember Ebay being attacked, at least once. BIG services can be compromised--little services can be compromised. For-pay and free services can be compromised. Never for a moment think that anything you use over the net is completely safe.

Yes, it's terrible, and probably MOST of us have lost potential customers due to this attack, but there's absolutely no reason to consider it anything other than one of the unavoidable risks of working over the internet. If you had a physical store, it would be at risk of falling prey to theft, vandalism, natural disaster, people crashing their cars into the building, and other various problems. These things can happen, and every once in a while, they do.

Yes I too would like to know how to turn it off. My sales are not suffering in the least. No complaints just bids and lots of them.

WingedWolfPsion is correct. There is nothing on the net that is 100% safe just as there is nothing in life that is 100% safe no matter how many safeguards you take.

I have been extremely frustrated and perturbed today but I can also remember sometime in January when it took the US Postal Service 4 days to bring their site and Click-N-Ship back on line after it failed on a Sunday evening.

If you look in the News area, Mike from support posted something about 2 hours ago. Once I cleared all the private data and stuff on my machines, Firefox has no problem getting into Auctiva without the "Red Death" warning.

Back to attempting to get one more thing ready to list before calling it a day

Yes I agree... everything is a chance. I guess I am just extremely frustrated due to answering emails on this and really not having correct information.

And then the thought of them telling to just "turn it off" does not sit good with me.

I listed 3 items today on auctiva.

I had two people check one of my listings.

One person checked through IE and it shows no warnings.

BUT the other person checked a listing through Google Chrome, and got this warning as soon as he scrolled down to look at my photos...

Warning: Visiting this site may harm your computer!The website at cgi.ebay.com contains elements from the site backupinfo.auctiva.com, which appears to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.For detailed information about the problems with these elements, visit the Google Safe Browsing diagnostic page for backupinfo.auctiva.com.Learn more about how to protect yourself from harmful software online

I am pulling my auctions!

I just checked my own auctions through google chrome and Igot the warning!

Ok I checked the one I listed through ebay, from Google Chrome, and I get the same warning???

Is it because the auctiva scrolling gallery is still in my listing even though I listed through ebay?

How do I disable the scrolling gallery in that auction?

The malware is GONE, folks.

People are getting the warning from Google and Firefox because they (Google & FF) haven't updated their scans yet.

I've been working on my Auctiva listings most of the day without problem. Don't know whether I happen to be on a good server or what, but other than some slowness which has improved throughout the day, I haven't had any problems.

If you want to work on your listings there's nothing to stop you now.

The problem is Google Chrome and Firefox are still giving potential buyers the warning.

Until this is done...who is going to buy from my site?

I cant even list through ebay, because if my item is looked at through either of those two browsers, I get the warning because the scrolling gallery is there.

quote:

Until this is done...who is going to buy from my site?

Nobody is. Would you? It appears that we personally are attacking a possible customers computer. Customers are running away.

Until it's fixed I will not be able to make a living listing on eBay. Thanks god there's Craigslist.

Nope, I wouldnt either.

I may have to look into craigs list.

quote:

Originally posted by Mikebiker:
I am going to list through auctiva for tonight. SCREW IT I can find no viable alternative. If it works I can make enough money to replace a damaged computer or buy a new windows copy. I am just plain sick. This is the best site I have ever found and now this. Are auctions posting?

I am on the old computer. And I can't take anymore time off. I did a bunch of listings yesterday. But, deleted them because this. But, I have certain bills that need to be paid on certain days. I know appoximately how many listings to get the $$ I need. This week - my mortgage - which I am still a mont behind because I had to pay for part of my son's surgery in December. So, I may not be getting any sleep tonight. But, my lender probably would not accept "I can't pay because I had a computer virus.

If you're able to access and work on your listings here, I don't see why you wouldn't go ahead and list them. I wouldn't list 1 or 3 day auctions but 7 or 10 day listings should be fine. In other words, Google is going to update their scan eventually, and probably sooner than later.

Once again, the malware is gone. Any warnings you or your customers are getting are false alarms caused by Google's lag in updating its information. Nobody's getting infected from your listings.

rubberduckproductions: i saw your post over on the powerseller board. i too thought it was funny how something actually helpful being posted is avoided in favor of high drama. lol.

wingedwolfpsion: right on.

...on my own system.. i haven't gotten a single virus warning through any of this. i use ie and i also use customized auctiva templates....auctiva templates that i have customized to insert larger images imbedded right into the body of my description rather than the sized/super sizeable images that auctiva offers. ....i am wondering if this is why i haven't gotten any virus warnings?? ....what is disturbing is how low sales were tonight. ..guess that means that my potential customers ARE seeing the warnings when they click in to my auctions ..even if i haven't seen any of the warnings on my own system.. ??

...i sure do hope the auctiva team gets this resolved soon. i feel for them. don't you just know they are all about ready to pack it in? ...i say we show them a little support. i wouldn't want to be in their shoes right now.