posted on April 16, 2003 04:43:28 PM new
Heads up...
On Sunday around 3pm we contracted the Backdoor Litmus 2 virus. We are back up today and information is starting to come in to us.
I wanted to pass this on so others can protect themselves. I was contacted by several buyers who can't understand why they are having problems with some of the auctions. Christopher from Vendio pointed out that Ebay was down that same afternoon. One of our FP auctions had unauthorized multiple bids from the same two buyers.
I was also in contact with Symantec Tech support and can pass on this information.
Backdoor Litmus 2 is a Hackers Trojan horse virus. It comes in either on an email or perhaps by visiting an infected website. The file is a "temp" file, it closes the automatic update on Norton Anti Virus so it can reside in your computer until you close Windows. At that point it moves to the "Winn" file and activates. It deletes all data. Norton is unable to delete it while it is still in the temp file. The quarantine didn't work either.
Do your updates, make sure the automatic update on Norton Anti Virus is still marked "on". If you have any other anti virus program do the same.
I personally think the virus came in on a "Question to the Seller" but I may have contracted it while surfing. But since Ebay was down on the 13th and Im hearing lots of complaints I think Ebay got hit also.
posted on April 16, 2003 05:36:46 PM new
Yesterday I for about 3 hours I was getting warnings from Norton personal firewall that a backdoor trojan was attempting to make contact. I didn't think much of it but I did wonder why it was the first such attempt in quite awhile. I don't know if this was the same thing or not.
You said Norton Anti-virus couldn't get it but maybe the firewall prevented it from getting through to my computer. So far I haven't had any problems.
Glad you are back up and running. I hate getting a virus it is such a pain to get everything back together. It makes ya wana hit someone....preferable the person who wrote the virus and spread it.
posted on April 16, 2003 06:45:02 PM new
Well, here's one for ya' I just surfed around vendio just now after instaling Spybot S & D and got the warning: "Spybot S & D reports that you want to download Avenue A. Inc This is a known threat Do you want to block this download? " Of course I said yes.
