eBay has got to be kidding me...

[[JiF]KellysHero]

I'm a very infrequent user of eBay, bought maybe a total of 10 items off of it and sold one over several years. Signed on for the first time in a few months, and a an "Enter Your Information" screen came up. It looks to be a legit eBay web address based on what eBay said I should look for on the sign in screen. Besides the normal first and last name, etc..., they want a social security number, date of birth, a credit card/atm #, plus the pin and CCV#. What the..., ebay can

[Gnome-father]

Be carefull! It may be a pirate copy(and i mean pirate) of ebay!! Or if not, ask the admins if they post this public or keep it safe from the currious world out there.

[[JiF]FrenchAfroman]

go to the support area and write them an e-mail ask them why the login has changed.

this really looks like a pirate to me(hackers can find holes in a website and send u to their website when u try to login)

ebay does not require your social security number in germany so i dont think they do in the states+ never give your pin and ccv noone requires that for only transactions.

wait a few days and try to login again if this is a pirate ebay will rework their system soon

[[JiF]Flying Tiger]

E Bay would never ask for such sensitive information, so just bring it to their attention and maybe check your rig for possible problems.

[Sir Die-a-lot]

Some pirate posted a phishing page on eBay it would seem.

[[JiF]KellysHero]

Well ran TrendMicro's scan and came up with the Sinowal virus/trojan. Pretty nasty little bugger, but it was supposedly removed. It is used for identity theft, getting passwords, etc... After reading about it, that explains the eBay page, and some of my firefox crashes not to mention Blue screens of death.

[[JiF]zougathefist]

Hey Kelly's,

if you like I will check it out for you
I have many numerous friends who work for ebay and can bring it to their attention,

Just PM your full name, address, card details (including PIN and CCV) and your date of Birth and soc. sec no. and I'll sort you out no problem

ZougaTheImposter

[Gnome-father]

Just PM your full name, address, card details (including PIN and CCV) and your date of Birth and soc. sec no. and I'll sort you out no problem

ZougaTheImposter

yes heres my card details: 1234567890 PIN:4321 CCV:(wow, 14 and ccv. ) 1122


And my number is: 911. To make me know what you are calling for, say the code sentence: Hi, im a pisher that is stupid who calls the police. NHHHHHAaaaaaaa you doughnuteater!!!






Ehhhhhhhhhhhhh, this is for pishers only.

[[JiF]FrenchAfroman]

lmao actually gnomes first post that realy made me laugh. thats jiff attitude

[Gnome-father]

ok, im not trying to hijack now but...ebay has been hacked...for 10 years ago. read this www.securiteam.com/securitynews/2CUQ7QAQLI.html and then visit this or use the link on the page http://www.attrition.org/mirror/attriti ... m/%3Cbr%3E funny hacked

[[JiF]KellysHero]

I ran Trendmicro's scan and Maleware bytes, both found the virus and supposedly removed it, but it is still showing up. I went to eBay and logged in, and the same screen came up asking for ss#, cc#, pin, etc... All my bank account passwords have been changed via another computer, but have all my Turbo Tax info on this computer and had been running TT while this has been active.

I have a new hard drive that I can do a clean install on, then slave this one to it so I can get the TT files, but will it transfer the trojan?

[[JiF]FrenchAfroman]

one thing u can try is see where your scan found the trojan and delete it yourself. done that before and i got rid of it. maybe try a better antivirus like mc caffe

[[JiF]zougathefist]

this may be redundant advice but anyway - Before you run the scan disconnect from the net, then set your preferences to quarantine any suspicious software not delete. Once the scan is complete then remove/delete the virus/trojan. then run another scan - If you are clear then reconnect to the net
then switch off and reboot then run another scan to be sure you are clear
This will take a few hours but will be worth it in the long run.

Most trojans have auto downloaders and installers so if you delete as you scan the installer will re-write the malicious software back into the same place it has just been cleaned from

a bit like someone painting a line in the road behind a street sweeper

If you are not online it cannot download and if you quarantine the virus the downloader does not recognise that it has been identified so does not rewrite.

You could also use CCCleaner before scanning to clean your registry and Temp. file directories which is were the downloaders like to hang out with their buddies, the NSFW pics....

Last bit of advice - get rid of Limewire if you still happen to be using it - it is one of the highest vectors for malicious software outside of the 'grown up' realm of the interweb

[[JiF]KellysHero]

so far so good, no sign of it. But I'll keep an eye on it. Thanks for all the advice!