A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » General XP issues or comments
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

O.T. eBay malware/virus?



 
 
Thread Tools Display Modes
  #1  
Old November 17th 18, 10:14 PM posted to microsoft.public.windowsxp.general
Mark Twain
external usenet poster
 
Posts: 2,402
Default O.T. eBay malware/virus?

I've got this twice now when I
clicked my favorites link to
logon to eBay

http://i64.tinypic.com/16lhede.jpg


So does eBay have a problem? It's
one of the sites I frequent allot.

Robert
Ads
  #2  
Old November 18th 18, 06:03 AM posted to microsoft.public.windowsxp.general
Paul[_32_]
external usenet poster
 
Posts: 11,873
Default O.T. eBay malware/virus?

Mark Twain wrote:
I've got this twice now when I
clicked my favorites link to
logon to eBay

http://i64.tinypic.com/16lhede.jpg


So does eBay have a problem? It's
one of the sites I frequent allot.

Robert


That thread is a day or two old. Other people are seeing
what you are seeing.

https://www.reddit.com/r/Ebay/commen...irectorbmutrj/

Not the exact same redirector is reported in this thread.
It gives the appearance of being a false positive,
if you look at a virustotal sample for a selected URL.

https://community.ebay.com/t5/Techni...7724701/page/3

https://www.virustotal.com/ru/file/8...is/1542467129/

However, you're detecting this with SuperAntiSpyware, and
in that virustotal example of a false positive, SuperantiSpyware
isn't triggering. Maybe it really is a redirector.

One poster seems to feel the enabler, is using
your bookmarks entry. If you enter ebay this way:

https://www.ebay.com

do you still get the message ?

Paul
  #3  
Old November 18th 18, 08:03 AM posted to microsoft.public.windowsxp.general
Mark Twain
external usenet poster
 
Posts: 2,402
Default O.T. eBay malware/virus?

No, I was running a SuperAntiSpyware scan at
the time and Avast is the program that spotted
it.

It doesn't happen every time I go on eBay but
I just noticed it a couple of times and was
concerned I may be infected.

I typed the address as you suggested and no
issues but the problem is that I have all sorts
of bookmarks for eBay. So what am I to do?

I run scans daily and it never detects anything?

Thoughts/Suggestions?
Robert

  #4  
Old November 18th 18, 10:39 AM posted to microsoft.public.windowsxp.general
Mark Twain
external usenet poster
 
Posts: 2,402
Default O.T. eBay malware/virus?

It has nothing to do with the problem
but I ran a HDTune scan and thought you
might like to see it.


http://i66.tinypic.com/2e543h0.jpg


Robert
  #5  
Old November 18th 18, 11:25 AM posted to microsoft.public.windowsxp.general
Paul[_32_]
external usenet poster
 
Posts: 11,873
Default O.T. eBay malware/virus?

Mark Twain wrote:
It has nothing to do with the problem
but I ran a HDTune scan and thought you
might like to see it.


http://i66.tinypic.com/2e543h0.jpg


Robert


That doesn't look "bad".

Some of the spikes could be from other activity
on the computer in the background.

None of the spikes "touches down" onto the baseline.

You also want to keep pictures like that for later,
to compare to future traces. So you can see any
"progression".

I've had drives, brand new, where the trace was
quite rough on the edges. So if I scan such a drive
later, I have to compare the plot, to when the drive
was new.

The best OS I have here for drive testing is... Win2K :-)
On Windows 10, that version of HDTune no longer works
perfectly any more. The transfer curves are maybe 10MB/sec
lower than they're supposed to be. If I need to know
exactly what the transfer rate on a drive is, I have
to switch back to Win7 or something (that's on the
other machine).

Paul
  #6  
Old November 18th 18, 06:20 PM posted to microsoft.public.windowsxp.general
Mark Twain
external usenet poster
 
Posts: 2,402
Default O.T. eBay malware/virus?

Here's the HDTune scan of the 780,
I'm running a Kapersky scan on the
8500.

http://i65.tinypic.com/28wfdso.jpg

Robert
  #7  
Old November 18th 18, 06:56 PM posted to microsoft.public.windowsxp.general
Paul[_32_]
external usenet poster
 
Posts: 11,873
Default O.T. eBay malware/virus?

Mark Twain wrote:
Here's the HDTune scan of the 780,
I'm running a Kapersky scan on the
8500.

http://i65.tinypic.com/28wfdso.jpg

Robert


That's not looking very good.

Check the Health tab, the Reallocated or
Current Pending "Data" column. A value of 0
in the Data column is good. A value of 5500
would be bad. The value is thresholded, and
isn't an absolute measure of affected sectors.
There could have been 100,000 bad sectors, before
the counter comes off the 0 value and increases.

That graph suggests you should be able to "feel"
an effect when it's like that. If you have your
spare handy (the spare you were threatening to buy),
you could clone over and replace it.

It's really up to you, when to replace it. You have
good backup practices, so I'm sure you have an image
you can use if the drive stops working completely.

When I had a drive here, that "felt" slow, I replaced it.
The health indicator (Reallocated) data column was
still 0 (says drive is good), but the drive was
obviously in bad shape, because you could feel
the slowness in everyday use. I wouldn't even have
run HDTune, except it felt bad, and then I could
see in HDTune, the benchmark told the tale.

The drive varies between 80MB/sec on one end and
40MB/sec on the other end. From a generational
perspective, the drive could be ten years old.
I still have drives in the pool like that (a
couple 250GB ones) with that level of performance.

I would do something about that, if it's at the
"annoying level" now.

Paul
  #8  
Old November 18th 18, 10:31 PM posted to microsoft.public.windowsxp.general
Mark Twain
external usenet poster
 
Posts: 2,402
Default O.T. eBay malware/virus?

I was also surprised at all the spikes
etc. As I've said, I only use the 780
as a backup for the 8500 and I barely
use it like now while the 8500 is doing
the Kapersky scan.

I really don't notice any slowing down
though. So yoiu recommend I replace the
HD?

I ran Kapersky 10 on disk boot sectors, hidden
start-up objects and C: and it found nothing
but said the databases were obsolete.

So I clicked update and just got a pop-up that
said my Kapersky databases are corrupted and gave
me the option of rolling it back which I did.

Then it gave me a screen with the following:

Threat types: Total Databases release date
Malware 9238519 11-18-18 5:34 pm
  #9  
Old November 18th 18, 11:06 PM posted to microsoft.public.windowsxp.general
Mark Twain
external usenet poster
 
Posts: 2,402
Default O.T. eBay malware/virus?

I ran another HDTune scan and its
worst than the other!

http://i68.tinypic.com/2qio6ps.jpg

Then I clicked on the tabs:

http://i65.tinypic.com/2mg9p9e.jpg

http://i66.tinypic.com/amwfv5.jpg

and am running a HDTune error scan of the HD

Robert
  #10  
Old November 19th 18, 12:27 AM posted to microsoft.public.windowsxp.general
Paul[_32_]
external usenet poster
 
Posts: 11,873
Default O.T. eBay malware/virus?

Mark Twain wrote:
I ran another HDTune scan and its
worst than the other!

http://i68.tinypic.com/2qio6ps.jpg


It looks to me like two programs on the
computer, are "competing" for the hard drive.

That's not necessarily a failure pattern.

Are you, perhaps, doing an AV scan and running
the HDTune benchmark at the same time ?

That will invalidate the test results and
give abnormally-low looking results.

When the machine isn't scanning and isn't doing
Windows Update, that's when the user gets
a chance to run HDTune.

The machine has to be "quiet" before you run
HDTune. And the best OSes for the job,
are the ones where the user is firmly in
control of what the computer is doing.

Paul
  #11  
Old November 19th 18, 05:53 AM posted to microsoft.public.windowsxp.general
Mark Twain
external usenet poster
 
Posts: 2,402
Default O.T. eBay malware/virus?

Whenever I run HDTune I close everything so
nothing is running.

For some reason the HDTune error scan had stopped
(maybe I did it accidentally) In any case, I started
a new scan and will post it as soon as it's finished.

I do have 1 spare Seagate 2GB HD but we've set it up
for the 8500 OS. I'm still going to buy more spare HD's
and PSU etc. It's just I've had allot of things hit me
one after another but I'll get it done.

Robert


  #12  
Old November 19th 18, 05:55 AM posted to microsoft.public.windowsxp.general
Mark Twain
external usenet poster
 
Posts: 2,402
Default O.T. eBay malware/virus?

As soon as the Error Scan is finished I'll
do another HDTune scan.


Robert
  #13  
Old November 19th 18, 08:20 AM posted to microsoft.public.windowsxp.general
Mark Twain
external usenet poster
 
Posts: 2,402
Default O.T. eBay malware/virus?

Here's the third HDTune scanof the 780:

http://i66.tinypic.com/5byyrq.jpg

and here's the error scan:

http://i64.tinypic.com/2q3dr1v.jpg

Robert
  #14  
Old November 19th 18, 10:15 AM posted to microsoft.public.windowsxp.general
Paul[_32_]
external usenet poster
 
Posts: 11,873
Default O.T. eBay malware/virus?

Mark Twain wrote:
Here's the third HDTune scanof the 780:

http://i66.tinypic.com/5byyrq.jpg

and here's the error scan:

http://i64.tinypic.com/2q3dr1v.jpg

Robert


With regard to the second picture, the drive
has to be "near death" for you to see red squares
in the bad block scan. That's because, as long
as there are spare sectors to substitute, the
drive can maintain a semblance of health. If you
did see mis-colored (non-green) squares, you'd
want to replace the drive at your earliest convenience.

*******

I can show you some mis-collected scan results. Here,
I test my Win7 drive, a 2TB drive, and it looks
shockingly bad. The circled items on the right, are
examples of things that might interfere on this setup.

https://i.postimg.cc/85kyDyGc/busy-d...ample-win7.gif

Now, if I set up two drives, the "suspicious" win7 drive
and a Win8.1 boot drive, I can try testing with the
network cable disconnected to reduce interference.
If the network is available, modern OSes like to check
Windows Update. Pulling the network cable helps tame them.

You can see here, my Win7 drive is actually perfectly healthy.

https://i.postimg.cc/wM8QM08D/test-w...-when-idle.gif

Whereas the Win8.1 OS drive, still managed to interfere
with my testing. Here I'm scanning the C: drive, so you expect
trouble. Only Win2K would allow this test to run unimpeded :-)

https://i.postimg.cc/d3YGw3rB/win-8-...ence-still.gif

That's how tricky this stuff is.

Paul
  #15  
Old November 19th 18, 02:28 PM posted to microsoft.public.windowsxp.general
J. P. Gilliver (John)[_4_]
external usenet poster
 
Posts: 2,679
Default O.T. eBay malware/virus?

In message , Mark
Twain writes:
[]
I do have 1 spare Seagate 2GB HD but we've set it up
for the 8500 OS. I'm still going to buy more spare HD's
and PSU etc. It's just I've had allot of things hit me
one after another but I'll get it done.

Robert


I _assume_ you meant 2 TB ... (-: [Although my first PC HD was either 40
or 80 _M_, but that was a _long_ time ago ...]
--
J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

Under democracy one party always devotes its chief energies to trying to prove
that the other party is unfit to rule - and both commonly succeed, and are
right. -H.L. Mencken, writer, editor, and critic (1880-1956)
 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 09:55 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.