Ebay is Asking for SS No., Mother's Maiden Name?

[mikepmcs]

I can tell you by looking at the page it most likely originated from over the pond.  Can anyone else guess why I think that? 

[Silver R/T]

You may have spyware on your system redirecting you to a legit looking page.
Ebay has never asked those questions from me.

Download Malwarebytes and run it on your system. i bet it finds something

x2 on Malwarebytes

[mauve66]

the thing over the A and the bad english???

[mikepmcs]

.....and the way they spelled authori"s"e  We don't spell it in the US like that.  Our commonly taught spelling is authori"z"e

[MoparManJim]

I love the part about "ATM PIN". That is a sure as heck a fake page trying to get suckers to fall for it.   

[Tilar]

I'm wondering if something has altered your hosts file and changed it to point ebay to another address.

[A383Wing]

Lavasoft's Ad-Aware scanner is a good one...it's also free

[Khyron]

the sad sad part is that if people didn't fall for it, they would just stop...

I wonder how much information they have harvested so far.

[Old Moparz]

Wow, that is evil raised to the 10th power! It is certainly a spyware/trojan. 

You have to use multiple tools to get it off the computer. Bad news is that it may be days or weeks before some tool can solve the problem. Try a combination of AntiVir, SpyBot, Spyware Blaster, and Trend Micro House Call. All are free. Keep them all up to date and eventually it will be found. You just never know today which tool will find the devil and when.

Thanks for the additional info, I'll keep at it. 

I ran all but Spyblaster so far, found some more malware crap, deleted it, & the ebay rediect problem still exists. I did a quick search on google by asking how to get rid of an ebay redirect & found this answer.....

http://yedda.com/questions/rid_redirect_EBAY_SCAM_9519712412161/

First, open your ie browser, click tools, located at the upper right near top of page, scroll down and click on internet options, find the tab saying security, click on the symbol restricted site, then click the button " site ", you will see a fill in window. Type the web  / link address in this space exactly as you are reading it then click the button "add" close out that window and click ok, close ie window and re-open and type in your ebay web address, you should not see this re-direct again. Find the customer support number to ebay and report that site and they will trace that sites ip address and shut it down.

I did exactly what this person said to do on my computer & I am not redirected anymore. I can't believe that the problem is resolved this easily, or is it?

I still need to contact ebay.

[Old Moparz]

Oh well, I'm back to the redirecting. 

[Brock Samson]

 That sucks Bob, I've had t reinstall my puter three times in the past half dozen years... 

[bakerhillpins]

Oh well, I'm back to the redirecting. 

Is it redirecting to the same address? Is the link you restricted still in your security options?

[Skyview69]

When I follow that link I get "Page Not Responding". That looks like only a partial address any way. Odd.

Troy

Troy, this is a screen shot with the address bar so you can see all of it. I also added the page they direct me to asking for personal info.

  Wow...just wow....don't fill that page out!

[Old Moparz]

Update.....

After a google search, specifically for the "ebay redirect" page problem I was having, I found a link to an antivirus site that was linked from a forum called "bleeping computers . com" (Seems to be a decent site to help troubleshoot.)

http://www.bleepingcomputer.com/forums/lofiversion/index.php/t171869.html

Someone posted the exact same problem I was having, & another person gave them instructions on how to fix it. I figured since the following list of anti-spy/malware didn't fix it, why not give it a try?

Norton Symantic (the program we pay for at work)
Spybot Search & Destroy
Malwarebytes
AntiVir
Trend Micro House Call

So far the sign in page for ebay hasn't redirected me yet, but I'm a bit paranoid logging into my account & haven't.

The following is the instructions I followed:

-----------------------------------------------------------------------------------

(Username) Budapest
Sep 29 2008, 02:18 AM

Here's another scan to try:

Before we start fixing anything you should print out these instructions or copy them to a NotePad file so they will be accessible. Some steps will require you to disconnect from the Internet or use Safe Mode and you will not have access to this page.

Please download DrWeb-CureIt and save it to your desktop. DO NOT perform a scan yet.

Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Scan with Dr.Web CureIt as follows:
•Double-click on launch.exe to start the program.
•Cancel any prompts to download the latest CureIt version and click Start.
•At the prompt to "Start scan now", click Ok. Allow the setup.exe/driver to load if asked by any of your security programs.
•The Express scan will automatically begin.
(This is a short scan of files currently running in memory, boot sectors, and targeted folders).•If an infected object is found, you will be prompted to move anything that cannot be cured. Click Yes to All.
•When complete, click Select All, then choose Cure > Move incurable.
(This will move any detected files to the C:\Documents and Settings\userprofile\DoctorWeb\Quarantine folder if they can't be cured)•Now put a check next to Complete scan to scan all local disks and removable media.
•In the top menu, click Settings > Change settings, and UNcheck "Heuristic analysis" under the "Scanning" tab, then click Ok.
•Back at the main window, click the green arrow "Start Scanning" button on the right under the Dr.Web logo.
•When the scan is complete, a message will be displayed at the bottom indicating if any viruses were found.
•Click "Yes to all" if asked to cure or move the file(s) and select "Move incurable".
•In the top menu, click file and choose save report list.
•Save the DrWeb.csv report to your desktop.
•Exit Dr.Web Cureit when done.
•Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
•After reboot, post the contents of the log from Dr.Web in your next reply. (You can use Notepad to open the DrWeb.cvs report)

[Tilar]

bleepingcomputer.com are the ones that made "Combofix" that I suggested earlier. That little program has saved a few reformats.

[Old Moparz]

bleepingcomputer.com are the ones that made "Combofix" that I suggested earlier. That little program has saved a few reformats.

If the problem pops up again, I'll take a look at that one too.  

As of today, there is no ebay redirect page with some scumbag trying to get bank info on this computer. The weird thing now is, I can't sign in on ebay because it's saying that my browser settings are blocking cookies. Not sure if it's another virus issue, but I'll work on it when I have time.  

The page address:

https://signin.ebay.com/ws/eBayISAPI.dll?co_partnerId=2&siteid=0&UsingSSL=1

[Old Moparz]

I didn't trust the above page I just posted, so I created a fake yahoo account along with another fake ebay account to test things. The new fake yahoo account worked, but I logged out & then logged back in & guess what?  

Both accounts are now inaccessible & have probably been hacked.  

I didn't get this bug out the the computer yet.