Leon Paul USA and Firefox

[ShadyLane]

Anyone here having problems going to the Leon Paul USA website or is it just me? I haven't had this problem before until yesterday, when I went to the website and my Norton Symantec anti-virus program kicked it and said that it just blocked a trojan.pidief.C virus...then afterwards, my Firefox Moxilla web browser crashes...I thought it was initally me but then I tried it again and went on the site and again, Norton blocked the virus and Moxilla crashed again. O_O;

http://www.symantec.com/security_res...020915-1008-99

I just figure I'd post and ask you guys to see if this happened to you too, assuming you have an up-to-date anti-virus program and firewall and went there yesterday and noticed that your program automatically blocked a malicious virus from being downloaded onto your computer. I'm using my brand spanking new laptop that I got last month with 2009 Norton Internet Security program so there's nothing wrong with my laptop.

I find this really bizarre...>__<

[magic_moose]

Same for me with Firefox, using Symantec AV corporate edition.
It was not doing this last week.

If you use IE 6 it produces two trojans, quietly attempts to open Adobe Reader and then Adobe reader fails.

These seem to be Adobe based trojans.

I sent an email to them to alert them.

[magic_moose]

Discovered: February 9, 2008
Updated: February 10, 2008 9:55:12 AM
Also Known As: Exploit-PDF.b [McAfee]
Type: Trojan
Infection Length: 3,180 bytes
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Vista, Windows XP
CVE References: CVE-2007-5659, CVE-2007-5663, CVE-2008-0667, CVE-2007-5666, CVE-2008-0655, CVE-2008-0726, CVE-2008-2042
Trojan.Pidief.C is a Trojan horse that exploits the Adobe Acrobat and Reader Multiple Arbitrary Code Execution and Security Vulnerabilities (BID 27641) to download and execute files from the Internet.

Further Reading:
For more information about this threat, please see the following blog entry:
Pidief, the word for exploits?Protection

• Initial Rapid Release version February 9, 2008 revision 007
• Latest Rapid Release version December 1, 2008 revision 052
• Initial Daily Certified version February 9, 2008 revision 008
• Latest Daily Certified version December 2, 2008 revision 004
• Initial Weekly Certified release date February 13, 2008

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment

Wild

• Wild Level: Medium
• Number of Infections: 50 - 999
• Number of Sites: 10+
• Geographical Distribution: Medium
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Medium
• Payload: Exploits a vulnerability to download and execute remote files.

Distribution

• Distribution Level: Low

Writeup By: Mircea Ciubotariu and Sean Kiernan

Trojan.Maliframe!html

Risk Level 1: Very Low


Printer Friendly Page

• SUMMARY
• TECHNICAL DETAILS
• REMOVAL

Discovered: July 10, 2007
Updated: July 10, 2007 11:40:58 AM
Type: Trojan
Infection Length: 65 bytes; 67 bytes
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows NT, Windows Server 2003, Windows 2000
Trojan.Maliframe!html is a generic detection for HTML files containing malicious code that may redirect users to a malicious Web site that may exploit the browser.

Protection

• Initial Rapid Release version July 10, 2007 revision 007
• Latest Rapid Release version December 5, 2008 revision 050
• Initial Daily Certified version July 10, 2007 revision 017
• Latest Daily Certified version December 5, 2008 revision 049
• Initial Weekly Certified release date July 11, 2007

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low

Writeup By: Piotr Krysiuk

[ShadyLane]

Oh good, I thought I was the only one having this problem. This crazy virus problem only popped up this week and yes, it was fine last week.

[Cry_Me_A_River]

I got to the website, but it was loading really slow. Then my anti-virus program detected two trojens.

LEON PAUL IS TRYING TO H4XX MY BOX!!!!

[telkanuru]

Pro Tip- Use Chrome.

[LeonPaulUSA]

OK, the folks in London are aware of the problem and are working to get it resolved. Thanks for your patience!

Bill

[Alex_Paul]

I have gone and deleted the bad file so it should all be fine. If anyone has anymore problems please email us.

[LeonPaulUSA]

www.leonpaulusa.com is repaired and running smoothly now.

[ShadyLane]

Anyone getting problems going to the Leon Paul UK website? My Norton blocked a bloodhound.pdf.3 virus...O__O;

http://www.symantec.com/security_res...121806-4126-99

And for some strange reason, I'm being booted out of the Leon Paul USA website again although my Norton didn't act up. I'm hesitant to try again and go back onto that site...

Will this be fixed soon?

[Patrician]

I visited their site yesterday!
...but then again I'm a mac user so why should I care