Not signed in (Sign In)
    • CommentAuthorKreelor
    • CommentTimeOct 6th 2008 edited
     
    My Norton 360 reports that your web site is trying to get my personal bank account information (password!). It happens each time I use your web site.

    Please explain to me why your web author has instituted that "in the background" of my use on your web site.

    Thank you,
    (login name: Kreelor)
    • CommentAuthorccox
    • CommentTimeOct 6th 2008
     
    Which webpage are you going to?

    I'm really not sure why Norton would be misfiring like that on simple web pages on the auctioneer site (or gatherer, or enchantrix).
    •  
      CommentAuthordinesh
    • CommentTimeOct 6th 2008
     
    Yes, to be clear, we are not stealing your bank account info.

    I put out the word for our site webmaster to come take a look and give you the official lowdown (or more likely, ask you some specific questions), but he's afk now.
  1.  
    Erm... We don't steal your bank password, I don't see how we could considering that none of our pages even remotely look like a bank or use SSL encryption. But just to be on the safe side, I'd love a screenshot of the message that Norton 360 gives you, and the specific URL that triggers it that message.
    • CommentAuthorKreelor
    • CommentTimeOct 14th 2008
     
    Posted By: MentalPowerErm... We don't steal your bank password, I don't see how we could considering that none of our pages even remotely look like a bank or use SSL encryption. But just to be on the safe side, I'd love a screenshot of the message that Norton 360 gives you, and the specific URL that triggers it that message.


    The next time it happens, I'll attach a screenshot of the Warning. Hopefully, a full-sized *.jpg will work. I've never attached an image on your web site.

    Thanks,
    Larry
    •  
      CommentAuthordinesh
    • CommentTimeOct 14th 2008
     
    upload it to up.norganna.org, then copy the resulting link back here.
    • CommentAuthorKreelor
    • CommentTimeOct 16th 2008
     
    I will do that. But, as "Murphy's Law" states: "An error will repeat itself constantly until you try to get it to happen again."

    I haven't seen the error since my 1st post here about it. Geeeeeesh!
    • CommentAuthorKreelor
    • CommentTimeOct 19th 2008
     
    The error happened again today (10/19/08). The error message opens into a separate window (Windows XP Home) each time it is encountered. I had 3 windows open simultaneously; each window had the error during one visit to your site.

    Here's a modified screencapture of the error. Understandably, I "blanked-out" the password that your site was asking for.

    Woops! I see no way to upload the jpg image. I need help.
    •  
      CommentAuthorKandoko
    • CommentTimeOct 19th 2008
     
    send it to http://up.norganna.org/
    and paste the link it provides back here
    • CommentAuthorKreelor
    • CommentTimeOct 20th 2008
     
    Here's the link:
    http://up.norganna.org/index.php/vLVvolt/Norganna_My_Bank_Account.jpg
    •  
      CommentAuthorKandoko
    • CommentTimeOct 20th 2008
     
    that url is the login for the forums. Are you trying to use the same info as your bank and the programs gets confused?
    •  
      CommentAuthorNorganna
    • CommentTimeOct 20th 2008
     
    That is certainly very strange. I assume that your forum username and password are completely different from your bank username and password.

    In this case, depending on your browser, I would somehow try to clear out and "saved form data" relating to the norganna.org domain (just in case you accidentally entered the wrong password on the site in the past and your browser remembered it somehow)

    The other thing is to possibly run checks for malware on your PC. I'm not sure how well Norton 360 detects and eliminates malware threats, but there are some decent anti-malware programs like SpyBot Search and Destroy that pick up pretty much everything there is.

    Other than that, I don't have any idea what's going on. It seems like Norton 360 thinks that whatever information the browser is pre-filling the fields with is the same as your bank details and wants to protect you from accidentally submitting your bank details to the site.

    I'm relatively certain that we don't have the ability to "steal" your bank details via any HTML code we put on the website (the internet'd be a pretty scary place to visit if any old website could just suck bank details from your computer)
    • CommentAuthorKreelor
    • CommentTimeOct 20th 2008
     
    Thank you for investigating this issue.

    As per your last comment:

    "... I would somehow try to clear out and "saved form data" relating to the norganna.org domain (just in case you accidentally entered the wrong password on the site in the past and your browser remembered it somehow)."


    Before I logged onto your site today, I had just done that. Thanks for the suggestion.

    I suppose I'll have to contact Symantec and see what they say.
World of Warcraft™ and Blizzard Entertainment™ are trademarks or registered trademarks of Blizzard Entertainment, Inc. in the U.S. and/or other countries.