Pichunter, Virus, anyone... ?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • http
    Confirmed User
    • Oct 2001
    • 1811

    #1

    Pichunter, Virus, anyone... ?

    Anyone else getting an auto-download of "pic.wmf" on pichunter?

    Careful, it's VERY nasty and hard to get rid of (with IE).
  • pr0
    rockin tha trailerpark
    • May 2001
    • 23088

    #2
    its interesting how many threads i've seen about a virus on pichunter over the years

    if its a wmf, its using that new exploit that was on the news yesterday
    __________
    Loadedca$h - get sum! - Revengebucks - mmm rebills! - webair (gotz sErVrz)

    Comment

    • pornguy
      Too lazy to set a custom title
      • Mar 2003
      • 62910

      #3
      Has anyone talked to them about it. that is nasty shit to have to get rid of.
      PornGuy skype me pornguy_epic

      AmateurDough The Hottes Shemales online!
      TChicks.com | Angeles Cid | Mariana Cordoba | MAILERS WELCOME!

      Comment

      • http
        Confirmed User
        • Oct 2001
        • 1811

        #4
        Yes it is using that one. But seems like not everyone knows yet. I.e. madthumbs is still trading with pichunter, etc...

        Comment

        • SmokeyTheBear
          ►SouthOfHeaven
          • Jun 2004
          • 28609

          #5
          Originally posted by pornguy
          Has anyone talked to them about it. that is nasty shit to have to get rid of.
          doesn't look unintentional to me. could be wrong though
          hatisblack at yahoo.com

          Comment

          • pr0
            rockin tha trailerpark
            • May 2001
            • 23088

            #6
            Originally posted by SmokeyTheBear
            doesn't look unintentional to me. could be wrong though
            this is like the 10th pichunter virus thread i've seen in my years here
            __________
            Loadedca$h - get sum! - Revengebucks - mmm rebills! - webair (gotz sErVrz)

            Comment

            • SmokeyTheBear
              ►SouthOfHeaven
              • Jun 2004
              • 28609

              #7
              btw this version is stealing from all of us webmasters.. replacing ref codes for the biggest adult sites, so all those big tgp's are going to notice a big drop in conversions as the surfers get infected..
              hatisblack at yahoo.com

              Comment

              • FreeOnes
                Confirmed User
                • Jul 2001
                • 3406

                #8
                Originally posted by SmokeyTheBear
                btw this version is stealing from all of us webmasters.. replacing ref codes for the biggest adult sites, so all those big tgp's are going to notice a big drop in conversions as the surfers get infected..
                What's going on with the word FreeOnes in your sig ?

                The new FreeOnes! - AdultFilmStarContent - BabeGalleries and much more! - 1Strike Movies and much more! All powered by Xpressa

                Comment

                • SmokeyTheBear
                  ►SouthOfHeaven
                  • Jun 2004
                  • 28609

                  #9
                  Originally posted by FreeOnes
                  What's going on with the word FreeOnes in your sig ?
                  my sig knows who you are

                  p.s. for me it says Smokeythebear
                  hatisblack at yahoo.com

                  Comment

                  • gotys
                    Confirmed User
                    • Feb 2002
                    • 767

                    #10
                    Hello people,

                    this are news to me, and you can trust me when I say it's definetely NOT from our site! I will check into it now and let you all know
                    PicHunter.com,ClipHunter.com,HomeTwat.com
                    --------------------------------------------
                    not accepting any trades, not selling spots

                    Comment

                    • gotys
                      Confirmed User
                      • Feb 2002
                      • 767

                      #11
                      Can someone please let me know if it's gone now? And if not...how do I detect it? I can't seem to be getting the virus, and I can't get rid of the problem, if I can't reproduce it. I would like to find out what is happening. If someone can assist, I'd be very thankful. Thank u
                      PicHunter.com,ClipHunter.com,HomeTwat.com
                      --------------------------------------------
                      not accepting any trades, not selling spots

                      Comment

                      • PussyTeenies
                        Confirmed User
                        • Feb 2005
                        • 6496

                        #12
                        contacted you

                        (bill)
                        Need adult hosting?

                        Contact us!
                        WARM Hosting

                        Need an IT solution? or someone to check your site and security? Nossie - IT Professional

                        Comment

                        • Trixxxia
                          Confirmed User
                          • Aug 2004
                          • 5600

                          #13
                          Originally posted by SmokeyTheBear
                          btw this version is stealing from all of us webmasters.. replacing ref codes for the biggest adult sites, so all those big tgp's are going to notice a big drop in conversions as the surfers get infected..
                          I don't get it either and I don't have anything on my laptop that would block it either. SmokeyTheBear - do you get it? Whomever has it load, should hit up gotys, take screencaps and if you have the file download, you should zip it and forward it to gotys to figure out who or what it is.

                          Comment

                          • stev0
                            Confirmed User
                            • Aug 2003
                            • 6801

                            #14
                            is it winxp sp2 that is detecting it? or antivirus software?

                            Comment

                            • pr0
                              rockin tha trailerpark
                              • May 2001
                              • 23088

                              #15
                              Originally posted by gotys
                              Can someone please let me know if it's gone now? And if not...how do I detect it? I can't seem to be getting the virus, and I can't get rid of the problem, if I can't reproduce it. I would like to find out what is happening. If someone can assist, I'd be very thankful. Thank u


                              ok so you "got it" on your xp box...& somehow it found a way onto your linux server magically
                              __________
                              Loadedca$h - get sum! - Revengebucks - mmm rebills! - webair (gotz sErVrz)

                              Comment

                              • johnnyhey
                                Confirmed User
                                • Jan 2004
                                • 1172

                                #16
                                Originally posted by http
                                Anyone else getting an auto-download of "pic.wmf" on pichunter?

                                Careful, it's VERY nasty and hard to get rid of (with IE).
                                which prompts the question of why anyone's still using IE?
                                CandyDreams.com



                                shooter for hire

                                info[at]candydreams.com
                                ICQ:96563638
                                AIM: johnnyhey

                                Comment

                                • SmokeyTheBear
                                  ►SouthOfHeaven
                                  • Jun 2004
                                  • 28609

                                  #17
                                  Originally posted by TopBucksTrixxxia
                                  I don't get it either and I don't have anything on my laptop that would block it either. SmokeyTheBear - do you get it? Whomever has it load, should hit up gotys, take screencaps and if you have the file download, you should zip it and forward it to gotys to figure out who or what it is.
                                  it was gone by the time gotys posted i believe. it was one of the new ones and loaded from a file on his server not on an external server.
                                  hatisblack at yahoo.com

                                  Comment

                                  • stev0
                                    Confirmed User
                                    • Aug 2003
                                    • 6801

                                    #18
                                    Originally posted by pr0


                                    ok so you "got it" on your xp box...& somehow it found a way onto your linux server magically
                                    Could have been a hacker... Tom runs a huge site and i doubt he would intentionally do something like spread a virus to ruin his reputation. You guys could also have an infected hosts file, and the pichunter.com you see isn't the real pichunter. I run alot of protection and i've never noticed any warnings when accessing pichunter, I usually am just in the submit area though.

                                    Be sure to do a scan with adaware and spybot, and use spybot to immunize your system. And use firefox ;)

                                    Comment

                                    • SmokeyTheBear
                                      ►SouthOfHeaven
                                      • Jun 2004
                                      • 28609

                                      #19
                                      Originally posted by stev0
                                      \You guys could also have an infected hosts file, and the pichunter.com you see isn't the real pichunter. \
                                      no thats not what happened in this case.
                                      hatisblack at yahoo.com

                                      Comment

                                      • Trixxxia
                                        Confirmed User
                                        • Aug 2004
                                        • 5600

                                        #20
                                        gotys, as per thinkx a few other sites had the same problem :

                                        http://www.gofuckyourself.com/showthread.php?t=560612

                                        Comment

                                        Working...