Someone is stealing OUR cash - Read this - GoFuckYourself.com

biskoppen · 07-02-2004, 09:00 AM

This is maybe old news but...

I'm sitting here .. making a gay

gallery .. NastyDollars : BoysFirstTime .. Then I found out when testing the shit that my ID in the link is being replace my some fucking TROJAN in my machine .. and it inserts a new ID everytime I load the link in my browser

These are the NastyDollars ID's I get :

bbriann01
claudel
lamarre12
yvand001
normans
louis123
duguay

I would be very interesting to see if some of you guys sees the same thing.

Try and put this link in your IE and see if the ID remains the same and post the result in this thread.

http://www.boysfirsttime.com/main.htm?id=biskoppen

And if NastyDollars reads this thread you might wanne consider deleting the above accounts.

Chris · 07-02-2004, 09:01 AM

uh ohhhhh

Corleone · 07-02-2004, 09:01 AM

i see your id

thanks for the gay link... could't you just link cumfiesta or mikeinbrazil? :D

Adultlexicon · 07-02-2004, 09:03 AM

probaly the reason my ratio is 1:7000 with nastydollars today
fucking spyware trojan fuckups

gornyhuy · 07-02-2004, 09:03 AM

I get your ID too...

Giorgio_Xo · 07-02-2004, 09:03 AM

That's what you get when you promote toolbars like Media Tickets or Porngraph auto-installers.

Dirty F · 07-02-2004, 09:03 AM

Yup, this way of stealing traffic is getting really popular and its happening more than we think it is.

Mojo Rizin · 07-02-2004, 09:05 AM

No problems here

Marcus Aurelius · 07-02-2004, 09:05 AM

http://www.trojanhunter.com/

Works wonders, and runs in your taskbar like virus scan monitoring all your inbound and outbound traffic.

EviLGuY · 07-02-2004, 09:07 AM

Works for me.. sounds like you got a nasty on your system.

TheWildcard · 07-02-2004, 09:09 AM

Quote:

Originally posted by Battuss
Yup, this way of stealing traffic is getting really popular and its happening more than we think it is.

Is it ND's fault or a hacker?

More Booze · 07-02-2004, 09:09 AM

also got your ID

biskoppen · 07-02-2004, 09:10 AM

The same thing happens for all TOPBUCKS linkcodes .. the ID is replaced instantly when I load it in IE

sixxxth_sense · 07-02-2004, 09:10 AM

don't use IE! simple!

biskoppen · 07-02-2004, 09:11 AM

Quote:

Originally posted by TheWildcard
Is it ND's fault or a hacker?

The "hacker"

Corleone · 07-02-2004, 09:11 AM

Quote:

Originally posted by biskoppen
The same thing happens for all TOPBUCKS linkcodes .. the ID is replaced instantly when I load it in IE

damn get a trojan killer asap

and get firefox browser

strobi · 07-02-2004, 09:12 AM

Quote:

Originally posted by biskoppen
The same thing happens for all TOPBUCKS linkcodes .. the ID is replaced instantly when I load it in IE

ouch.. looks like they target all the big fish.

biskoppen · 07-02-2004, 09:13 AM

Quote:

Originally posted by sixxxth_sense
don't use IE! simple!

Yeah, I hear you - but we can't go around telling all the surfers to do the same thing - and it's their money that ends up in the pocket of the cheating mofos

Robertf · 07-02-2004, 09:15 AM

Quote:

Originally posted by Corleone
damn get a trojan killer asap

and get firefox browser

Well if he change his browser doesn't realy matter ... it matters all those surfers who have teh same trojan and thus will never signup under your refcode ....

And yes nasty should ban does ID's as soon as possibele ... and report who ever have those id's to the local autorities (after some testing this is actually true ;-) )

Tom_PMs · 07-02-2004, 09:18 AM

What you/we need is some code to verify our linking codes are working on a persons browser before we let them actually GO to the sponsors site...

BTW: your code appeared for me all the way to the join page. But I'm not buying, sorry

DarkJedi · 07-02-2004, 09:19 AM

1. dont use IE
2. contact ND and tell them to ban the IDs

gazool · 07-02-2004, 10:20 AM

I see your ID after loading the link

V_RocKs · 07-02-2004, 10:25 AM

They were having a similar problem with allsitesaccess. It kept sending certain surfers to a link with one of the Nasty Dollars crews affiliate code in it. Hmm... Strange shit going on over there.

iwantchixx · 07-02-2004, 10:28 AM

Quote:

Originally posted by V_RocKs
They were having a similar problem with allsitesaccess. It kept sending certain surfers to a link with one of the Nasty Dollars crews affiliate code in it. Hmm... Strange shit going on over there.

That has nothign to do with what is going on here. Think, read, study and listen before making comments like that,.

pussyluver · 07-02-2004, 10:29 AM

Got your ID here

pussyluver · 07-02-2004, 10:29 AM

Been spot checking my ND links and have yet to find a problem.

CBytch · 07-02-2004, 10:33 AM

Opened the link in firefox and IE and got your ref code.

maxjohan · 07-02-2004, 10:43 AM

Quote:

Originally posted by sixxxth_sense
don't use IE! simple!

yeah, but it isnt him that is going to buy. Think about all the surfers that have this shit on there computer....

they steal your cash right in-front of your eyes.

andi_germany · 07-02-2004, 10:44 AM

I might be talking rubbish here but wouldn't the following work?

Replace one letter in the ref url with its escape char like used for putting spaces in an url.

Wouldn't that stop the trojan to identify the url you are linking to and therefore leave it as it is?

maxjohan · 07-02-2004, 10:47 AM

Couldnt this be fixed with a console or something.

You know those you put on your AVS site, huh?

Manowar · 07-02-2004, 10:55 AM

Mozilla Firefox

Thank me later

gregtx · 07-02-2004, 10:56 AM

i've had similar webmasters complain to me that their traffic was being redirected.. after days of finger pointing they found the spyware that was redirecting the traffic...

scary thing is how many of those surfers are getting this and not getting your links...

Rochard · 07-02-2004, 10:58 AM

I use IE and your code followed all the way through.

The problem is not what "we" are using for a browser. It's what the surfer is using.

Any company caught doing this should be shut down and publically banned.

dropped9 · 07-02-2004, 11:02 AM

Quote:

Originally posted by RocHard
I use IE and your code followed all the way through.

The problem is not what "we" are using for a browser. It's what the surfer is using.

Any company caught doing this should be shut down and publically banned.

Amen. This is what hurts us all.

emthree · 07-02-2004, 11:02 AM

Properly investigate the situation at hand before removing anything. I'm sure by doing this you can prompt an investigation by ND and the other sponsors who were targeted. It would also be interesting to see how this plays out, I would love to see the status of those IDs.

Tuna · 07-02-2004, 11:08 AM

it worked ok for me.

i hope nd does the right thing and bans those user ids.

Reak · 07-02-2004, 11:19 AM

i was playing with my dick

next time post welivetogether or mikeinbrazil

thanks

GigaChris · 07-02-2004, 11:21 AM

I clicked that link & when to http://www.boysfirsttime.com/main.htm?id=biskoppen

Pussy Dialers · 07-02-2004, 11:46 AM

Codelifters has a program to encrypt your links to help prevent link high jacking

http://www.codelifter.com/lc5index.html

sweet7 · 07-02-2004, 12:53 PM

Quote:

Originally posted by Corleone
i see your id

thanks for the gay link... could't you just link cumfiesta or mikeinbrazil? :D

TweetyBird · 07-02-2004, 12:58 PM

I also see your ID

TheSwed · 07-02-2004, 01:00 PM

works fine here...geo redirect?

Vitasoy · 07-02-2004, 01:04 PM

All is well over here.

TheSwed · 07-02-2004, 01:07 PM

You can read about the problem here
http://www.gofuckyourself.com/showth...hreadid=319946
and the answer from ND
"Problem #1 allsitesaccess links are being redirected to learnaboutyourself.com

- typo in DNS led to improper re-direct for a short period of time. if you think your account was effected, please send email to [email protected] and we will review it.

Problem #2 tgp galleries are being redirected from

http://gallys.nastydollars.com/mi/16/?id=yourrefcode
to
http://www.mikeinbrazil.com/main.htm?id=feligo1

An improper re-direct code was uploaded. This has also been fixed.

any questions or comments email [email protected]"

The Other Steve · 07-02-2004, 01:11 PM

This is a problem hitting mainstream affiliates too. There has been a lot of talk on one of the major boards about it after one scammer actually won an award for the most sales.

It needs clear and obvious action on the part of the sponsors otherwise they are going to start losing affiliates.

Diligent · 07-02-2004, 01:14 PM

Hmm..

I'd like all & any of these assholes taken to cell # 105 in Bubba's prison please..

Question for all having noticed this:
Does the spyware affect links for you even if you filter your traffic to your
own place before sending it to sponsors?

Diligent · 07-02-2004, 02:21 PM

Bump - to help people stay aware of an important issue...

It's likely lots of surfers are stuffing scammers' wallets instead of ours,
I've seen how usual it is with spy-/malware-infections among
regular computer-users... and those account for the majority of our signups

PMdave · 07-02-2004, 02:28 PM

Quote:

Originally posted by TheWildcard
Is it ND's fault or a hacker?

this is the fault of those webmasters that think that they get rich with $0.25/install programs.

Rick Latona · 07-02-2004, 02:31 PM

Quote:

Originally posted by Corleone
i see your id

thanks for the gay link... could't you just link cumfiesta or mikeinbrazil? :D

pornstar · 07-02-2004, 02:43 PM

Quote:

Originally posted by TheSwed
You can read about the problem here
http://www.gofuckyourself.com/showth...hreadid=319946
and the answer from ND
"Problem #1 allsitesaccess links are being redirected to learnaboutyourself.com

- typo in DNS led to improper re-direct for a short period of time. if you think your account was effected, please send email to [email protected] and we will review it.

Problem #2 tgp galleries are being redirected from

http://gallys.nastydollars.com/mi/16/?id=yourrefcode
to
http://www.mikeinbrazil.com/main.htm?id=feligo1

An improper re-direct code was uploaded. This has also been fixed.

any questions or comments email [email protected]"

This was in reply to a different problem. This is an "outside" job.. the other thread was an "inside" job.

I would like to hear from nastydollars the status of the theft accounts...

You should restart this thread with nastydollars in the title or it likely will get overlooked..

07-02-2004, 09:03 AM	#5
gornyhuy Chafed. Join Date: May 2002 Location: Face Down in Pussy Posts: 18,041	I get your ID too... __________________ icq:159548293

07-02-2004, 09:03 AM	#6
Giorgio_Xo Confirmed User Join Date: Mar 2003 Location: Las Vegas, NV Posts: 4,263	That's what you get when you promote toolbars like Media Tickets or Porngraph auto-installers. __________________ Make Levees, Not War

07-02-2004, 09:05 AM	#8
Mojo Rizin Confirmed User Join Date: Dec 2002 Location: Chandler, AZ Posts: 1,089	No problems here __________________ Start Making Reel Profits Today! VOIP Technology Is NOW

07-02-2004, 09:10 AM	#13
biskoppen Confirmed User Join Date: Mar 2003 Location: Very small penis Posts: 5,809	The same thing happens for all TOPBUCKS linkcodes .. the ID is replaced instantly when I load it in IE __________________ Submit my videos to make bank, tons of 5 minute videos offered right here

07-02-2004, 10:20 AM	#22
gazool Confirmed User Join Date: Aug 2003 Location: DK Posts: 779	I see your ID after loading the link __________________ High Converting CCBILL Programs Amateur/CFNM -> http://www.boozedwomen.com/tour/ Best Selling Granny Site -> http://www.excitedwives.com/tour/ If I had a hammer....

07-02-2004, 09:00 AM	#1
biskoppen Confirmed User Join Date: Mar 2003 Location: Very small penis Posts: 5,809	Someone is stealing OUR cash - Read this This is maybe old news but... I'm sitting here .. making a gay gallery .. NastyDollars : BoysFirstTime .. Then I found out when testing the shit that my ID in the link is being replace my some fucking TROJAN in my machine .. and it inserts a new ID everytime I load the link in my browser These are the NastyDollars ID's I get : bbriann01 claudel lamarre12 yvand001 normans louis123 duguay I would be very interesting to see if some of you guys sees the same thing. Try and put this link in your IE and see if the ID remains the same and post the result in this thread. http://www.boysfirsttime.com/main.htm?id=biskoppen And if NastyDollars reads this thread you might wanne consider deleting the above accounts. __________________ Submit my videos to make bank, tons of 5 minute videos offered right here

07-02-2004, 09:01 AM	#2
Chris Too lazy to set a custom title Industry Role: Join Date: May 2003 Location: icq: 71462500 Skype: Jupzchris Posts: 27,880	uh ohhhhh __________________ [email protected]

07-02-2004, 09:01 AM	#3
Corleone C.R.E.A.M Industry Role: Join Date: Apr 2003 Posts: 15,262	i see your id thanks for the gay link... could't you just link cumfiesta or mikeinbrazil? :D

07-02-2004, 09:03 AM	#4
Adultlexicon Confirmed User Join Date: Aug 2003 Location: Netherlands Posts: 816	probaly the reason my ratio is 1:7000 with nastydollars today fucking spyware trojan fuckups

07-02-2004, 09:03 AM	#7
Dirty F Too lazy to set a custom title Industry Role: Join Date: Jul 2001 Posts: 59,204	Yup, this way of stealing traffic is getting really popular and its happening more than we think it is.

07-02-2004, 09:05 AM	#9
Marcus Aurelius No Refunds Issued. Industry Role: Join Date: Apr 2003 Posts: 14,809	http://www.trojanhunter.com/ Works wonders, and runs in your taskbar like virus scan monitoring all your inbound and outbound traffic.

07-02-2004, 09:07 AM	#10
EviLGuY So Fucking Banned Join Date: Apr 2003 Location: malta Posts: 12,745	Works for me.. sounds like you got a nasty on your system.

07-02-2004, 09:09 AM	#12
More Booze Confirmed User Join Date: Mar 2004 Posts: 5,116	also got your ID

07-02-2004, 09:10 AM	#14
sixxxth_sense So Fucking Banned Join Date: Nov 2003 Location: T.O. Posts: 2,430	don't use IE! simple!

07-02-2004, 09:18 AM	#20
Tom_PMs Confirmed User Join Date: Jun 2004 Posts: 2,049	What you/we need is some code to verify our linking codes are working on a persons browser before we let them actually GO to the sponsors site... BTW: your code appeared for me all the way to the join page. But I'm not buying, sorry

07-02-2004, 09:19 AM	#21
DarkJedi No Refunds Issued. Industry Role: Join Date: Feb 2001 Location: GFY Posts: 28,300	1. dont use IE 2. contact ND and tell them to ban the IDs

07-02-2004, 10:25 AM	#23
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,409	They were having a similar problem with allsitesaccess. It kept sending certain surfers to a link with one of the Nasty Dollars crews affiliate code in it. Hmm... Strange shit going on over there.

07-02-2004, 10:29 AM	#25
pussyluver Clueless OleMan Join Date: Mar 2003 Location: ICQ - 169903487 Posts: 11,009	Got your ID here

07-02-2004, 10:33 AM	#27
CBytch Confirmed User Join Date: Apr 2004 Location: Toronto Posts: 257	Opened the link in firefox and IE and got your ref code.

07-02-2004, 10:44 AM	#29
andi_germany Confirmed User Join Date: Oct 2002 Location: Germany Posts: 768	I might be talking rubbish here but wouldn't the following work? Replace one letter in the ref url with its escape char like used for putting spaces in an url. Wouldn't that stop the trojan to identify the url you are linking to and therefore leave it as it is? __________________ SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, then you may use a 624x80 instead of a 120x60.

07-02-2004, 10:47 AM	#30
maxjohan Confirmed User Join Date: Dec 2002 Location: Sweden Posts: 7,219	Couldnt this be fixed with a console or something. You know those you put on your AVS site, huh? __________________ I went from 100 to 313,000 satoshis in 2 days! Lots of daily freerolls...

07-02-2004, 10:55 AM	#31
Manowar jellyfish Join Date: Dec 2003 Posts: 71,528	Mozilla Firefox Thank me later

07-02-2004, 10:56 AM	#32
gregtx Confirmed User Industry Role: Join Date: Jan 2002 Location: Dallas, TX Posts: 1,929	i've had similar webmasters complain to me that their traffic was being redirected.. after days of finger pointing they found the spyware that was redirecting the traffic... scary thing is how many of those surfers are getting this and not getting your links... __________________ Processing Partners http://www.processingpartners.com

07-02-2004, 10:58 AM	#33
Rochard Jägermeister Test Pilot Industry Role: Join Date: Dec 2001 Location: NORCAL Posts: 74,019	I use IE and your code followed all the way through. The problem is not what "we" are using for a browser. It's what the surfer is using. Any company caught doing this should be shut down and publically banned. __________________ “The choice is no longer between right or left. The choice is between normal and crazy.” - Sarah Huckabee Sanders YNOT MAIL \| THE BEST ADULT MAILING SOLUTION

07-02-2004, 11:02 AM	#35
emthree Dialer Kingpin Join Date: Jun 2003 Location: New York Posts: 10,816	Properly investigate the situation at hand before removing anything. I'm sure by doing this you can prompt an investigation by ND and the other sponsors who were targeted. It would also be interesting to see how this plays out, I would love to see the status of those IDs. __________________ • Sell Patches & Pills •

07-02-2004, 11:08 AM	#36
Tuna Confirmed User Join Date: May 2002 Location: Steeler Country Posts: 1,307	it worked ok for me. i hope nd does the right thing and bans those user ids. __________________ $30 PER SIGNUP PLUS 25% RECURRING FREE HOSTED PIC AND MOVIE GALLERIES Submit Your Free Sites, Pic and Movie Galleries Here ICQ : 20034024

07-02-2004, 11:19 AM	#37
Reak So Fucking Banned Join Date: Mar 2003 Location: 420Calendar.com Posts: 17,920	i was playing with my dick next time post welivetogether or mikeinbrazil thanks

07-02-2004, 11:21 AM	#38
GigaChris Confirmed User Join Date: Dec 2002 Location: CA Posts: 1,383	I clicked that link & when to http://www.boysfirsttime.com/main.htm?id=biskoppen __________________ __chris Operations Director www.gigacash.com icq# 154169968 Selling your biz? Selling premium domains? We buy. Contact me.

07-02-2004, 11:46 AM	#39
Pussy Dialers Registered User Join Date: Jul 2004 Posts: 63	Codelifters has a program to encrypt your links to help prevent link high jacking http://www.codelifter.com/lc5index.html __________________ Pussy Dialers ICQ: 320191378 Email: [email protected]

07-02-2004, 12:58 PM	#41
TweetyBird Confirmed User Join Date: Feb 2004 Location: Canadian this !!! Posts: 8,532	I also see your ID __________________ sig for sale. ICQ :338213644

07-02-2004, 01:00 PM	#42
TheSwed Confirmed User Join Date: Feb 2004 Location: Sweden. Posts: 3,483	works fine here...geo redirect? __________________ Cheap Viagra and Cialis Erectionpills

07-02-2004, 01:04 PM	#43
Vitasoy GFY HALL OF FAME DAMMIT!!! Join Date: Oct 2003 Posts: 58,202	All is well over here. __________________ [email protected]

07-02-2004, 01:07 PM	#44
TheSwed Confirmed User Join Date: Feb 2004 Location: Sweden. Posts: 3,483	You can read about the problem here http://www.gofuckyourself.com/showth...hreadid=319946 and the answer from ND "Problem #1 allsitesaccess links are being redirected to learnaboutyourself.com - typo in DNS led to improper re-direct for a short period of time. if you think your account was effected, please send email to [email protected] and we will review it. Problem #2 tgp galleries are being redirected from http://gallys.nastydollars.com/mi/16/?id=yourrefcode to http://www.mikeinbrazil.com/main.htm?id=feligo1 An improper re-direct code was uploaded. This has also been fixed. any questions or comments email [email protected]" __________________ Cheap Viagra and Cialis Erectionpills

07-02-2004, 01:11 PM	#45
The Other Steve Confirmed User Join Date: Dec 2001 Location: Sunny Queensland - perfect one day and better the next. Posts: 2,106	This is a problem hitting mainstream affiliates too. There has been a lot of talk on one of the major boards about it after one scammer actually won an award for the most sales. It needs clear and obvious action on the part of the sponsors otherwise they are going to start losing affiliates. __________________ Left intentionally blank ... just like my brain

07-02-2004, 01:14 PM	#46
Diligent Confirmed User Join Date: Aug 2003 Location: Hoy Suecia, mañana Nirvana Posts: 1,594	Hmm.. I'd like all & any of these assholes taken to cell # 105 in Bubba's prison please.. Question for all having noticed this: Does the spyware affect links for you even if you filter your traffic to your own place before sending it to sponsors? __________________ ~¤~ MORE MONEY ~¤~ VOD? XoD! ~¤~ ~¤~ ICQ# 9828 2461 ~¤~