Pichunter, Virus, anyone... ? - GoFuckYourself.com

http · 01-03-2006, 01:11 PM

Anyone else getting an auto-download of "pic.wmf" on pichunter?

Careful, it's VERY nasty and hard to get rid of (with IE).

pr0 · 01-03-2006, 01:16 PM

its interesting how many threads i've seen about a virus on pichunter over the years

if its a wmf, its using that new exploit that was on the news yesterday

pornguy · 01-03-2006, 01:17 PM

Has anyone talked to them about it. that is nasty shit to have to get rid of.

http · 01-03-2006, 01:18 PM

Yes it is using that one. But seems like not everyone knows yet. I.e. madthumbs is still trading with pichunter, etc...

SmokeyTheBear · 01-03-2006, 01:38 PM

Quote:

Originally Posted by pornguy

Has anyone talked to them about it. that is nasty shit to have to get rid of.

doesn't look unintentional to me. could be wrong though

pr0 · 01-03-2006, 01:53 PM

Quote:

Originally Posted by SmokeyTheBear

doesn't look unintentional to me. could be wrong though

this is like the 10th pichunter virus thread i've seen in my years here

SmokeyTheBear · 01-03-2006, 02:04 PM

btw this version is stealing from all of us webmasters.. replacing ref codes for the biggest adult sites, so all those big tgp's are going to notice a big drop in conversions as the surfers get infected..

FreeOnes · 01-03-2006, 02:08 PM

Quote:

Originally Posted by SmokeyTheBear

btw this version is stealing from all of us webmasters.. replacing ref codes for the biggest adult sites, so all those big tgp's are going to notice a big drop in conversions as the surfers get infected..

What's going on with the word FreeOnes in your sig ?

SmokeyTheBear · 01-03-2006, 02:17 PM

Quote:

Originally Posted by FreeOnes

What's going on with the word FreeOnes in your sig ?

my sig knows who you are

p.s. for me it says Smokeythebear

gotys · 01-04-2006, 06:23 AM

Hello people,

this are news to me, and you can trust me when I say it's definetely NOT from our site! I will check into it now and let you all know

gotys · 01-04-2006, 06:29 AM

Can someone please let me know if it's gone now? And if not...how do I detect it? I can't seem to be getting the virus, and I can't get rid of the problem, if I can't reproduce it. I would like to find out what is happening. If someone can assist, I'd be very thankful. Thank u

PussyTeenies · 01-04-2006, 06:53 AM

contacted you

(bill)

Trixxxia · 01-05-2006, 08:25 AM

Quote:

Originally Posted by SmokeyTheBear

btw this version is stealing from all of us webmasters.. replacing ref codes for the biggest adult sites, so all those big tgp's are going to notice a big drop in conversions as the surfers get infected..

I don't get it either and I don't have anything on my laptop that would block it either. SmokeyTheBear - do you get it? Whomever has it load, should hit up gotys, take screencaps and if you have the file download, you should zip it and forward it to gotys to figure out who or what it is.

stev0 · 01-05-2006, 08:41 AM

is it winxp sp2 that is detecting it? or antivirus software?

pr0 · 01-05-2006, 09:51 AM

Quote:

Originally Posted by gotys

Can someone please let me know if it's gone now? And if not...how do I detect it? I can't seem to be getting the virus, and I can't get rid of the problem, if I can't reproduce it. I would like to find out what is happening. If someone can assist, I'd be very thankful. Thank u

ok so you "got it" on your xp box...& somehow it found a way onto your linux server magically

johnnyhey · 01-05-2006, 10:49 AM

Quote:

Originally Posted by http

Anyone else getting an auto-download of "pic.wmf" on pichunter?

Careful, it's VERY nasty and hard to get rid of (with IE).

which prompts the question of why anyone's still using IE?

SmokeyTheBear · 01-05-2006, 10:52 AM

Quote:

Originally Posted by TopBucksTrixxxia

I don't get it either and I don't have anything on my laptop that would block it either. SmokeyTheBear - do you get it? Whomever has it load, should hit up gotys, take screencaps and if you have the file download, you should zip it and forward it to gotys to figure out who or what it is.

it was gone by the time gotys posted i believe. it was one of the new ones and loaded from a file on his server not on an external server.

stev0 · 01-05-2006, 11:19 AM

Quote:

Originally Posted by pr0

ok so you "got it" on your xp box...& somehow it found a way onto your linux server magically

Could have been a hacker... Tom runs a huge site and i doubt he would intentionally do something like spread a virus to ruin his reputation. You guys could also have an infected hosts file, and the pichunter.com you see isn't the real pichunter. I run alot of protection and i've never noticed any warnings when accessing pichunter, I usually am just in the submit area though.

Be sure to do a scan with adaware and spybot, and use spybot to immunize your system. And use firefox ;)

SmokeyTheBear · 01-05-2006, 11:25 AM

Quote:

Originally Posted by stev0

\You guys could also have an infected hosts file, and the pichunter.com you see isn't the real pichunter. \

no thats not what happened in this case.

Trixxxia · 01-06-2006, 03:33 AM

gotys, as per thinkx a few other sites had the same problem :

http://www.gofuckyourself.com/showthread.php?t=560612

01-03-2006, 01:11 PM	#1
http Confirmed User Join Date: Oct 2001 Posts: 1,811	Pichunter, Virus, anyone... ? Anyone else getting an auto-download of "pic.wmf" on pichunter? Careful, it's VERY nasty and hard to get rid of (with IE).

01-03-2006, 01:16 PM	#2
pr0 rockin tha trailerpark Industry Role: Join Date: May 2001 Location: ~Coastal~ Posts: 23,088	its interesting how many threads i've seen about a virus on pichunter over the years if its a wmf, its using that new exploit that was on the news yesterday __________________ __________ Loadedca$h - get sum! - Revengebucks - mmm rebills! - webair (gotz sErVrz)

01-03-2006, 01:17 PM	#3
pornguy Too lazy to set a custom title Industry Role: Join Date: Mar 2003 Location: Homeless Posts: 62,911	Has anyone talked to them about it. that is nasty shit to have to get rid of. __________________ PornGuy skype me pornguy_epic AmateurDough The Hottes Shemales online! TChicks.com \| Angeles Cid \| Mariana Cordoba \| MAILERS WELCOME!

01-03-2006, 02:04 PM	#7
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	btw this version is stealing from all of us webmasters.. replacing ref codes for the biggest adult sites, so all those big tgp's are going to notice a big drop in conversions as the surfers get infected.. __________________ hatisblack at yahoo.com

01-04-2006, 06:23 AM	#10
gotys Confirmed User Join Date: Feb 2002 Location: Europe Posts: 767	Hello people, this are news to me, and you can trust me when I say it's definetely NOT from our site! I will check into it now and let you all know __________________ PicHunter.com,ClipHunter.com,HomeTwat.com -------------------------------------------- not accepting any trades, not selling spots

01-03-2006, 01:18 PM	#4
http Confirmed User Join Date: Oct 2001 Posts: 1,811	Yes it is using that one. But seems like not everyone knows yet. I.e. madthumbs is still trading with pichunter, etc...

01-04-2006, 06:29 AM	#11
gotys Confirmed User Join Date: Feb 2002 Location: Europe Posts: 767	Can someone please let me know if it's gone now? And if not...how do I detect it? I can't seem to be getting the virus, and I can't get rid of the problem, if I can't reproduce it. I would like to find out what is happening. If someone can assist, I'd be very thankful. Thank u __________________ PicHunter.com,ClipHunter.com,HomeTwat.com -------------------------------------------- not accepting any trades, not selling spots

01-04-2006, 06:53 AM	#12
PussyTeenies Confirmed User Join Date: Feb 2005 Location: Haarlem and Amsterdam, capital of the porn world ;-) Posts: 6,496	contacted you (bill) __________________ Need adult hosting? Contact us! WARM Hosting Need an IT solution? or someone to check your site and security? Nossie - IT Professional

01-05-2006, 08:41 AM	#14
stev0 Confirmed User Join Date: Aug 2003 Location: Calgary, Alberta Posts: 6,801	is it winxp sp2 that is detecting it? or antivirus software?

01-06-2006, 03:33 AM	#20
Trixxxia Confirmed User Industry Role: Join Date: Aug 2004 Location: Montreal, Canada Posts: 5,600	gotys, as per thinkx a few other sites had the same problem : http://www.gofuckyourself.com/showthread.php?t=560612