GFY on the MALWARE list? google is saying so.

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • gleem
    Confirmed User
    • Jun 2001
    • 5593

    #1

    GFY on the MALWARE list? google is saying so.

    For some reason I'm guessing either an iframe from a banner or gfy is actually being assfucked somehow, I'm getting malware warnings out of safari which just uses google's safebrowsing DB, picking up "nigya.com" on GFY's pages:





    Contact me: \\// E: webmaster /at/ unprofessional.com
  • The Duck
    Adult Content Provider
    • May 2005
    • 18243

    #2
    I get warnings from my antivirus software in many threads from peoples signature images / codes.
    Skype Horusmaia
    ICQ 41555245
    Email [email protected]

    Comment

    • Serge Litehead
      Confirmed User
      • Dec 2002
      • 5190

      #3
      same here.. been acting weird lately.. had acrobat reader start up just now coming to the main forum.

      Comment

      • alias
        aliasx
        • Apr 2001
        • 19010

        #4
        I got this too, same domain.
        https://porncorporation.com

        Comment

        • roly
          Confirmed User
          • Aug 2002
          • 1844

          #5
          i've just had java start up when visiting the main forum, zonealarm blocked it from accessing 66.197.237.165

          Comment

          • BV
            wtf
            • Sep 2001
            • 10914

            #6
            same here

            Comment

            • Barefootsies
              Choice is an Illusion
              • Feb 2005
              • 42635

              #7
              Originally posted by The Duck
              I get warnings from my antivirus software in many threads from peoples signature images / codes.
              Correct.

              Many of the sig images are causing shit to go off.
              Should You Email Your Members?

              Link1 | Link2 | Link3

              Enough Said.

              "Would you rather live like a king for a year or like a prince forever?"

              Comment

              • chupachups
                Confirmed User
                • Dec 2002
                • 6576

                #8
                Its teencat cookie stuffing and haxxoring your asses

                Comment

                • roly
                  Confirmed User
                  • Aug 2002
                  • 1844

                  #9
                  Originally posted by Barefootsies
                  Correct.

                  Many of the sig images are causing shit to go off.
                  well i just got something very suspicious before visiting a thread, just this forum.

                  Comment

                  • gleem
                    Confirmed User
                    • Jun 2001
                    • 5593

                    #10
                    Originally posted by Barefootsies
                    Correct.

                    Many of the sig images are causing shit to go off.
                    nope, couldn't be since I was loading the main forum page, not a thread which set this thing off... so it had to be GFY itself or a banner they have.




                    Contact me: \\// E: webmaster /at/ unprofessional.com

                    Comment

                    • redwhiteandblue
                      Bollocks
                      • Jun 2007
                      • 2793

                      #11
                      Kaspersky say so too.
                      Interserver unmanaged AMD Ryzen servers from $73.00

                      Comment

                      • Cyber Fucker
                        Hmm
                        • Sep 2005
                        • 12642

                        #12
                        Yup, same here, right after I opened GFY now I got an avast alarm.

                        Code:
                        2010-03-26	21:23:10		SYSTEM	884	Sign of "JS:Pdfka-gen [Expl]" has been found in "http://66.197.237.165/g54ty/tmp/newplayer.pdf" file.  
                        2010-03-26	21:23:10		SYSTEM	884	Sign of "JS:Pdfka-gen [Expl]" has been found in "http://66.197.237.165/g54ty/tmp/all.pdf" file.  
                        2010-03-26	21:23:34		SYSTEM	884	Sign of "JS:Pdfka-gen [Expl]" has been found in "http://66.197.237.165/g54ty/tmp/newplayer.pdf" file.
                        Last edited by Cyber Fucker; 03-26-2010, 01:32 PM.

                        Comment

                        • Stuntpig
                          Confirmed User
                          • Feb 2003
                          • 299

                          #13
                          Originally posted by BV
                          same here

                          Thats what I got too.

                          Comment

                          • RyuLion
                            • Mar 2003
                            • 32369

                            #14
                            I've been getting this for months but its all good..

                            Adult Biz Consultant A tech head since 1995
                            Affiliate Support: Chaturbate | CCBill Live

                            Comment

                            • Eric
                              Confirmed User
                              • Dec 2000
                              • 8818

                              #15
                              we are looking into this, hope to have it figured out shortly
                              No One

                              Comment

                              • Jman
                                Already an AI veteran
                                • Sep 2003
                                • 22838

                                #16
                                Originally posted by Eric
                                we are looking into this, hope to have it figured out shortly
                                Yay for Save a Hoe
                                Orkestrait NSFW AI
                                FantasyXXX.AI
                                Email: [email protected] TG: @jman1216

                                Comment

                                • BarryP
                                  Confirmed User
                                  • Oct 2002
                                  • 145

                                  #17
                                  Can you guys give me some more details on this? So far I am unable to duplicate. What OS are you running? Browser? any Antivirus? Thanks..
                                  Who will be the next MissGFY?!
                                  Attention Industry Females & Solo Girls - Register Now for MissGFY Q4


                                  GoFuckYourself.com
                                  Have a Suggestion? Issue? Interested in Advertising? Contact me!
                                  Barryp AT adult.com | icq 559539603

                                  Comment

                                  • kristin
                                    GOO!
                                    • Sep 2002
                                    • 9768

                                    #18
                                    Originally posted by Barefootsies
                                    Correct.

                                    Many of the sig images are causing shit to go off.
                                    Seems like quite a few more people complaining about this for it to be sigs, since well, sigs have been around for quite some time.
                                    Vacares rules.

                                    "Usually only fat guys have the kind of knowledge and ability that Kristin has."

                                    Comment

                                    • Cyber Fucker
                                      Hmm
                                      • Sep 2005
                                      • 12642

                                      #19
                                      Originally posted by BarryP
                                      Can you guys give me some more details on this? So far I am unable to duplicate. What OS are you running? Browser? any Antivirus? Thanks..
                                      WindowsXP, FireFox 2.0.0.20, Avast

                                      Comment

                                      • BarryP
                                        Confirmed User
                                        • Oct 2002
                                        • 145

                                        #20
                                        Does this alert happen every time a page loads? is it intermittent?
                                        Who will be the next MissGFY?!
                                        Attention Industry Females & Solo Girls - Register Now for MissGFY Q4


                                        GoFuckYourself.com
                                        Have a Suggestion? Issue? Interested in Advertising? Contact me!
                                        Barryp AT adult.com | icq 559539603

                                        Comment

                                        • TheDoc
                                          Too lazy to set a custom title
                                          • Jul 2001
                                          • 13827

                                          #21
                                          I got it in chrome.. when I clicked to come to gfy, a plugin for a banner tried to load, I clicked no and the banner failed to load. I have flash installed so I assume it wasn't flash.
                                          ~TheDoc - ICQ7765825
                                          It's all disambiguation

                                          Comment

                                          • halfpint
                                            GFY's Halfpint
                                            • Jun 2007
                                            • 15223

                                            #22
                                            Im running avast and getting nothing here nor on google when I search for it. GFY has been tampered with I think

                                            Get FREE website listings on Cryptocoinshops.net

                                            Comment

                                            • Aric
                                              Confirmed User
                                              • Sep 2002
                                              • 1209

                                              #23
                                              Happens here too in all browsers, but not on every page load, so must be a banner in rotation.
                                              Awesome cloud hosting by DigitalOcean

                                              Comment

                                              • Juicy D. Links
                                                So Fucking Banned
                                                • Apr 2001
                                                • 122992

                                                #24
                                                fuck i getting it also i just made apost about it

                                                The site at njgya.com has been reported as an attack site and has been blocked based on your security preferences.

                                                Comment

                                                • Juicy D. Links
                                                  So Fucking Banned
                                                  • Apr 2001
                                                  • 122992

                                                  #25
                                                  Originally posted by BarryP
                                                  Can you guys give me some more details on this? So far I am unable to duplicate. What OS are you running? Browser? any Antivirus? Thanks..
                                                  Kaspersky 2010 , FF 3.6 , happening intermittently XP SP3

                                                  Comment

                                                  • gleem
                                                    Confirmed User
                                                    • Jun 2001
                                                    • 5593

                                                    #26
                                                    Originally posted by BarryP
                                                    Does this alert happen every time a page loads? is it intermittent?
                                                    I've been browsing on and off for 2 hours and it happened three times. I am guessing it's in your banner rotation since I wasn't in a thread when it happens, just these pages:

                                                    http://www.gfy.com/forumdisplay.php?f=26
                                                    http://www.gofuckyourself.com/forumdisplay.php?f=26


                                                    I am browsing with safari on osx 10.6




                                                    Contact me: \\// E: webmaster /at/ unprofessional.com

                                                    Comment

                                                    • Domain Broker
                                                      So Fucking Banned
                                                      • Oct 2004
                                                      • 2427

                                                      #27
                                                      I haven't seen this on any of my boxes or browsers.

                                                      Comment

                                                      • DeanCapture
                                                        Haters & Trolls SUCK!
                                                        • Dec 2002
                                                        • 9275

                                                        #28
                                                        I'm on Mac OSX - running Safari. Sometimes it does it - sometimes not. Right now I'm on Firefox - not having any issues....
                                                        Twitter: @DeanCapture
                                                        Instagram: @TheDeanCapture
                                                        DeanCapture "at" Gmail.com

                                                        Comment

                                                        • halfpint
                                                          GFY's Halfpint
                                                          • Jun 2007
                                                          • 15223

                                                          #29
                                                          Originally posted by Cyber Fucker
                                                          Yup, same here, right after I opened GFY now I got an avast alarm.

                                                          Code:
                                                          2010-03-26	21:23:10		SYSTEM	884	Sign of "JS:Pdfka-gen [Expl]" has been found in "http://66.197.237.165/g54ty/tmp/newplayer.pdf" file.  
                                                          2010-03-26	21:23:10		SYSTEM	884	Sign of "JS:Pdfka-gen [Expl]" has been found in "http://66.197.237.165/g54ty/tmp/all.pdf" file.  
                                                          2010-03-26	21:23:34		SYSTEM	884	Sign of "JS:Pdfka-gen [Expl]" has been found in "http://66.197.237.165/g54ty/tmp/newplayer.pdf" file.
                                                          just looked on may avast log and have exactly the same from today something did pop up but I wassent browsing GFY but it was open in my bottom tab and I assumed it was something else which I was browsing the log time is 20:37:35 so im guessing this is from gfy now

                                                          Get FREE website listings on Cryptocoinshops.net

                                                          Comment

                                                          • Juicy D. Links
                                                            So Fucking Banned
                                                            • Apr 2001
                                                            • 122992

                                                            #30
                                                            Originally posted by DeanCapture
                                                            I'm on Mac OSX - running Safari. Sometimes it does it - sometimes not. Right now I'm on Firefox - not having any issues....
                                                            i think Achmed is running this attack

                                                            Comment

                                                            • BarryP
                                                              Confirmed User
                                                              • Oct 2002
                                                              • 145

                                                              #31
                                                              The issue has been located! Thanks for the help guys, will be fixed soon!
                                                              Who will be the next MissGFY?!
                                                              Attention Industry Females & Solo Girls - Register Now for MissGFY Q4


                                                              GoFuckYourself.com
                                                              Have a Suggestion? Issue? Interested in Advertising? Contact me!
                                                              Barryp AT adult.com | icq 559539603

                                                              Comment

                                                              • TurboAngel
                                                                H.B.I.C.
                                                                • Jun 2003
                                                                • 30122

                                                                #32
                                                                Originally posted by BV
                                                                same here

                                                                That's what I get from time to time.

                                                                Comment

                                                                • Juicy D. Links
                                                                  So Fucking Banned
                                                                  • Apr 2001
                                                                  • 122992

                                                                  #33
                                                                  Originally posted by BarryP
                                                                  The issue has been located! Thanks for the help guys, will be fixed soon!
                                                                  3/26/2010 6:47:38 PM Detected: Exploit.JS.Pdfka.bxa hXXp://mjgjo.com/cgi-bin/clido/s002102317801r0409J11000601R742f0b63Xb4122ccfYffbe fb92Z03002f36//data0000[/url] Firefox


                                                                  3/26/2010 6:47:38 PM Denied: Exploit.JS.Pdfka.bxa hXXp://mjgjo.com/cgi-bin/clido/s002102317801r0409J11000601R742f0b63Xb4122ccfYffbe fb92Z03002f36//data0000[/url] Firefox


                                                                  just got that on KIS while on GFY

                                                                  Comment

                                                                  • BarryP
                                                                    Confirmed User
                                                                    • Oct 2002
                                                                    • 145

                                                                    #34
                                                                    I'll be making some updates today and tomorrow, but please let me know if this error is still occurring.
                                                                    Who will be the next MissGFY?!
                                                                    Attention Industry Females & Solo Girls - Register Now for MissGFY Q4


                                                                    GoFuckYourself.com
                                                                    Have a Suggestion? Issue? Interested in Advertising? Contact me!
                                                                    Barryp AT adult.com | icq 559539603

                                                                    Comment

                                                                    • CamTraffic
                                                                      Confirmed User
                                                                      • Feb 2008
                                                                      • 6538

                                                                      #35
                                                                      yeah same here on Chrome
                                                                      I am always buying traffic and white labels. Hit me up.
                                                                      Email me HERE!

                                                                      Comment

                                                                      • biskoppen
                                                                        Confirmed User
                                                                        • Mar 2003
                                                                        • 5809

                                                                        #36
                                                                        Smells like a trojan to me
                                                                        Submit my videos to make bank, tons of 5 minute videos offered right here

                                                                        Comment

                                                                        • Sly
                                                                          Let's do some business!
                                                                          • Sep 2004
                                                                          • 31376

                                                                          #37
                                                                          I keep getting it sporadically.
                                                                          Vacares - Web Hosting, Domains, O365, Security & More - Paxum and BTC Accepted

                                                                          Windows VPS now available
                                                                          Great for TSS, Nifty Stats, remote work, virtual assistants, etc.
                                                                          Click here for more details.

                                                                          Comment

                                                                          • seeandsee
                                                                            Check SIG!
                                                                            • Mar 2006
                                                                            • 50945

                                                                            #38
                                                                            I blocked some pages with Avira because i get trigger on them
                                                                            BUY MY SIG - 50$/Year

                                                                            Contact here

                                                                            Comment

                                                                            • WiredGuy
                                                                              Pounding Googlebot
                                                                              • Aug 2002
                                                                              • 34512

                                                                              #39
                                                                              I've been getting this all day too, I'm guessing its a sig or banner that's triggering it?
                                                                              WG
                                                                              I play with Google.

                                                                              Comment

                                                                              • candyflip
                                                                                Carpe Visio
                                                                                • Jul 2002
                                                                                • 43069

                                                                                #40
                                                                                I always get one when I open a thread and someone posting with an AdultGruntWork.com has posted in that thread already.

                                                                                Spend you some brain.
                                                                                Email Me

                                                                                Comment

                                                                                • tiger
                                                                                  Confirmed User
                                                                                  • Apr 2002
                                                                                  • 6986

                                                                                  #41
                                                                                  I'm running avast and no problems here.

                                                                                  Comment

                                                                                  • Chosen
                                                                                    • Aug 2001
                                                                                    • 63151

                                                                                    #42
                                                                                    Hope it will get fixed soon...

                                                                                    Comment

                                                                                    • Abracadabra_nl
                                                                                      Confirmed User
                                                                                      • Jun 2005
                                                                                      • 147

                                                                                      #43
                                                                                      I don't get any of these messages. (Running Mac OSX here)
                                                                                      TubeUploads.com – The #1 Upload Service for Professionals

                                                                                      Comment

                                                                                      • Waddymelon
                                                                                        So Fucking Banned
                                                                                        • Oct 2009
                                                                                        • 17349

                                                                                        #44
                                                                                        I have a feeling that fatfoo is behind this.

                                                                                        Comment

                                                                                        • Tamashi
                                                                                          Confirmed User
                                                                                          • Oct 2009
                                                                                          • 728

                                                                                          #45
                                                                                          Originally posted by seeandsee
                                                                                          I blocked some pages with Avira because i get trigger on them
                                                                                          Avira must be one of the shittiest scanners ever. I'm getting warnings on every single site that runs on smarty lol.

                                                                                          Contacted avira to make them aware of the fake warnings, and they don't even reply. There have been several threads about smarty and avira and hundreds of people reporting the same thing, but they don't seem to care
                                                                                          ++ SIGNATURE FOR SALE ++
                                                                                          ICQ: 565-013-936

                                                                                          Comment

                                                                                          • roly
                                                                                            Confirmed User
                                                                                            • Aug 2002
                                                                                            • 1844

                                                                                            #46
                                                                                            Originally posted by Tamashi
                                                                                            Avira must be one of the shittiest scanners ever. I'm getting warnings on every single site that runs on smarty lol.

                                                                                            Contacted avira to make them aware of the fake warnings, and they don't even reply. There have been several threads about smarty and avira and hundreds of people reporting the same thing, but they don't seem to care
                                                                                            just turn the heuristic level down to medium that will stop most false positives.

                                                                                            Comment

                                                                                            • RadicalSights
                                                                                              So Fucking Banned
                                                                                              • Mar 2009
                                                                                              • 1595

                                                                                              #47
                                                                                              Originally posted by biskoppen
                                                                                              Smells like a trojan to me
                                                                                              how do they smell?

                                                                                              Comment

                                                                                              • roly
                                                                                                Confirmed User
                                                                                                • Aug 2002
                                                                                                • 1844

                                                                                                #48
                                                                                                Originally posted by tiger
                                                                                                I'm running avast and no problems here.
                                                                                                it might be worth scanning with something else like malwarebytes or something just to double check. i would be concerned if i didn't have any obvious problems when everyone else did. you could be lucky or its just undetected.

                                                                                                Comment

                                                                                                • NaughtyRob
                                                                                                  Two fresh affiliate progs
                                                                                                  • Nov 2004
                                                                                                  • 29602

                                                                                                  #49
                                                                                                  Got it during the day yesterday (Mac OSX on Safari) but not at all last night or today.
                                                                                                  [email protected]
                                                                                                  Skype: 17026955414
                                                                                                  Vacares Web Hosting - Protect Your Ass with Included Daily Backups

                                                                                                  Comment

                                                                                                  • Serge Litehead
                                                                                                    Confirmed User
                                                                                                    • Dec 2002
                                                                                                    • 5190

                                                                                                    #50
                                                                                                    Originally posted by Tamashi
                                                                                                    Avira must be one of the shittiest scanners ever. I'm getting warnings on every single site that runs on smarty lol.

                                                                                                    Contacted avira to make them aware of the fake warnings, and they don't even reply. There have been several threads about smarty and avira and hundreds of people reporting the same thing, but they don't seem to care
                                                                                                    smarty doesn't leave any traces of itself in html. we use smarty behind silvercrocodile.com - until this fact is made known, how would anyone be able to tell? it works on server side before any html is outputted to a client side. what i'm saying is that no client can determine if smarty used or not by looking at source code. headers also don't show any smarty traces.

                                                                                                    Comment

                                                                                                    Working...