NOt THIS SHIT AGAIN!!!! MALAWARE - GoFuckYourself.com

inabon · 01-29-2011, 06:10 AM

Warning: Visiting this site may harm your computer!
The website at gofuckyourself.com contains elements from the site ****************, which appears to host malware ? software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.
For detailed information about the problems with these elements, visit the Google Safe Browsing diagnostic page for ****************.
Learn more about how to protect yourself from harmful software online.
I understand that visiting this site may harm my computer.

WTF

Barefootsies · 01-29-2011, 06:12 AM

Yeah, I saw that in the content thread.

Oddly enough, if you look at some of the sites on that network. Some big players.

inabon · 01-29-2011, 06:15 AM

someone needs to clean their shit up

**************** - Geo Information
IP Address ****************
Host toni2.hosting.flyingcroc.net
Location US, United States
City Seattle, WA 98121
Organization NEW MEDIA GROUP
ISP Accretive Technology Group
AS Number AS11608 Accretive Technology Group, Inc.
Latitude 47°61'45" North
Longitude 122°34'80" West
Distance 9423.03 km (5855.20 miles)

OrgName: Accretive Technology Group, Inc.
OrgID: ACCR
Address: 2019 3rd Ave. Suite 200
City: Seattle
StateProv: WA
PostalCode: 98121
Country: US

ReferralServer: rwhois://rwhois.accretive-networks.net:4321

NetRange: 216.127.32.0 - 216.127.63.255
CIDR: 216.127.32.0/19
NetName: ANI-002
NetHandle: NET-216-127-32-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.ACCRETIVETG.NET
NameServer: NS2.ACCRETIVETG.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2001-07-25
Updated: 2006-10-23

RAbuseHandle: IA102-ARIN
RAbuseName: Accretive Networks Inc
RAbusePhone: +1-206-269-0190
RAbuseEmail: [email protected]

RNOCHandle: NOC152-ARIN
RNOCName: Accretive Networks Operations Center
RNOCPhone: +1-206-269-0190
RNOCEmail: [email protected]

RTechHandle: NET-ARIN
RTechName: Accretive Networks Network Engineering
RTechPhone: +1-206-269-0190
RTechEmail: [email protected]

OrgAbuseHandle: IA102-ARIN
OrgAbuseName: Accretive Networks Inc
OrgAbusePhone: +1-206-269-0190
OrgAbuseEmail: [email protected]

OrgNOCHandle: NOC152-ARIN
OrgNOCName: Accretive Networks Operations Center
OrgNOCPhone: +1-206-269-0190
OrgNOCEmail: [email protected]

OrgTechHandle: NET-ARIN
OrgTechName: Accretive Networks Network Engineering
OrgTechPhone: +1-206-269-0190
OrgTechEmail: [email protected]

# ARIN WHOIS database, last updated 2010-06-14 20:00
# Enter ? for additional hints on searching ARIN's WHOIS database.
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at https://www.arin.net/whois_tou.html
#
# Attention! Changes are coming to ARIN's Whois service on June 26.
# See https://www.arin.net/features/whois for details on the improvements

Barefootsies · 01-29-2011, 06:19 AM

It's obviously from a single poster who is in a ton of the main forum threads.

If you click into secondary sections, you will not get that alert. So it is one person with a bad sig link, avatar, or posting up some shit that is infected in the main section. If you would get the same alert in all sections, than you could say it's a GFY issue. But since it's main forum only, it is a single user infecting people and posting a lot.

inabon · 01-29-2011, 06:23 AM

true.. i know it is not GFY

says it on the warning. but it would be nice for the fucker posting to clean his shit up or the host

so lets look at it as kind of a public service type deal ... mods should read and see if they can find the bastard.

Barefootsies · 01-29-2011, 06:24 AM

Quote:

Originally Posted by inabon

but it would be nice for the fucker posting to clean his shit up or the host

.

Agreed.

It's this second or third time now within a month I think.

CurrentlySober · 01-29-2011, 06:24 AM

Im getting it in this thread, and there are only two posters above me...

http://www.gfy.com/fucking-around-and-business-discussion/1008051-wibya-toolbar.html

The website at www.gfy.com contains elements from the site ****************, which appears to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.
For detailed information about the problems with these elements, visit the Google Safe Browsing diagnostic page for ****************.
Learn more about how to protect yourself from harmful software online.

djroof · 01-29-2011, 06:25 AM

same here

Scott McD · 01-29-2011, 06:28 AM

Well isn't that just great...

inabon · 01-29-2011, 06:34 AM

found him martinsc...

dude your fucking sig http://****************/sig/624x80_1.gif sucks ass

clean your fucking servers.

THANKS MODS... Can i have a gfy coffee mug and poster for my office??? hahahahahaha

signupdamnit · 01-29-2011, 06:48 AM

Quote:

Originally Posted by inabon

found him martinsc...

dude your fucking sig http://****************/sig/624x80_1.gif sucks ass

clean your fucking servers.

THANKS MODS... Can i have a gfy coffee mug and poster for my office??? hahahahahaha

Allowing external images here is very risky and easily taken advantage of (I'm not going to elaborate to avoid giving anyone any ideas but I'm sure some people know what I'm talking about). I'm surprised they allow it for anyone but trusted posters with a lot to lose.

TheDoc · 01-29-2011, 06:54 AM

It looks like the FetishHits banner is the Malware... Both Martinsc and CaptainHowdy both have it. Opening the sig directly fires off the malware warning.

Barefootsies · 01-29-2011, 07:01 AM

Quote:

Originally Posted by TheDoc

Both Martinsc and CaptainHowdy both have it.

Ah ha!

Well that explains it then. They both are very active in the main forum.

CaptainHowdy · 01-29-2011, 07:11 AM

Quote:

Originally Posted by TheDoc

It looks like the FetishHits banner is the Malware... Both Martinsc and CaptainHowdy both have it. Opening the sig directly fires off the malware warning.

Already sent this one to Fetish Hits' Toni. It's a weekend so for now I'll just stop posting until this gets solved...

Zorgman · 01-29-2011, 09:19 AM

Yep, outside GFY images would be the issue. Saw a few guys use hosted services for their banners.

Fabien · 01-29-2011, 09:30 AM

got it too

potter · 01-29-2011, 09:45 AM

Quote:

Originally Posted by signupdamnit

Allowing external images here is very risky and easily taken advantage of (I'm not going to elaborate to avoid giving anyone any ideas but I'm sure some people know what I'm talking about). I'm surprised they allow it for anyone but trusted posters with a lot to lose.

It's not like any of you are in danger, so I don't know wtf you are complaining about. The SERVER the remote image was hosted on is the threat, not the image itself.

signupdamnit · 01-29-2011, 09:54 AM

Quote:

Originally Posted by potter

It's not like any of you are in danger, so I don't know wtf you are complaining about. The SERVER the remote image was hosted on is the threat, not the image itself.

That's not really what I'm talking about although a compromised server is always a potential danger. The potential issues are more than just malware (think other black hat stuff). I'm not going to explain it further for reasons I already explained but it surprises me that it hasn't became more of an issue in a place like this.

Jim_Gunn · 01-29-2011, 02:42 PM

I got infected by a really insidious malware twice last year surfing GFY through my Firefox browser. Took me the better part of two days and a lot of research and tools to get rid of it. I have since installed AdBlockPlus and NoScript plugins for Firefox and have been safe since.

Toni · 01-30-2011, 11:45 PM

The problem seems to be with our banner, thank you for pointing this out and I really apologize for the problem. We will check how this could happen and have it fixed asap.

Toni · 01-31-2011, 12:08 AM

This has been cleaned up and we requested the Malware warning to be removed.

Thanks one more time and I am really sorry about this.

martinsc · 01-31-2011, 12:59 PM

Quote:

Originally Posted by Toni

This has been cleaned up and we requested the Malware warning to be removed.

Thanks one more time and I am really sorry about this.

01-29-2011, 06:10 AM	#1
inabon Good Old Fat Webmaster Industry Role: Join Date: Jul 2002 Location: Boquete, Panamá Posts: 967	NOt THIS SHIT AGAIN!!!! MALAWARE Warning: Visiting this site may harm your computer! The website at gofuckyourself.com contains elements from the site **************, which appears to host malware ? software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer. For detailed information about the problems with these elements, visit the Google Safe Browsing diagnostic page for **************. Learn more about how to protect yourself from harmful software online. I understand that visiting this site may harm my computer. WTF __________________ Whoever dies with most toys wins.

01-29-2011, 06:12 AM	#2
Barefootsies Choice is an Illusion Industry Role: Join Date: Feb 2005 Location: Land of Obama Posts: 42,635	Yeah, I saw that in the content thread. Oddly enough, if you look at some of the sites on that network. Some big players. __________________ Should You Email Your Members? Link1 \| Link2 \| Link3 Enough Said. "Would you rather live like a king for a year or like a prince forever?"

01-29-2011, 06:15 AM	#3
inabon Good Old Fat Webmaster Industry Role: Join Date: Jul 2002 Location: Boquete, Panamá Posts: 967	someone needs to clean their shit up ************** - Geo Information IP Address ************** Host toni2.hosting.flyingcroc.net Location US, United States City Seattle, WA 98121 Organization NEW MEDIA GROUP ISP Accretive Technology Group AS Number AS11608 Accretive Technology Group, Inc. Latitude 47°61'45" North Longitude 122°34'80" West Distance 9423.03 km (5855.20 miles) OrgName: Accretive Technology Group, Inc. OrgID: ACCR Address: 2019 3rd Ave. Suite 200 City: Seattle StateProv: WA PostalCode: 98121 Country: US ReferralServer: rwhois://rwhois.accretive-networks.net:4321 NetRange: 216.127.32.0 - 216.127.63.255 CIDR: 216.127.32.0/19 NetName: ANI-002 NetHandle: NET-216-127-32-0-1 Parent: NET-216-0-0-0-0 NetType: Direct Allocation NameServer: NS1.ACCRETIVETG.NET NameServer: NS2.ACCRETIVETG.NET Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE RegDate: 2001-07-25 Updated: 2006-10-23 RAbuseHandle: IA102-ARIN RAbuseName: Accretive Networks Inc RAbusePhone: +1-206-269-0190 RAbuseEmail: [email protected] RNOCHandle: NOC152-ARIN RNOCName: Accretive Networks Operations Center RNOCPhone: +1-206-269-0190 RNOCEmail: [email protected] RTechHandle: NET-ARIN RTechName: Accretive Networks Network Engineering RTechPhone: +1-206-269-0190 RTechEmail: [email protected] OrgAbuseHandle: IA102-ARIN OrgAbuseName: Accretive Networks Inc OrgAbusePhone: +1-206-269-0190 OrgAbuseEmail: [email protected] OrgNOCHandle: NOC152-ARIN OrgNOCName: Accretive Networks Operations Center OrgNOCPhone: +1-206-269-0190 OrgNOCEmail: [email protected] OrgTechHandle: NET-ARIN OrgTechName: Accretive Networks Network Engineering OrgTechPhone: +1-206-269-0190 OrgTechEmail: [email protected] # ARIN WHOIS database, last updated 2010-06-14 20:00 # Enter ? for additional hints on searching ARIN's WHOIS database. # # ARIN WHOIS data and services are subject to the Terms of Use # available at https://www.arin.net/whois_tou.html # # Attention! Changes are coming to ARIN's Whois service on June 26. # See https://www.arin.net/features/whois for details on the improvements __________________ Whoever dies with most toys wins.

01-29-2011, 06:19 AM	#4
Barefootsies Choice is an Illusion Industry Role: Join Date: Feb 2005 Location: Land of Obama Posts: 42,635	It's obviously from a single poster who is in a ton of the main forum threads. If you click into secondary sections, you will not get that alert. So it is one person with a bad sig link, avatar, or posting up some shit that is infected in the main section. If you would get the same alert in all sections, than you could say it's a GFY issue. But since it's main forum only, it is a single user infecting people and posting a lot. __________________ Should You Email Your Members? Link1 \| Link2 \| Link3 Enough Said. "Would you rather live like a king for a year or like a prince forever?"

01-29-2011, 06:23 AM	#5
inabon Good Old Fat Webmaster Industry Role: Join Date: Jul 2002 Location: Boquete, Panamá Posts: 967	true.. i know it is not GFY says it on the warning. but it would be nice for the fucker posting to clean his shit up or the host so lets look at it as kind of a public service type deal ... mods should read and see if they can find the bastard. __________________ Whoever dies with most toys wins.

01-29-2011, 06:24 AM	#7
CurrentlySober Too lazy to wipe my ass Industry Role: Join Date: Aug 2002 Location: A Public Bathroom Posts: 38,505	Im getting it in this thread, and there are only two posters above me... http://www.gfy.com/fucking-around-and-business-discussion/1008051-wibya-toolbar.html The website at www.gfy.com contains elements from the site **************, which appears to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer. For detailed information about the problems with these elements, visit the Google Safe Browsing diagnostic page for ************. Learn more about how to protect yourself from harmful software online. __________________ My AI Handywork... My Dream Gal... XXX** 👁️ 👍️ 💩

01-29-2011, 06:25 AM	#8
djroof JuicyDevils.gr Owner Industry Role: Join Date: Jan 2004 Location: Greece Posts: 25,372	same here

01-29-2011, 06:28 AM	#9
Scott McD Too lazy to set a custom title Join Date: Nov 2002 Location: Glasgow, Scotland Posts: 67,795	Well isn't that just great... __________________ I Buy My High Quality Traffic Here, You Should Too!

01-29-2011, 06:34 AM	#10
inabon Good Old Fat Webmaster Industry Role: Join Date: Jul 2002 Location: Boquete, Panamá Posts: 967	found him martinsc... dude your fucking sig http://****************/sig/624x80_1.gif sucks ass clean your fucking servers. THANKS MODS... Can i have a gfy coffee mug and poster for my office??? hahahahahaha __________________ Whoever dies with most toys wins.

01-29-2011, 06:54 AM	#12
TheDoc Too lazy to set a custom title Industry Role: Join Date: Jul 2001 Location: Currently Incognito Posts: 13,827	It looks like the FetishHits banner is the Malware... Both Martinsc and CaptainHowdy both have it. Opening the sig directly fires off the malware warning. __________________ ~TheDoc - ICQ7765825 It's all disambiguation

01-29-2011, 09:19 AM	#15
Zorgman Confirmed User Join Date: Aug 2002 Location: Sydney, Australia Posts: 6,103	Yep, outside GFY images would be the issue. Saw a few guys use hosted services for their banners. __________________ ---

01-29-2011, 09:30 AM	#16
Fabien Confirmed User Industry Role: Join Date: Jul 2003 Posts: 4,787	got it too

01-29-2011, 02:42 PM	#19
Jim_Gunn Confirmed User Industry Role: Join Date: Feb 2003 Location: Where The Teens Are Posts: 5,702	I got infected by a really insidious malware twice last year surfing GFY through my Firefox browser. Took me the better part of two days and a lot of research and tools to get rid of it. I have since installed AdBlockPlus and NoScript plugins for Firefox and have been safe since. __________________ Jim Gunn Filming Cinematic Porn Skype JimGunnProductions

01-30-2011, 11:45 PM	#20
Toni Confirmed User Join Date: Oct 2001 Posts: 2,697	The problem seems to be with our banner, thank you for pointing this out and I really apologize for the problem. We will check how this could happen and have it fixed asap.

01-31-2011, 12:08 AM	#21
Toni Confirmed User Join Date: Oct 2001 Posts: 2,697	This has been cleaned up and we requested the Malware warning to be removed. Thanks one more time and I am really sorry about this. __________________ $25-$50 Per Signup, 60%-70% Rev Share, 125+ Sites, Exclusive Sites, tons of free content 70,000+ FHG's, Free Domain Hosting, 10,000+ Hosted FLV's - Need Live Cams? Check out ItsLive.com Fetish Hits paying affiliates since 2001 - Every time on time!