Warning: Do Not Visit Amacontent.com - Has Virus On Site - GoFuckYourself.com

ARS Bryan · 01-03-2006, 08:51 PM

*********WARNING************
Do NOT go to AMACONTENT.COM'S WEBSITE. IT HAS .WMF VIRUS INSTALLED.

When you visit the website in IE it automatically tries to run the .WMF file. The file is xpl.wmf and appears to come from USERSCOUNTER.COM

If you visit the site in FIREFOX you will see this window popup and ask you to save:

This is a known unpatched security hole in Windows. http://www.microsoft.com/technet/sec...ry/912840.mspx

Download WMF vulnerability hotfix from these URLs:
http://www.grc.com/miscfiles/wmffix_hexblog14.exe
http://handlers.sans.org/tliston/wmffix_hexblog14.exe
http://castlecops.com/modules.php?na...=getit&lid=496
http://csc.sunbelt-software.com/wmf/..._hexblog14.exe
http://www.antisource.com/download/wmffix_hexblog14.exe

http://www.hexblog.com/

Dirty Dane · 01-03-2006, 08:53 PM

and get a Norton update! Tons of sites have this virus

Persignup Dustin · 01-03-2006, 08:55 PM

Damn good looking out...how does one avoid that shit??

ARS Bryan · 01-03-2006, 08:56 PM

Avoid it by downloading the hotfix and installing it. Also, avoid browsing websites in Internet Explorer until this is patched by Microsoft. If you visit sites in IE that have this installed, you WILL get infected.

pr0 · 01-03-2006, 08:58 PM

Avoid it by not opening the fucking file lol

spacedog · 01-03-2006, 08:59 PM

I sent him icq's telling him about it.

The same thing happened to one of thinkX sites. It seems to be some sort of counter code... I'll go find the thread. I belive it is the same problem ThinkX had, but ThinkX is on top of his game & got his fixed I think, seems amacontent hasnt been around or something

ARS Bryan · 01-03-2006, 09:06 PM

Quote:

Originally Posted by spacedog

I sent him icq's telling him about it.

The same thing happened to one of thinkX sites. It seems to be some sort of counter code... I'll go find the thread. I belive it is the same problem ThinkX had, but ThinkX is on top of his game & got his fixed I think, seems amacontent hasnt been around or something

Thanks

vvq · 01-03-2006, 10:30 PM

I think it's their web stat counter.

newbreed · 01-03-2006, 10:33 PM

I will speak UN-OFFICIALY for Joe, as he is not online at the moment...

His host is aware of the problem and is working to find and remove the malicious code.

CaptainHowdy · 01-03-2006, 10:34 PM

Quote:

Originally Posted by newbreed

I will speak UN-OFFICIALY for Joe, as he is not online at the moment...

His host is aware of the problem and is working to find and remove the malicious code.

!!... Who would do that??

newbreed · 01-03-2006, 10:37 PM

Quote:

Originally Posted by CaptainHowdy

!!... Who would do that??

No clue, but we spoke about it earlier, and I have first-hand knowledge his host is on the problem and is working to correct it.

reed_4 · 01-03-2006, 11:39 PM

thanks for the warning dude.

amacontent · 01-04-2006, 12:14 AM

thnx fellas

01-03-2006, 08:51 PM	#1
ARS Bryan Confirmed User Join Date: Dec 2005 Location: Chicago Posts: 875	Warning: Do Not Visit Amacontent.com - Has Virus On Site *******WARNING******** Do NOT go to AMACONTENT.COM'S WEBSITE. IT HAS .WMF VIRUS INSTALLED. When you visit the website in IE it automatically tries to run the .WMF file. The file is xpl.wmf and appears to come from USERSCOUNTER.COM If you visit the site in FIREFOX you will see this window popup and ask you to save: This is a known unpatched security hole in Windows. http://www.microsoft.com/technet/sec...ry/912840.mspx Download WMF vulnerability hotfix from these URLs: http://www.grc.com/miscfiles/wmffix_hexblog14.exe http://handlers.sans.org/tliston/wmffix_hexblog14.exe http://castlecops.com/modules.php?na...=getit&lid=496 http://csc.sunbelt-software.com/wmf/..._hexblog14.exe http://www.antisource.com/download/wmffix_hexblog14.exe http://www.hexblog.com/ __________________ ///ARS - Adult Revenue Service** ICQ me 25120534 Last edited by ARS Bryan; 01-03-2006 at 08:53 PM..

01-03-2006, 08:55 PM	#3
Persignup Dustin Confirmed User Join Date: Dec 2005 Location: Just west of Chicago Posts: 871	Damn good looking out...how does one avoid that shit?? __________________ AWARD WINNING PATENTED MALE ENHANCEMENT PUBOCOCCYGEUS PC MUSCLE STRENGTH TRAINER SYSTEM 100% ALL NATURAL YOUR SATISFACTION IS ASSURED.

01-03-2006, 08:56 PM	#4
ARS Bryan Confirmed User Join Date: Dec 2005 Location: Chicago Posts: 875	Avoid it by downloading the hotfix and installing it. Also, avoid browsing websites in Internet Explorer until this is patched by Microsoft. If you visit sites in IE that have this installed, you WILL get infected. __________________ ///ARS - Adult Revenue Service ICQ me 25120534

01-03-2006, 08:58 PM	#5
pr0 rockin tha trailerpark Industry Role: Join Date: May 2001 Location: ~Coastal~ Posts: 23,088	Avoid it by not opening the fucking file lol __________________ __________ Loadedca$h - get sum! - Revengebucks - mmm rebills! - webair (gotz sErVrz)

01-03-2006, 10:30 PM	#8
vvq Confirmed User Join Date: Feb 2004 Location: TrafficGigolos.com Posts: 2,732	I think it's their web stat counter. __________________ SQUIRTING - LESBIAN SPANKING - TITTY FUCKING - WET PANTIES - MORE We offer free hosting, your own designer (works for free), and unsaturated content for gallery and free site submitters. Just contact me! E-mail: [email protected]

01-03-2006, 08:53 PM	#2
Dirty Dane Sick Fuck Industry Role: Join Date: Feb 2004 Location: www Posts: 9,491	and get a Norton update! Tons of sites have this virus

01-03-2006, 08:59 PM	#6
spacedog Yes that IS me. Bitch. Industry Role: Join Date: Nov 2001 Posts: 14,149	I sent him icq's telling him about it. The same thing happened to one of thinkX sites. It seems to be some sort of counter code... I'll go find the thread. I belive it is the same problem ThinkX had, but ThinkX is on top of his game & got his fixed I think, seems amacontent hasnt been around or something

01-03-2006, 10:33 PM	#9
newbreed Confirmed User Join Date: Nov 2003 Location: ThatOneProgram.com Posts: 9,898	I will speak UN-OFFICIALY for Joe, as he is not online at the moment... His host is aware of the problem and is working to find and remove the malicious code. __________________ Want to promote SUCCUBUS? Click HERE!!!! \| Want to buy SUCCUBUS? Click HERE!!!! Yeah, yeah, you know, That One Program! \| Want to trade links with StompBunny.com? Loryn ‎(3:16 PM): I love it, just as long as we keep the bedroom door closed from all ears then we can have throw down hard core sex that makes us money haha fuck it we can have sex on money never did that before

01-03-2006, 11:39 PM	#12
reed_4 Confirmed User Join Date: Jul 2005 Posts: 9,640	thanks for the warning dude. __________________

01-04-2006, 12:14 AM	#13
amacontent STANLEY CUP CHAMPION ! Industry Role: Join Date: Feb 2003 Location: Los Angeles Posts: 12,875	thnx fellas __________________ Joe Loughlin [email protected] TEAM- joeloughlin. Telegram - AMA_JOE https://www.amaproduction.com