GoFuckYourself.com - Adult Webmaster Forum

GoFuckYourself.com - Adult Webmaster Forum (https://gfy.com/index.php)
-   Fucking Around & Business Discussion (https://gfy.com/forumdisplay.php?f=26)
-   -   NOt THIS SHIT AGAIN!!!! MALAWARE (https://gfy.com/showthread.php?t=1008054)

inabon 01-29-2011 06:10 AM

NOt THIS SHIT AGAIN!!!! MALAWARE
 
Warning: Visiting this site may harm your computer!
The website at gofuckyourself.com contains elements from the site ****************, which appears to host malware ? software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.
For detailed information about the problems with these elements, visit the Google Safe Browsing diagnostic page for ****************.
Learn more about how to protect yourself from harmful software online.
I understand that visiting this site may harm my computer.

WTF

Barefootsies 01-29-2011 06:12 AM

Yeah, I saw that in the content thread.

Oddly enough, if you look at some of the sites on that network. Some big players.

inabon 01-29-2011 06:15 AM

someone needs to clean their shit up

**************** - Geo Information
IP Address ****************
Host toni2.hosting.flyingcroc.net
Location US, United States
City Seattle, WA 98121
Organization NEW MEDIA GROUP
ISP Accretive Technology Group
AS Number AS11608 Accretive Technology Group, Inc.
Latitude 47°61'45" North
Longitude 122°34'80" West
Distance 9423.03 km (5855.20 miles)

OrgName: Accretive Technology Group, Inc.
OrgID: ACCR
Address: 2019 3rd Ave. Suite 200
City: Seattle
StateProv: WA
PostalCode: 98121
Country: US

ReferralServer: rwhois://rwhois.accretive-networks.net:4321

NetRange: 216.127.32.0 - 216.127.63.255
CIDR: 216.127.32.0/19
NetName: ANI-002
NetHandle: NET-216-127-32-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.ACCRETIVETG.NET
NameServer: NS2.ACCRETIVETG.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2001-07-25
Updated: 2006-10-23

RAbuseHandle: IA102-ARIN
RAbuseName: Accretive Networks Inc
RAbusePhone: +1-206-269-0190
RAbuseEmail: [email protected]

RNOCHandle: NOC152-ARIN
RNOCName: Accretive Networks Operations Center
RNOCPhone: +1-206-269-0190
RNOCEmail: [email protected]

RTechHandle: NET-ARIN
RTechName: Accretive Networks Network Engineering
RTechPhone: +1-206-269-0190
RTechEmail: [email protected]

OrgAbuseHandle: IA102-ARIN
OrgAbuseName: Accretive Networks Inc
OrgAbusePhone: +1-206-269-0190
OrgAbuseEmail: [email protected]

OrgNOCHandle: NOC152-ARIN
OrgNOCName: Accretive Networks Operations Center
OrgNOCPhone: +1-206-269-0190
OrgNOCEmail: [email protected]

OrgTechHandle: NET-ARIN
OrgTechName: Accretive Networks Network Engineering
OrgTechPhone: +1-206-269-0190
OrgTechEmail: [email protected]

# ARIN WHOIS database, last updated 2010-06-14 20:00
# Enter ? for additional hints on searching ARIN's WHOIS database.
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at https://www.arin.net/whois_tou.html
#
# Attention! Changes are coming to ARIN's Whois service on June 26.
# See https://www.arin.net/features/whois for details on the improvements

Barefootsies 01-29-2011 06:19 AM

It's obviously from a single poster who is in a ton of the main forum threads.

If you click into secondary sections, you will not get that alert. So it is one person with a bad sig link, avatar, or posting up some shit that is infected in the main section. If you would get the same alert in all sections, than you could say it's a GFY issue. But since it's main forum only, it is a single user infecting people and posting a lot.

:2 cents:

inabon 01-29-2011 06:23 AM

true.. i know it is not GFY :) says it on the warning. but it would be nice for the fucker posting to clean his shit up or the host :)

so lets look at it as kind of a public service type deal ... mods should read and see if they can find the bastard.

Barefootsies 01-29-2011 06:24 AM

Quote:

Originally Posted by inabon (Post 17877457)
but it would be nice for the fucker posting to clean his shit up or the host :).

Agreed.

It's this second or third time now within a month I think.
:disgust

CurrentlySober 01-29-2011 06:24 AM

Im getting it in this thread, and there are only two posters above me...

http://www.gfy.com/fucking-around-and-business-discussion/1008051-wibya-toolbar.html

The website at www.gfy.com contains elements from the site ****************, which appears to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.
For detailed information about the problems with these elements, visit the Google Safe Browsing diagnostic page for ****************.
Learn more about how to protect yourself from harmful software online.

djroof 01-29-2011 06:25 AM

same here :(

Scott McD 01-29-2011 06:28 AM

Well isn't that just great... :disgust

inabon 01-29-2011 06:34 AM

found him martinsc...

dude your fucking sig http://****************/sig/624x80_1.gif sucks ass :)

clean your fucking servers.


THANKS MODS... Can i have a gfy coffee mug and poster for my office??? hahahahahaha

signupdamnit 01-29-2011 06:48 AM

Quote:

Originally Posted by inabon (Post 17877480)
found him martinsc...

dude your fucking sig http://****************/sig/624x80_1.gif sucks ass :)

clean your fucking servers.


THANKS MODS... Can i have a gfy coffee mug and poster for my office??? hahahahahaha

Allowing external images here is very risky and easily taken advantage of (I'm not going to elaborate to avoid giving anyone any ideas but I'm sure some people know what I'm talking about). I'm surprised they allow it for anyone but trusted posters with a lot to lose.

TheDoc 01-29-2011 06:54 AM

It looks like the FetishHits banner is the Malware... Both Martinsc and CaptainHowdy both have it. Opening the sig directly fires off the malware warning.

Barefootsies 01-29-2011 07:01 AM

Quote:

Originally Posted by TheDoc (Post 17877504)
Both Martinsc and CaptainHowdy both have it.

Ah ha!

Well that explains it then. They both are very active in the main forum.

CaptainHowdy 01-29-2011 07:11 AM

Quote:

Originally Posted by TheDoc (Post 17877504)
It looks like the FetishHits banner is the Malware... Both Martinsc and CaptainHowdy both have it. Opening the sig directly fires off the malware warning.

Already sent this one to Fetish Hits' Toni. It's a weekend so for now I'll just stop posting until this gets solved...


Zorgman 01-29-2011 09:19 AM

Yep, outside GFY images would be the issue. Saw a few guys use hosted services for their banners.

Fabien 01-29-2011 09:30 AM

got it too

potter 01-29-2011 09:45 AM

Quote:

Originally Posted by signupdamnit (Post 17877497)
Allowing external images here is very risky and easily taken advantage of (I'm not going to elaborate to avoid giving anyone any ideas but I'm sure some people know what I'm talking about). I'm surprised they allow it for anyone but trusted posters with a lot to lose.


It's not like any of you are in danger, so I don't know wtf you are complaining about. The SERVER the remote image was hosted on is the threat, not the image itself.

signupdamnit 01-29-2011 09:54 AM

Quote:

Originally Posted by potter (Post 17877688)
It's not like any of you are in danger, so I don't know wtf you are complaining about. The SERVER the remote image was hosted on is the threat, not the image itself.

That's not really what I'm talking about although a compromised server is always a potential danger. The potential issues are more than just malware (think other black hat stuff). I'm not going to explain it further for reasons I already explained but it surprises me that it hasn't became more of an issue in a place like this.

Jim_Gunn 01-29-2011 02:42 PM

I got infected by a really insidious malware twice last year surfing GFY through my Firefox browser. Took me the better part of two days and a lot of research and tools to get rid of it. I have since installed AdBlockPlus and NoScript plugins for Firefox and have been safe since.

Toni 01-30-2011 11:45 PM

The problem seems to be with our banner, thank you for pointing this out and I really apologize for the problem. We will check how this could happen and have it fixed asap.

Toni 01-31-2011 12:08 AM

This has been cleaned up and we requested the Malware warning to be removed.

Thanks one more time and I am really sorry about this.

martinsc 01-31-2011 12:59 PM

Quote:

Originally Posted by Toni (Post 17880112)
This has been cleaned up and we requested the Malware warning to be removed.

Thanks one more time and I am really sorry about this.

:thumbsup


All times are GMT -7. The time now is 12:12 AM.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
©2000-, AI Media Network Inc