Pichunter, Virus, anyone... ?
 

Anyone else getting an auto-download of "pic.wmf" on pichunter?

Careful, it's VERY nasty and hard to get rid of (with IE).

its interesting how many threads i've seen about a virus on pichunter over the years

if its a wmf, its using that new exploit that was on the news yesterday

Has anyone talked to them about it. that is nasty shit to have to get rid of.

Yes it is using that one. But seems like not everyone knows yet. I.e. madthumbs is still trading with pichunter, etc...

doesn't look unintentional to me. could be wrong though

this is like the 10th pichunter virus thread i've seen in my years here

btw this version is stealing from all of us webmasters.. replacing ref codes for the biggest adult sites, so all those big tgp's are going to notice a big drop in conversions as the surfers get infected..

What's going on with the word FreeOnes in your sig ? :helpme

my sig knows who you are :winkwink:

p.s. for me it says Smokeythebear

Hello people,

this are news to me, and you can trust me when I say it's definetely NOT from our site! I will check into it now and let you all know

Can someone please let me know if it's gone now? And if not...how do I detect it? I can't seem to be getting the virus, and I can't get rid of the problem, if I can't reproduce it. I would like to find out what is happening. If someone can assist, I'd be very thankful. Thank u

contacted you :)

(bill)

I don't get it either and I don't have anything on my laptop that would block it either. SmokeyTheBear - do you get it? Whomever has it load, should hit up gotys, take screencaps and if you have the file download, you should zip it and forward it to gotys to figure out who or what it is.

is it winxp sp2 that is detecting it? or antivirus software?

:1orglaugh :1orglaugh :1orglaugh

ok so you "got it" on your xp box...& somehow it found a way onto your linux server magically

which prompts the question of why anyone's still using IE?

it was gone by the time gotys posted i believe. it was one of the new ones and loaded from a file on his server not on an external server.

Could have been a hacker... Tom runs a huge site and i doubt he would intentionally do something like spread a virus to ruin his reputation. You guys could also have an infected hosts file, and the pichunter.com you see isn't the real pichunter. I run alot of protection and i've never noticed any warnings when accessing pichunter, I usually am just in the submit area though.

Be sure to do a scan with adaware and spybot, and use spybot to immunize your system. And use firefox ;)

no thats not what happened in this case.

gotys, as per thinkx a few other sites had the same problem :

http://www.gofuckyourself.com/showthread.php?t=560612