GFY on the MALWARE list? google is saying so.
 

For some reason I'm guessing either an iframe from a banner or gfy is actually being assfucked somehow, I'm getting malware warnings out of safari which just uses google's safebrowsing DB, picking up "nigya.com" on GFY's pages:

http://www.revengebucks.com/gfycat/gfymalware.jpg

I get warnings from my antivirus software in many threads from peoples signature images / codes.

same here.. been acting weird lately.. had acrobat reader start up just now coming to the main forum.

I got this too, same domain.

i've just had java start up when visiting the main forum, zonealarm blocked it from accessing 66.197.237.165

same here

http://bikinivoyeur.com/gfy-cap2.jpg

Correct.

Many of the sig images are causing shit to go off.

Its teencat cookie stuffing and haxxoring your asses

well i just got something very suspicious before visiting a thread, just this forum.

nope, couldn't be since I was loading the main forum page, not a thread which set this thing off... so it had to be GFY itself or a banner they have.

Kaspersky say so too.

Yup, same here, right after I opened GFY now I got an avast alarm.

Thats what I got too.

I've been getting this for months but its all good..

we are looking into this, hope to have it figured out shortly

Yay for Save a Hoe :thumbsup

Can you guys give me some more details on this? So far I am unable to duplicate. What OS are you running? Browser? any Antivirus? Thanks..

Seems like quite a few more people complaining about this for it to be sigs, since well, sigs have been around for quite some time.

WindowsXP, FireFox 2.0.0.20, Avast

Does this alert happen every time a page loads? is it intermittent?

I got it in chrome.. when I clicked to come to gfy, a plugin for a banner tried to load, I clicked no and the banner failed to load. I have flash installed so I assume it wasn't flash.

Im running avast and getting nothing here nor on google when I search for it. GFY has been tampered with I think

Happens here too in all browsers, but not on every page load, so must be a banner in rotation.

fuck i getting it also i just made apost about it

The site at njgya.com has been reported as an attack site and has been blocked based on your security preferences.

Kaspersky 2010 , FF 3.6 , happening intermittently XP SP3

I've been browsing on and off for 2 hours and it happened three times. I am guessing it's in your banner rotation since I wasn't in a thread when it happens, just these pages:

http://www.gfy.com/fucking-around-and-business-discussion/
http://www.gofuckyourself.com/forumdisplay.php?f=26


I am browsing with safari on osx 10.6

I haven't seen this on any of my boxes or browsers.

I'm on Mac OSX - running Safari. Sometimes it does it - sometimes not. Right now I'm on Firefox - not having any issues....

just looked on may avast log and have exactly the same from today something did pop up but I wassent browsing GFY but it was open in my bottom tab and I assumed it was something else which I was browsing the log time is 20:37:35 so im guessing this is from gfy now

i think Achmed is running this attack :helpme:helpme:helpme:helpme

The issue has been located! Thanks for the help guys, will be fixed soon!

That's what I get from time to time.

3/26/2010 6:47:38 PM Detected: Exploit.JS.Pdfka.bxa hXXp://mjgjo.com/cgi-bin/clido/s002102317801r0409J11000601R742f0b63Xb4122ccfYffbe fb92Z03002f36//data0000[/url] Firefox


3/26/2010 6:47:38 PM Denied: Exploit.JS.Pdfka.bxa hXXp://mjgjo.com/cgi-bin/clido/s002102317801r0409J11000601R742f0b63Xb4122ccfYffbe fb92Z03002f36//data0000[/url] Firefox


just got that on KIS while on GFY

I'll be making some updates today and tomorrow, but please let me know if this error is still occurring.

yeah same here on Chrome

Smells like a trojan to me

I keep getting it sporadically.

I blocked some pages with Avira because i get trigger on them

I've been getting this all day too, I'm guessing its a sig or banner that's triggering it?
WG

I always get one when I open a thread and someone posting with an AdultGruntWork.com has posted in that thread already.

I'm running avast and no problems here.

Hope it will get fixed soon...

I don't get any of these messages. (Running Mac OSX here)

I have a feeling that fatfoo is behind this.

Avira must be one of the shittiest scanners ever. I'm getting warnings on every single site that runs on smarty lol.

Contacted avira to make them aware of the fake warnings, and they don't even reply. There have been several threads about smarty and avira and hundreds of people reporting the same thing, but they don't seem to care :2 cents:

just turn the heuristic level down to medium that will stop most false positives.

how do they smell?

it might be worth scanning with something else like malwarebytes or something just to double check. i would be concerned if i didn't have any obvious problems when everyone else did. you could be lucky or its just undetected.

Got it during the day yesterday (Mac OSX on Safari) but not at all last night or today.

smarty doesn't leave any traces of itself in html. we use smarty behind silvercrocodile.com - until this fact is made known, how would anyone be able to tell? it works on server side before any html is outputted to a client side. what i'm saying is that no client can determine if smarty used or not by looking at source code. headers also don't show any smarty traces. :2 cents: