This last part is important...

... Even after you remove the scumware, if you do not do it. I.E. and some sites will not work. You have to switch your I.E. settings back to, 'detect automatic settings' or whatever.
:2 cents:

happens with chrome on gfy.com
top banner duke dollars has some white square on the left of it
in chrome it tries to load adobe acrobat, then plugin crashes, html source looks clean.. didn't look into js

last i checked they let sponsors host them , which is ridiculous as you let one bad apple advertise and they can infect everyone else.

I posted this screenshoot in the thread i created, it showed up just when loading gofuckyourself, so it's not a sig but a banner, as it doesn't always pop, just from time to time (i guess when the banner enters in the rotation).

Microsoft security essentials gave me an alert about Exploit:Win32/Pdfjsc.FG trying to infect my computer and blocked it, so yes, seems related to that acrobat error some of you saw.

http://www.holylol.com/images/gfyalert.jpg

I do both of these as well AND somehow got infected. So don't think you're safe :winkwink:

I got it again, while I got up from the computer for a few minutes. Came back and the "Adobe Acrobat crashed in the browser" error.

heres the exploit in a pdf file

How are they loading it through GFY?

Completely agree!

Which scummy paid advertiser is it?

so now jademason has a giant botnet of gfy users .. ouch

I use FF and have not seen warning - coincidence, is FF "better" or is it just not picking it up?

my guess would be this isn't an attack against gfy users but more likely a compromised advertiser ( it has happened before several times), this should be a wake up call to admin to stop letting advertise host the ads

Mother fucker...

this laptop is ok but my desktop is trashed, cant start or do anything keep getting the "your infected, run this antivirus" bs... can't start any antivirus software or anything

And yes using FF

Directions to get rid of it are posted here somewhere. But yeah...it's a bitch of a hijacking.

well I got some messages and a fake adware eliminator thingy but I closed it all out and rebooted and so far I think I'm fine. This is a disposable win7 install anyway.

It's probably quickbucks, like what the did with the nats guys on porngraph.

:Oh crap:Oh crap

The 'red window' is a Chrome invention, if I am not mistaken

We love speculation like that.

Windows 7, Chrome... No anti-virus, no anti-malware...

Got the 3D rendering popup, closed it, no malware installed...

This for me also :-\

R

white square i was talking about earlier next to top banner

http://i40.tinypic.com/35b7ev8.png

it got me this morning.

I just deleted it but took me an hour to run the damn AV software to purge it.

DAMN YOU SPYWARE

If it's in a sig, then it's *ALSO* in a sig. Because as I said, it hit me before I was even logged in this morning. It has tried to install several times since, but I have Java disabled now.

AVG (current as of this moment) has YET to warn me of it, and it's been around for months now.

Well I finally got rid of it using Malwarebytes in safe mode and changing the proxy settings thanks to advice from peeps on GFY It took me best part of half the day cause of the amount of programs I have on my pc and the two large hardisks which I have. What a complete waste of a day...

I think waht was happening was when I was talking on GFY it just re-installed itself after I ran malewarebytes the first time in safe mode

Eric could you please let us know if this was indeed from GFY

Thanks Candy I'm working the solution right now... how do I change that port setting on firefox?

NanoBot: page 1 of this thread is setting off your Avast due to Smokey posting the code he found of the exploit, I can not get past that post (not his sig as it appears prior) but the actual post unless I manually type "&page=2" in my address bar.

I also can't quote reply to you or anyone else here for the same reason.

For those of you with Avast reload page 1 of this thread and look where it stops loading the page.

However the real problem IS in fact one or more of the banner ads up top :(

-Loki-

We are definitely being infected while surfing GFY.

Go to tools/options/advanced then click on the network tab and then settings It will let you congifure your proxy settings

avast maybe triggered by text string, but Smokey's copy is just plain text - it's harmless

Thanks for posting that Firefox info. I couldn't find it myself and actually had to change it still.

It fucked my computer ALLLL up :-(

It seems like "iframe injection" to me. Google it to see more info.
Someones box was compromised, gfy server or advertisers server.
They load virus thru injected iframe.
I strongly recommend to have good firewall like comodo firewall and
good antivirus like avira free. Both are free options and are golden to me
for last 3 years ;).

what a fucking disaster, who is responsible for this mess

it just tried to get me again on this machine (with FF)
i have been to no other sites since booting this box up

Yep, just got hit...mother fucker!!!!!!

I am using FF.
all I got was windows security alert...attacked through port#.....

could this be anything to do with it JS:Pdfka-AFK [Expl] Just got it up with avast

Man we need the mods in here to sort this shit out

http://i.imagehost.org/0723/gfy.gif

White banner and the java console popped up.... :disgust