My systems set up with 2 antivirus programs and both narrow it down to this avator! ...for some reason PSC won't allow me to display the gif, but it's that damned snoopy avator.

Oh it's definitely the gif. Tony (grefix) pointed that out. I didn't know if it was Naiko's avatar or not. I just happened to have noticed that his ava wouldn't display for me that's all. I went to the gif file based on your screenshot.

My guess is that the gif won't display as it's probably flagged as a malformed gif after security patches to your OS/browser. I also wouldn't worry about this too much as the exploit
1) needs you to click on the image
2) your security software is blocking it

You've brought it to Proc's attention with this thread. He should simply delete the image file. If it was Naiko's then he'll have to upload a different one.

Yep me too!!

It would be nice if we could figure out who's avatar it is so we can determine if it is a participating member or a spambot.

Should be able to run a query on the database. Very rough SQL statement would be something like this:

SELECT users.username, avatars.filename FROM users INNER JOIN avatars ON avatars.user_ID = users.user_ID WHERE avatar.filename = '1525922196421e4ec054f8.gif'

Or something like that (and providing the user hasn't changed their avatar yet). Been a while since I looked at the table structures and fieldnames for PSC's database but you get the idea I'm sure.

Oh and for those concerned about what this bug does:

http://www.symantec.com/en/uk/security_response/writeup.jsp?docid=2008-082500-0801-99

Only proc can run SQL queries on the live site. Otherwise I would do that.

True but we could simply craft the query command string and give it to him to run against the live.

I'll do it when I get home and PM Proc the query.

FYI: the image seems to be removed from the server (physically)

So the problem should not occur anymore.

I'm pretty sure it's still there.

woops indeed, made a typo int the address bar (actually tofu did in his sql, copied the number there ) Ban Tofu!

consider my previous message as NULL

Haha. It's no big deal. Consider tofu banded. :schock:

jk jk

Seriously. I'm only kidding.

Still getting the warning every time I visit the page.......