HyperGaming Network

Other Forums => Scrapyard => Server Dumps => Topic started by: Lucidius on 18-07-2010

Title: FPSBanana Infected
Post by: Lucidius on 18-07-2010
Quote from: rhalle of the steam forums


Anyone shopping for maps or skins:

I know it's not uncommon for FPSBanana, but I believe the site is currently infected with the 'Black Internet' trojan.

It's embedded in the site itself somehow, which means all you have to do is go there-- you don't have to download anything, and you'll be infected. The thing is that no virus scanner I had running alerted to it; AVG, Ad-Aware and Windows Defender did not alert when I went there and caught it.

If you've been to FPSBanana the last day or less, check your task manager. Look for iexplore.exe running-- or multiple instances of it if you are surfing with internet explorer, of course. You might also be hearing audio advertisements and/or multiple weird noises and mouseclicks.

Apparently this trojan infects the MBR, and I'm not 100% how to fix that, but I think I've cleared my infection by making all folders viewable and none hidden, starting in Safe Mode and going here:

C:\Users\YOURUSERNAME\Appdata\Local\Temp

and deleting these two files:

Loader.exe
Smss.exe

Anyway, just thought I'd share.

So, go exploring to test your virus scanner or doubt my post at your own risk-- i.e., my strong suggestion is: don't do it.

If anyone knows their webmaster's contact info, please share. I'd gladly write them an e-mail to tell them, but I don't feel like looking for it on their site and having to clean my computer again.

--Rhalle

Anyone know if this has been cleared up yet? I JUST posted a tutorial befor eit got infected and I want to know if it's been posted on.
Title: Re: FPSBanana Infected
Post by: Silver Knight on 18-07-2010
I looked on there yesterday and i was fine, not that you should care FPS Banana may have a great collection of stuff, but the website and search functions suck.
Title: Re: FPSBanana Infected
Post by: Bowlin on 18-07-2010
Well, at the moment im on my work's internet provider. Its really strict, blocking facebook, and such. It allowed this site, but when i went on FpsBanana just a few min's ago, it said something about a virus, or some sort of breach. But im protected :). Idk, but i wouldnt go on it.
Title: Re: FPSBanana Infected
Post by: Lucidius on 18-07-2010
Quote from: Bowlin on 18-07-2010
Well, at the moment im on my work's internet provider. Its really strict, blocking facebook, and such. It allowed this site, but when i went on FpsBanana just a few min's ago, it said something about a virus, or some sort of breach. But im protected :). Idk, but i wouldnt go on it.

No virus detectors have been picking it up and loading the site is enough to infect you.

Quote from: Last.Exile on 18-07-2010
... a great collection of stuff...

All anyone cares about.
Title: Re: FPSBanana Infected
Post by: ISPYUDIE on 20-07-2010
Holy shizzle, thanks for the warning, I was gonna go on FSPB today.
Title: Re: FPSBanana Infected
Post by: Dark Scar on 20-07-2010
Everythings getting infected these days...
Title: Re: FPSBanana Infected
Post by: Lucidius on 22-07-2010
Quote from: Wellington on 22-07-2010
I went on it a week or so ago, I noticed it was down. Simply a blank page, I guess I'm infected with this trojan? o.O

if your having the symptoms then maybe, I don't know when it was infected. I posted this several days after the initial Steam post
Title: Re: FPSBanana Infected
Post by: Wings on 10-08-2010
Nah, I just went there. I think they are bullshitting you.
Title: Re: FPSBanana Infected
Post by: Mikhail on 10-08-2010
do you try to necropost on purpose
Title: Re: FPSBanana Infected
Post by: Wings on 10-08-2010
sorry, But the thread wasn't that old, and those are just my 2 cents.
Title: Re: FPSBanana Infected
Post by: Turkey on 10-08-2010
Please don't revive older threads, Its a pet peeve fore a lot of people