FPSbanana Trojan. Don't go on the site. - Games

[url]http://forums.steampowered.com/forums/showthread.php?t=1347821[/url] [QUOTE]Just figured I'd post this here. Anyone shopping for maps or skins: I know it's not uncommon for FPSBanana, but I believe the site is currently infected with the 'Black Internet' trojan. It's embedded in the site itself somehow, which means all you have to do is go there-- you don't have to download anything, and you'll be infected. The thing is that no virus scanner I had running alerted to it; AVG, Ad-Aware and Windows Defender did not alert when I went there and caught it. If you've been to FPSBanana the last day or less, check your task manager. Look for iexplore.exe running-- or multiple instances of it if you are surfing with internet explorer, of course. You might also be hearing audio advertisements and/or multiple weird noises and mouseclicks. Apparently this trojan infects the MBR, and I'm not 100% how to fix that, but I think I've cleared my infection by making all folders viewable and none hidden, starting in Safe Mode and going here: C:\Users\YOURUSERNAME\Appdata\Local\Temp and deleting these two files: Loader.exe Smss.exe Anyway, just thought I'd share. So, go exploring to test your virus scanner or doubt my post at your own risk-- i.e., my strong suggestion is: don't do it. If anyone knows their webmaster's contact info, please share. I'd gladly write them an e-mail to tell them, but I don't feel like looking for it on their site and having to clean my computer again. --Rhalle[/QUOTE] [B]Still wondering if it still on?[/B] Never tell your password to anyone. Sunday, July 11, 2010 9:43 PM - Suttles: hey 9:44 PM - Suttles: this thread is kinda old(by old I mean on the 7th of july) 9:44 PM - Suttles: so is it still virused? 9:44 PM - President Barack Obama: yes 9:44 PM - President Barack Obama: I got it today 9:44 PM - President Barack Obama: and yesterday [B][U]Be warned. [/U][/B]

Ugh, why is it that FPSbanana is ALWAYS attacked?

Lovely. I just downloaded a CSS map and visited FP while it downloaded, to see this thread. Well I'll keep an eye out for "iexplore.exe"

Yeah honestly, how do they always get some sort of virus on their site. Is it the ads, or do some people really hate them?

[QUOTE=Octo pie;23290321]Yeah honestly, how do they always get some sort of virus on their site. Is it the ads, or do some people really hate them?[/QUOTE] A bit of both, mostly the ads

I went on there recently and downloaded a bunch of skins for TF2... I don't see anything on my computer. Might be because I use Ad Block plus?

Yea, it seems like ad blocks greatly reduce the chance of it on your computer.

i see 4 iexplorers and i have 4 tabs. but theres also explorer.exe [editline]09:57PM[/editline] also when i went there a couple hours ago my computer said do you want (some name).exe running i clicked no and went on?

Someone actually goes to fpsbanana?

[QUOTE=Cheeseist;23290425]i see 4 iexplorers and i have 4 tabs. but theres also explorer.exe [editline]09:57PM[/editline] also when i went there a couple hours ago my computer said do you want (some name).exe running i clicked no and went on?[/QUOTE] explorer.exe is the taskbar. Multiple iexplorers might be something to look into. Don't allow any .EXE's from a site to run.

I got ad block on, but NOD32 still stopped a Trojan downloader when i went on the site.

Mac [img]http://www.facepunch.com/fp/emoot/smugdog.gif[/img] [highlight](User was banned for this post ("Why reply" - Jimbomcb))[/highlight]

I hate how many viruses this website gets. It is a great website but who ever runs it needs to check the ads or something.

[QUOTE=Erebus.;23290806]I hate how many viruses this website gets. It is a great website but who ever runs it needs to check the ads or something.[/QUOTE] they would rather make money, not check the ads

Thanks for the waring OP.

[QUOTE=Ollih;23290572]Someone actually goes to fpsbanana?[/QUOTE] Yes?

It's an alright site, except for the malicious ads and the website problems all the time.

[QUOTE=Erebus.;23290806]I hate how many viruses this website gets. It is a great website but who ever runs it needs to check the ads or something.[/QUOTE] its sad because the owner being too lazy to check if the ads on his site are riddled with viruses is the reason why it stopped being the best game cusomtimzing website out there.

[QUOTE=Singo;23290778]Mac [img]http://www.facepunch.com/fp/emoot/smugdog.gif[/img][/QUOTE] Dear god your a fool. Macs can still get viruses, it's just that since there is so few Mac users that virus makers rarely make them for it, they want the "big-catch". Windows still has 93% of the market

That site can be so buggy. This really doesn't surprise me. I was on there a couple days ago, but I haven't been on since. I checked for those files and couldn't find then. I guess I'm safe.

Meh, I've been on the site all day and I haven't been attacked.

On one of my old computers it got a BOSD and couldn't start a little bit after visiting the site. It has great files and stuff but yeah it kinda sucks due to the viruses. I have gone there time to time and haven't gotten any problems though, still I have a distrust towards it.

I got it a month ago. It caused massive, possibly permanent damage. I still haven't been able to fully remove it, but I made my computer functional again. [editline]9:50[/editline] P.S. it involved a hard drive USB adapter so that I could attach my hard drive to another computer and remove the virus from there.

I noticed iexplore.exe a few days ago. I ran a virus scan and that didn't find anything. I also remember being on fpsbanana that same day too. The owner has to do something about the malicious ads.

I used to get trojans all the time from the damn ads on fpsbanana till I got ad block plus.

Anyone else remember fpspapaya?

I believe noscript on firefox can help prevent it.

Fucking shit I just got off it. Anyone know where the trojan might be hidden, and some good antiviruses?

[QUOTE=Dippeggs;23291514]Fucking shit I just got off it. Anyone know where the trojan might be hidden, and some good antiviruses?[/QUOTE] Avast and AVG are great. Kaspersky is okay too. [editline]02:53AM[/editline] We should be telling this to the emporiums.

I don't think I have it. I don't have any of those files in my TEMP folder. I was just searching for Hammer materials on google, saw FPSbanana link and went to it, but then exited out. Maybe it's just the main page. Also AVG showed nothing so I think i'm safe.