Good thing that noscript + adblock + Kaspersky works just fine.
Surfed FPSbanana for like an hour downloaded 10 skins for TF2 downloaded a couple of maps and i had no virus
No virus here with no antivirus.
I think after that i will re-install my spyare terminator and my defender just of case, umm, well, you know...
I only have one iExplore running, but I'm running a full scan none the less
FPSbanana gets infected with malware every few months.
This is why programs like 'NoScript' can save you a lot of trouble.
Maybe I should install some anti-virus now :v:
I just closed all my fps banana tabs, check my process no iExplore.exe or random mouseclicks or audio ads. Am I safe? I have adblock plus.
Everything about FPSB is so complicated, glitchy and error prone that I doubt the owners themselves even know what is going on half the time.
Like 50% of the times I go on FPSbanana I seem to get a virus
(1:30:22 PM) Tom: well, i fixed the virus problem. it was pretty bad - the system's been compromised again :(
Meaning, site shouldn't be giving any malware anymore for now.
The only reason I go to FPSBanana is because it has a load of content. As for the rest, it's terribly coded and designed, and doesn't play very nice with Firefox here (takes ages to load a page, or it doesn't load at all). It's too bad no better designed websites ever overtook FPSBanana in popularity.
Avast detected and blocked it. :colbert:
I didn't have this virus, but you made me scan my temp folder and find another one so thanks!
I'm somewhat tempted to run a sandboxed web browser and see what happens if I were to visit the site :v:
I have smss but not loader in my temp. Should I delete it?
[QUOTE=Steak;23304099]I have smss but not loader in my temp. Should I delete it?[/QUOTE]
Yea, if you don't want to risk a chance of a virus.
I didn't find the two files in my folder, scanned the temp folder with Malwarebytes, Avast!, and that program Microsoft puts out and they didn't pick up anything. I did visit FPSBanana maybe 10 times though, can I have an opinion if I'm safe or not? :ohdear:
It's safe? Do I Need to restart after I delete smss?
[QUOTE=Dachande;23304722]I didn't find the two files in my folder, scanned the temp folder with Malwarebytes, Avast!, and that program Microsoft puts out and they didn't pick up anything. I did visit FPSBanana maybe 10 times though, can I have an opinion if I'm safe or not? :ohdear:[/QUOTE]
You should be safe, maybe something blocked it.
I tried deleting SMSS but it is telling me I need permission to delete it. :eek: I hope that is not the virus.
[QUOTE=Suttles;23304754]You should be safe, maybe something blocked it.[/QUOTE]
Thanks Suttles, :h:
You lifted a great weight off my shoulders, I hate viruses.
If you have adblock do you still get it?
Ah no, smss is in my system32. Looks like I am good.
No wonder I got a nasty trojan yesterday, fucked my shit up hard. If only I've seen this thread sooner :sigh:
[QUOTE=Wombo194;23304888]If you have adblock do you still get it?[/QUOTE]
nope
i have smss in my system32, am i infected
i also found "snmptrap" but that's probably not related
I've found smss.exe In one of my sessions.. The Description of Windows session Manager? I'm not sure if thats it or not. If so.. How do I get rid of it?
Hoo. Gave me a scare, there, Suttles. Visited yesterday for TR_Walkway and had ie running in the background.
Don't see any extra smss.exe files, though, much less the loader. Gonna get my paranoia on with a couple scanners anyway, but I think she's clean.
[QUOTE=Kinglah Crab;23305533]i have smss in my system32, am i infected[/QUOTE]
It's supposed to be there.
If it's anywhere else, be concerned.
[QUOTE=Xenocidebot;23305555]It's supposed to be there.
If it's anywhere else, be concerned.[/QUOTE]
so i'm not infected you mean
I don't think so, no. But I have a hard time believing there's nothing to it but two files.
[editline]12:29PM[/editline]
I guess I'm not understand the post in the Steam forums.
[quote]It then searches registry entries under the following subkeys:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
The virus copies all .exe files referenced under the above subkeys as the following files:
%DriveLetter%\[PATH TO FILE]\[ORIGINAL FILE NAME][1 SPACE].exe
For all of the above files, the virus copies itself as the following file so that it runs every time Windows starts:
%DriveLetter%\[PATH TO FILE]\[ORIGINAL FILE NAME].exe[/quote]
I would assume that means, going into Regedit and looking at those subkeys, that I'm supposed to do a search for those file names with the one space in it. But then where the hell does the "for all the above" bit come from? It copies the first batch, and then writes over the originals?
Sorry, you need to Log In to post a reply to this thread.
