• FPSbanana Trojan. Don't go on the site.
    341 replies, posted
I've ended the smss.exe Process.. Which was in System32. But nothing was affected by the end process. Which makes me worry.
Okay people now im REALLY scared. I have lots of files in my PC that are priceless, and i just created Steam account and bought game in it and i don't wanna loose it. So i have a feeling that i DO have the virus. I visited FPSB today multiple times, and i did heart some weird sounds from nowhere (no programs that could make it was running, it was like from f*cking nowhere) I have Windows XP so i believe that my temp folder is located somewhere else because i can't enter it just like that (by copying link and putting my username). My Kaspersky 7 didn't tell anything, plus it's key activation time is over so it says that AV is inactive but it still scans upon startup, etc. I have found smss.exe in my system32 folder, also running in Task Manager. Using search i didn't found Loader.exe , also it was not running in task manager. I use Firefox, but still looked for iexplore.exe in Task Manager - nothings there. Am i infected? How do i delete the f*cking virus? PLEASE PEOPLE HELP ME !!! :(
I'm currently trying to figure out if smss.exe Is the virus.. But its in System32 While it would be in Local/temp. Is it really supposed to be there? Because I'm not sure. I've ended the process for the smss.exe located in System32. But nothing was affected by me ending the process. Which once again. Worries me.
[QUOTE=Laferio;23306251]I'm currently trying to figure out if smss.exe Is the virus.. But its in System32 While it would be in Local/temp. Is it really supposed to be there? Because I'm not sure. I've ended the process for the smss.exe located in System32. But nothing was affected by me ending the process. Which once again. Worries me.[/QUOTE] I believe it is, Im on a totally clean system and smss.exe will not appear in my processes, if it was a vital process, something would have happened.
I'm seriously crapping my pants atm and installed a 4th anti virus. How exactly do you know that you're infected by looking at your processes?
Using avast! Internet Security. OH SH*T!! Every time i runs the Internet explorer, appears one more iexplore.exe on my task manager... However, nothing found in temp... At the moment, only 1 tab and 2 iexplore.exe running. I think its not the virus, because here in my pc is quiet...
[QUOTE=Laferio;23306251]I'm currently trying to figure out if smss.exe Is the virus.. But its in System32 While it would be in Local/temp. Is it really supposed to be there? Because I'm not sure. I've ended the process for the smss.exe located in System32. But nothing was affected by me ending the process. Which once again. Worries me.[/QUOTE] [url]http://en.wikipedia.org/wiki/Session_Manager_Subsystem[/url] The legit process just kinda hangs around after startup like a lazy motherfucker, so nothing should happen if you terminate it until you try to shut down.
Thanks man. Also.. Real quick.. I've founder Launcher.exe in some totaly random folder. Not sure if this is it or not. But I've found it in C:\Windows\SMINST\launcher.exe I'm not sure if this is it or not either. I'm just making sure. The Digital Signature is Softhinks. And its language is in.. French.
I think we should really start our own source development/content community. We are at the same or a higher level of popularity as fpsbanana right? Or at the very least add more subforums to the valve games/mods forum. l4d, tf2 and general discussion isn't enough in my opinion.
[QUOTE=Laferio;23306576]I've founder Launcher.exe in some totaly random folder. Not sure if this is it or not. But I've found it in C:\Windows\SMINST\launcher.exe I'm not sure if this is it or not either. I'm just making sure. The Digital Signature is Softhinks. And its language is in.. French.[/QUOTE] As far as I can tell, that's a legit file that comes with HPs, something to do with the software package they come bundled with. No guarantees, but I don't know that you should freak out about it. Google "SMINST" and come to your own conclusion, I guess.
Ffffff- I was asking a decent question. Baaaw Ninja'd Anyways thanks. I've visited FPSBanana not too long ago and I was wondering if I actually caught the danm thing. I don't think I did. No Internet explorers popping up. No random clicking sounds. No random anything. The only thing that really concerns me as of now. Is my Paranoia.
:sigh: There is no hope for that site.
I'm just wondering why the site Owner is doing nothing about it.
[QUOTE=Laferio;23306835]Ffffff- I was asking a decent question. Baaaw Ninja'd Anyways thanks. I've visited FPSBanana not too long ago and I was wondering if I actually caught the danm thing. I don't think I did. No Internet explorers popping up. No random clicking sounds. No random anything. The only thing that really concerns me as of now. Is my Paranoia.[/QUOTE] Same. But I'm currently ripping my PC a part just in case. :tinfoil:
Okay, I'll get to work on making a virus checker batch file for all of those people that are paranoid. Edit: Nevermind, just check your startup list in msconfig and see of there's any copied exes from the programs in their respective folders.
[QUOTE=Laferio;23306917]I'm just wondering why the site Owner is doing nothing about it.[/QUOTE] Because he is 40 year old nolifer who sits 24/7 by PC jerking on video game girl characters. What? Im just sayin'. Anyways i feel like i wanna talk so. I officially quit FPSB FOREVER ! WORST AND GAYEST SITE EVER CREATED >:( and it's owner is rly a lazy ass douche :\ sry for rage mod's.. :s
[QUOTE=Mr. BigShot;23307425]Because he is 40 year old nolifer who sits 24/7 by PC jerking on video game girl characters. What? Im just sayin'. Anyways i feel like i wanna talk so. I officially quit FPSB FOREVER ! WORST AND GAYEST SITE EVER CREATED >:( and it's owner is rly a lazy ass douche :\ sry for rage mod's.. :s[/QUOTE] what? The site is sexually attracted to other sites of the same gender?
[QUOTE=Suttles;23307958]what? The site is sexually attracted to other sites of the same gender?[/QUOTE] No i tryed to describe how idiot the owner of FPSB is -.-
No, you called the site gay.
[QUOTE=Mr. BigShot;23308265]No i tryed to describe [B]how idiot[/B] the owner of FPSB is -.-[/QUOTE] :eng99:
[QUOTE=Shortyish;23309349]:eng99:[/QUOTE] Damn your avatar to hell.
Good thing I rarely go there. I just checked my task manager just in case and I nearly crapped by pants but then I noticed it said "explorer.exe" not "iexplorer.exe". :v: [editline]08:15PM[/editline] [QUOTE=Frying Dutchman;23306383]I'm seriously crapping my pants atm and installed a 4th anti virus. How exactly do you know that you're infected by looking at your processes?[/QUOTE] Good job having four anti viruses. They all now conflict and none of them will do anything. :downsbravo: (In some cases at least.)
Found this on the steam forums= "It's coming from tossads567.com I hate to post that but just do NOT unblock that from your script blockers if you are. FPSBanana is safe however I would be very, very wary." Can someone help confirm this? My PC got extremely laggy and I was unable to start task manager, so I'm bunkering out in Safe mode while Avast! scans my system clean. [editline]08:17PM[/editline] I just found tossads567.com in my history for google chrome. Fuck fuck fuck fuck
[QUOTE=Singo;23290778]Mac [img]http://www.facepunch.com/fp/emoot/smugdog.gif[/img] [highlight](User was banned for this post ("Why reply" - Jimbomcb))[/highlight][/QUOTE] Mac users have no reason to go to FPSbanana.
[QUOTE=Suttles;23308585]No, you called the site gay.[/QUOTE] yes because it is gay. what i see when i enter it? ms pain 1min overlays on default css guns or 12yo retards crying for shit -.- fuck fpsb and it's community [QUOTE=Shortyish;23309349]:eng99:[/QUOTE] u mad?
[QUOTE=Steak;23290242]Ugh, why is it that FPSbanana is ALWAYS attacked?[/QUOTE] The less kids with functional computers the better.
smss is a system32 file but it can be affected by the virus making it bad.
I think it is THREE Trojans. I went to FPSB and downloaded a CSS skin, then found this, and went to msconfig and found C:/Users/Marc/AppData/Roaming/Microsoft/av/internet_security.exe, C:/Users/Marc/AppData/Local/Temp/svchost.exe and C:/Users/Marc/AppData/Local/Temp/explorer.exe AND I DIDN'T CLICK ON THE ADS!
[QUOTE=TheNewbie;23313811]I think it is THREE Trojans. I went to FPSB and downloaded a CSS skin, then found this, and went to msconfig and found C:/Users/Marc/AppData/Roaming/Microsoft/av/internet_security.exe, C:/Users/Marc/AppData/Local/Temp/svchost.exe and C:/Users/Marc/AppData/Local/Temp/explorer.exe AND I DIDN'T CLICK ON THE ADS![/QUOTE] When will people learn that you do [B]NOT[/B] have to click the ads to catch malware? For those who are frantically searching around their systems for these viruses, I recommend Everything Search Engine. It finds and logs every file and folder in your system to a search window. It works infintely better than the default start menu search feature. [url]http://www.voidtools.com/[/url] For example, [IMG]http://imgur.com/QbIz4.png[/IMG]
[QUOTE=DrKinkyKinkles;23314928]When will people learn that you do [B]NOT[/B] have to click the ads to catch malware? For those who are frantically searching around their systems for these viruses, I recommend Everything Search Engine. It finds and logs every file and folder in your system to a search window. It works infintely better than the default start menu search feature. [url]http://www.voidtools.com/[/url] For example, [IMG]http://imgur.com/QbIz4.png[/IMG][/QUOTE] THANK YOU, I now know that people think of viruses as I do. EDIT::::: I had those viruses, and downloaded [B]ComboFix (It was recommended to me) and AvG Went Batty. It was all [B]COMBOFIX[/B] (damn you) and I had to restore. I'm thanking my personal god that I had previous restore points.
Sorry, you need to Log In to post a reply to this thread.