• FPSbanana Trojan. Don't go on the site.
    341 replies, posted
[QUOTE=Lol Steve;23371923]So does anyone have a list of all the confirmed viruses form this? I'm gonna get Malwarebytes tomorrow to sate my paranoia, but temporarily I need to know what to look for. Also, what was that about Win 7 and "turning off" IE? I'd like to know how to do that.[/QUOTE] It's the bottom of the page, of course. Sorry, but I'm really worried right now, both of viruses and of that not being seen.
I've had two rundll32.exes Running as long as I can remember. I don't recall Winlogon doing anything.. I have winlogon running in the background. But I've had it for years now.
[QUOTE=alexk;23344522]Is this man legit?[/QUOTE] Yes of course I'm legit. I'm a moderator on FPSB for crying out loud.
Well, I too have rundll32, but nothing is wrong with my computer, as Windows Defender says. And I haven't gone to FPSBanana in a LONG time.
[QUOTE=Zuimzado;23377211]Well, I too have rundll32, but nothing is wrong with my computer, as Windows Defender says. And I haven't gone to FPSBanana in a LONG time.[/QUOTE] Rundll32.exe is a part of windows used to run program code in DLL files as if they were within the actual program. It is located in C:\windows\System32. However, if you see a program called Rundll32.exe located anywhere but the system32 folder, it's a virus, spyware, trojan, or a worm. So you're probably safe.
[QUOTE=Lol Steve;23371923]So does anyone have a list of all the confirmed viruses form this? I'm gonna get Malwarebytes tomorrow to sate my paranoia, but temporarily I need to know what to look for. Also, what was that about Win 7 and "turning off" IE? I'd like to know how to do that.[/QUOTE] Click the start orb, and search for "add or remove windows features". Click on the first result, and in the pop up box, uncheck internet explorer. Hit apply and restart. Tada. :buddy:
i WANT to go on it but im too paranoid :ohdear:
[QUOTE=little.sparrow;23379550]i WANT to go on it but im too paranoid :ohdear:[/QUOTE] It's safe to go on, but the site is probably still under reconstruction due to the damage that the Trojan caused.
[QUOTE=Lordgeorge16;23379564]It's safe to go on, but the site is probably still under reconstruction due to the damage that the Trojan caused.[/QUOTE] Alright, ill have a small peek. noscript is on, btw. EDIT: I popped over for a second or two (page didnt load properly), no trojan.
[QUOTE=little.sparrow;23379633]Alright, ill have a small peek. noscript is on, btw.[/QUOTE] Don't be surprised if the only thing you get is a blank page, that's been happening to me too.
[QUOTE=Lordgeorge16;23379650]Don't be surprised if the only thing you get is a blank page, that's been happening to me too.[/QUOTE] My edit ninja'd you :v:
Not be rude. But he could just regulate what ads go up. Instead of using Google. You're better off not using a middleman. Plus, more money.
Is "plugin-container.exe" normal? I just had two of them running, but I haven't been to FPSB since this scare started.
[QUOTE=You]virus[/QUOTE] That's why i don't use FPSBanana [editline]03:43PM[/editline] [QUOTE=Ekalektik_1;23380024]Is "plugin-container.exe" normal? I just had two of them running, but I haven't been to FPSB since this scare started.[/QUOTE] It's a part of Mozilla Firefox.
Are you using firefox? It makes it so that when flash player and other plugins crash, they don't take down the whole browser.
Oh. Yes, I am. And I killed both those processes. Thanks, by the way. I guess I'm a bit paranoid.
If it was an ad, i highly doubt it was a direct attack.
[QUOTE=little.sparrow;23379550]i WANT to go on it but im too paranoid :ohdear:[/QUOTE] There is nothing at all to be afraid of. The virus is long gone and Tom, the owner, is working on securing the website further for attacks. -Kosai106 Game Moderator on FPSB.
[QUOTE=Kosai106;23381489]There is nothing at all to be afraid of. The virus is long gone and Tom, the owner, is working on securing the website further for attacks. -Kosai106 Game Moderator on FPSB.[/QUOTE] Do you happen to know how much longer the site will be down? Every time I go there, I just get a blank screen, no error or anything. Oh, and are the pages for games being fixed too?
[QUOTE=Ekalektik_1;23380024]Is "plugin-container.exe" normal? I just had two of them running, but I haven't been to FPSB since this scare started.[/QUOTE] Its a new thing firefox has added loads things like swf AKA flash and i think other scripts.
I had it yesterday, and got rid of it.
Oh fuck oh fuck oh FFFFFUUUUUU-! I recently went on FPSB to download my friend's HL2 map, I googled Black Virus Trojan and it said smss.exe. I opened my task manager thingy and i found an smss oohh I am deeply screwed am I?
Scan it right now. Before its too late. NOW!!
Are you guys sure its gone? I'm paranoid as hell
[QUOTE=Dachande;23386592]Are you guys sure its gone? I'm paranoid as hell[/QUOTE] Yes, it's been gone for about a day now, the site seems to still be under repairs though.
Just to clear up the google chorme business [quote]Chrome.exe - Browser Chrome.exe - Tab 1 Chrome.exe - Tab 2 Chrome.exe - Extension 1 Chrome.exe - Extension 2 Chrome.exe - Plugin - Google Gears Chrome.exe - Plugin - Shockwave Flash Do you understand now. [/quote]
I have no smss.exe :smug:
Wow, thanks alot OP. Even though I dont go on FPSbanana alot its really usefull to know about those malicious softwares.
[QUOTE=sam6420;23304092]FFS I heard people talking in the background yesterday and assumed my computer somehow picked up some radio station! :*([/QUOTE] Holy fuck you are not alone! Sometimes I pick up some random Gibberish and talk, but I don't understand a shit. I suspected my MSN has been infected at first. edit: I checked smss.exe with avast, didn't found anything. I can't even close it. I may try to delete it and all of it's Registry keys manually.
AVG found some trojans. C:\bndafai C:\mcxa C:\rggbw Can anyone confirm that these are viruses or false-positives?
Sorry, you need to Log In to post a reply to this thread.