Virus Alert: FPSBanana.com

[GiantSwede]

Please avoid FPSBanana.com for the time being. Its scripts are infected with a Trojan horse. My antivirus (McAfee) detected JS/Exploit-BO.gen (Trojan). Since I was already a victim... I decided to see the extent of it. It is been on all three pages I have tried. (The home page, a map page, and the “How to Protect Yourself from Viruses” page.) If you have been to FPSBanana.com recently, I recommend scanning your machine. If you do not have anti-virus software, let me recommend AVG Free Anti-Virus (http://free.avg.com/). I still believe FPSBanana.com to be a good site, just hijacked. I will run a full scan with McAfee and SpyBot, and let you know what I find. I have written a letter to the webmaster.

[BubbleQ]

Yeah, that right.
About 2 h ago I was going to look at som new skins for tf2 and sudenly everything is getting really slow and firefox private workmemory was 500 000, it is usualy 40 000 for me.
The only thing I could was to turn off my computer, and now when trying to visit fpsbana firefox stops me

[dissonance]

Didn't Mapcore get hit with this a while back?

[The Wanderer]

hmmm i'm not even going to try to go on fpsbanana now. Had a recent run-in with a nasty trojan myself (the first in years ) and my avast didnt even pick it up, had to rely on the windows defender to find it and then had to manually delete it in safe mode (files and registry keys). The nasty fugger booted up even before i could log on so any other way was impossible to get rid of it and immediately bore itself into my windows folder...

[SwampyTurtle]

first time i decide to go there in Months and this happens , just my luck! anyway my anti virus caught and deleted it before it could do any damage than i ran a full system scan just to be safe. Some times its pays to have payed for good internet protection

Never going to FPSBanana again. Lost faith in that site

[[JFG]Propaganda]

Hate to say it but that's not the first time I have seen trojans on that site, I got nailed by one there 3 months ago. The fact is it's not a very secure place, anywhere that allows so much user interaction needs to be tighter. I was there today and my comp lagged right out, tried it with both IE 8 and Firefox, same deal. Going to run a malware and virus scan now.

[ghost12332]

I just visited the page (my friend told me it was crashing people) and nothing happened to me on Chrome. Stayed at a constant 57mb tab usage (Standard for lots of images n such) and no big CPU cycles used.

I think Chrome blocked it automatically (It gave me a warning before I went onto the site, CHROME FTW!) but how do I know if I got the Trojan?

EDIT: No strange processes, normal memory usage and CPU Cycles. Going to do a scan to be safe though.

[spare8ball]

when are we going to know its safe to go back to that site?!?

[Zipfinator]

It's never going to be safe...

Why do you need to go there anyway!

[SwampyTurtle]

its not worth going back to, ive deleted it and decided if they cant keep it secure than i dont need to bother being there............

[Megadude]

It's never going to be safe...

Why do you need to go there anyway!

It's a piece of crap for maps most of the time, (people posting the same map 12 times in just a few hours, or releasing a map with only aboout 20 dev textured brushes, marking it as a final submission, and saying it is a "fun map" *cough*wankers*cough*), but it does get you good publicity when you post a decent map yourself, (decent by 'lopers standards, not fpsb standards).

[Mr. Happy]

Why wouldn't you go to a site with a huge user base that will host your maps for free?

Besides the virus I mean...

[Prototstar]

Well I think the site is fixed.

[nub]

The fact that so many Steam users visit FPSB--and they make up the majority of the community--makes FPSB a good candidate (or bad in our case) for this kind of shit.

Ghost warned me about it AFTER Firefox blocked the site, saying it was a reported attack site. Fortunately I am not infected with anything.

Just make sure that if you did visit the site in the last couple of days, to scan your pc thoroughly. You can never be too sure when it comes to viruses.

PS: It's not fixed. The layout may look fine, but visiting a submission page makes Firefox block the site for me. I was careless in doing this, but fortunately I'm still not infected. I'm waiting at least a week or two before going back there, unless there's an official confirmation that the site is clean again.

[Ryder2394]

JS/Exploit-BO.gen attempts to use a security vulnerability from 2005, so unless you don't have a valid copy of windows and or don't update it regularly, then all you'll get is a slow browser, my browser ended up using 2 GB before I forced the process to end. It is possible, however, that there is more malware on the site. So don't take that sigh of relief yet.