Watch out when you’re visiting FPS Banana!
It’s probably one of the best sites for maps, skins, mods, custom UIs and other gaming stuff but recently they’ve been infected with the "Black Internet" trojan.
Do not even visit the site because you will get infected while you visit it (you don’t have to download anything).
Just thought we would let you all know about this since the only thread on this on the Steam forums.
Read the rest of this entry if you want to know how to check if you’re infected or wanna know how to remove the trojan.
Here are some quotes of what people posted:
It’s embedded in the site itself somehow, which means all you have to do is go there– you don’t have to download anything, and you’ll be infected. All the following programs did not detect the trojan AVG, Ad-Aware and Windows Defender.
If you’ve been to FPSBanana in the last day or less, check your task manager. Look for iexplore.exe running– or multiple instances of it if you are surfing with internet explorer, of course. You might also be hearing audio advertisements and/or multiple weird noises and mouseclicks.
Apparently this trojan infects the MBR, to fix the virus problem make all folders viewable in the control panel -> large icons -> folder options -> view -> show hidden files, folders and drives, then reboot in Safe Mode and go here:
C:UsersYOURUSERNAMEAppdataLocalTemp
and deleting these two files:
Loader.exe
Smss.exeAnd until further notice I strongly suggest that you avoid going to the website.
Leave a Reply