14704 Posts in 2611 Topics - by 7891 Members - Latest Member: lordofanal

Author Topic: *WARNING*: A GARRYSMOD LUA VIRUS. PLEASE READ. URGENT!  (Read 1659 times)

Master Mark

  • October 2013
  • 259 Posts
    • STEAM_0:1:16156095 STEAM_0:1:16156095
« April 19, 2014, 04:00:41 AM » #11463
WARNING: DO NOT JOIN ANY SERVERS WITH !!! IN THE TITLE!


As of 4/18/2014 about an hour before this post is uploaded, some sort of LUA virus has been attacking servers with rcon enabled and infecting the players which visit these servers. On the next server they visit, this player then distributes the infected LUA file to the other users on the server.

Please follow this tutorial if you wish to temporarily remove the infected files from your garrysmod folder (or if you own one, server):
http://pastebin.com/eS20xfqj

1) Copy code in the pastebin above
2) go to your steamapps/*username*/garrysmod folder
3) create a new text file
4) paste in the code from the pastebin
5) File -> save as.. -> name it fix.bat (don't forget to change save .txt to ALL FILES)
6)save the file
7)run the bat in your garrysmod folder and follow the instructions printed in the terminal.

Note that supposedly joining a server again after running this fix with a person with the infection will give it to you again.

I will leave this thread open for discussion of this event, problems you are facing, or any solutions and fixes you might have.

Also, keep an eye on this facepunch thread for details as they evolve.

http://facepunch.com/showthread.php?t=1386818

« Last Edit: April 19, 2014, 04:35:33 AM by Master Mark »
x3 x1

masterkev

  • This user has no personal avatar.
  • January 2013
  • 35 Posts
    • STEAM_0:1:28851405 STEAM_0:1:28851405
« April 19, 2014, 04:10:33 AM » #11464
Impressive post. I was getting *cough* from 3 people in my list already. It's spreading fast.
x2 x1

Stebbzor

  • September 2011
  • 521 Posts
    • STEAM_0:0:13707575 STEAM_0:0:13707575
« April 21, 2014, 01:08:07 AM » #11474
It's pretty funny as it doesn't harm anything, it's just a known hacker making it very obvious that there's a big exploit out there.
x1 x1 x1

0 Members and 1 Guest are viewing this topic.