server owners infecting your PC with viruses

[hiyall]

be careful out there, folks.

when downloading stuff from a server when joining, you could end up downloading a virus too.

i have detected viruses and even trojans and also programs being unloaded onto my computer after getting off garrysmod.

one item would be chromium and i found it directly in my garrysmod folder. it is an invasive program that changes settings on web browsers and pops up ads frequently.

[Turtle]

hey ahhhhhh. I have a brand new copy of this game. as you can see i have not much hours played. and i only have 3 mods from the steam workshop. and have this folder in my game files.and it says here acoriding to wikipedia "Chromium is an open-source Web browser project started by Google, to provide the source code for the proprietary Google Chrome browser. Wikipedia" so im guessing this is what garrys mod uses to download its mods. But it does say here "The Chromium browser is actually the “alpha” version of modern Chrome. It was designed to be open source, meaning you can tweak it in all sorts of ways. In your case it was installed on your PC an injected with malicious code. Chromium itself is a completely legitimate program" so i am going to scan it with windows defender and run steam to see if the files are legit. thanks for the help if u did help but if u are trying to ♥♥♥♥ up my game files i will post another comment

[Turtle]

"Ever since Garry's Mod started implementing Chromium as an alternative web renderer to Awesomium, most anti-viruses have a problem with it. Chromium itself is not harmful as it's the open-source project behind Google Chrome without Google's added extentions. I'm assuming the implementation of Chromium in the game cause most anti-virus software to overreact for no reason. Valve wouldn't allow Facepunch to update the game with malware, nor would the Facepunch developers want to give you malware" its a file that can be used to ♥♥♥♥ up ur pc but the one in the garrys mod files is fine. i am just running windows defender now as i have scaned with windows defender before with garrys mod and it did not come up with anything but i repost agin with the udate status

[hiyall]

Originally posted by Elite Turtle 05:

hey ahhhhhh. I have a brand new copy of this game. as you can see i have not much hours played. and i only have 3 mods from the steam workshop. and have this folder in my game files.and it says here acoriding to wikipedia "Chromium is an open-source Web browser project started by Google, to provide the source code for the proprietary Google Chrome browser. Wikipedia" so im guessing this is what garrys mod uses to download its mods. But it does say here "The Chromium browser is actually the “alpha” version of modern Chrome. It was designed to be open source, meaning you can tweak it in all sorts of ways. In your case it was installed on your PC an injected with malicious code. Chromium itself is a completely legitimate program" so i am going to scan it with windows defender and run steam to see if the files are legit. thanks for the help if u did help but if u are trying to ♥♥♥♥ up my game files i will post another comment

i have seen mixed reviews of chromium being good, being better etc.. but i also see forums of it being malicious. maybe there is a virus out there disguised as chromium. i never installed it personally on my own but once i got it, my web settings changed, my home page was changed to some kind of russia page. my google chrome was being injected with ads like mad causing severe slow down. it was not easy to get rid of. i have both windows defender and malware bytes both detected the program as malicious and could not get rid of it. i had to manually hunt down and get rid of any residue of the program i could find. if i didnt get rid of everything, all my settings i fixed from the malicious activity was changed back without my approval and the files i deleted were restored.

i also want to add that i randomly had a chromium shortcut on my desktop appear along with other shortcuts for stuff i dont know what it does

[Turtle]

nope windows defender did not find anything wrong with it. even scaned the folder its self. you are totaly fine with this on your computer.

[hiyall]

Originally posted by Elite Turtle 05:

nope windows defender did not find anything wrong with it. even scaned the folder its self. you are totaly fine with this on your computer.

thats good then. but there is something still out there that i get on my computer from time to time after i get on and then off gmod. just be careful

[Turtle]

oh ok. i think some servers modify the file to make it malous. what did you do to fix it

[hiyall]

Originally posted by Elite Turtle 05:

oh ok. i think some servers modify the file to make it malous. what did you do to fix it

i wouldnt really worry about it unless you see a chromium short cut randomly pop up on your desktop. what i had to do was find what folders it was infecting and manually delete them. my malwarebytes would detect it and delete it, but some residue stays behind and recreates what was deleted. so, i deleted what i could and rescanned and let my antimalware hopefully finish it off. its a pain in the A

[Turtle]

ok. its wierd as i had chromium_resoure.exe but now its gone but windows defender did not say anything was detected.

[hiyall]

Originally posted by Elite Turtle 05:

ok. its wierd as i had chromium_resoure.exe but now its gone but windows defender did not say anything was detected.

mine just said chromium. i didnt check its properties or info. just went straight to trying to get rid of it because i didnt approve of such a thing to be put on my computer and i quickly found out that removing it wasnt going to be easy and i took to google to research how to remove it and notice all my settings changed including my home page and search engine

[Turtle]

nvm was not looking in the right place

[꧁Jay꧂]

I don't believe this is possible, may be something else or a faulty scan from your AV. I've been a server owner for 7~ years and a player of GMod for longer, prove me wrong if you wish but the last time this has ever happened was with "VINH'LL FIX IT@@", which has been patched back in 2014.

[Turtle]

um i scanned my pc just then and i got trogon 32 not sure whats happening

[hiyall]

Originally posted by Elite Turtle 05:

um i scanned my pc just then and i got trogon 32 not sure whats happening

i had a trojan detected too when i got off two nights ago. thats what prompted me to post this. idk if it came from gmod but it got auto detected soon as i got off gmod

[Daniel]

"I don't believe this is possible..."
It's 100% possible and is extremely effective at targetting unsuspecting users. AntiVirus software is at the point where it's having trouble battling efficient coders and hackers because of so many new methods of exploit. Be aware that even with Windows Defender scans your computer could potentially be infected if the virus/trojan was coded by someone competent. You could even have a silent gpu miner running on your computer at minimal power and you'd never know with no antivirus ever picking it up. Be very careful on what you download, install, and use nowadays, because a lot of people are linked to botnets and don't even know because a Windows Defender scan/AntiVirus scan lured them into a false sense of security. Custom Servers are one of the most applicable ways to receive new traffic to infect without raising suspicion to abnormal methods.

[꧁Jay꧂]

Originally posted by Daniel:

"I don't believe this is possible..."
It's 100% possible and is extremely effective at targetting unsuspecting users. AntiVirus software is at the point where it's having trouble battling efficient coders and hackers because of so many new methods of exploit. Be aware that even with Windows Defender scans your computer could potentially be infected if the virus/trojan was coded by someone competent. You could even have a silent gpu miner running on your computer at minimal power and you'd never know with no antivirus ever picking it up. Be very careful on what you download, install, and use nowadays, because a lot of people are linked to botnets and don't even know because a Windows Defender scan/AntiVirus scan lured them into a false sense of security. Custom Servers are one of the most applicable ways to receive new traffic to infect without raising suspicion to abnormal methods.

But do you know how SRCDS servers work? How could this be done specifically with SRCDS?