TROJAN VIRUS DETECTED FROM TF2 CUSTOM SERVER. WARNING TO ALL

[Owl]

Be careful when joining Wonderland.TF LA | Jailbreak (Maintenance). I was playing on it when all of a sudden Windows Defender detected a Trojan:BAT/Killav.B Virus. Did all of the steps and this is what the affected items told me

file: D:\Steam\steamapps\common\Team Fortress 2\tf\download\user_custom\74\ [Name of Virus File]

Meaning that either someone who owns or someone somehow got into the custom addons file of this server and planted Trojan

I home someone from Wonderland sees this and is able to find the problem. Last thing I want is Trojan attacks from the botpoclypse

[Joe schmoe]

Weren’t they known to be pedos?

[<#FF69B4>Robin ;3]

Who the ♥♥♥♥ besides children plays jail break

[Owl]

Originally posted by Billy Bob:

Weren’t they known to be pedos?

I dont know anything about that

[Owl]

Originally posted by James ):

Who the ♥♥♥♥ besides children plays jail break

I like being stupid on those servers. But yeah there are a lot of kids

[Joe schmoe]

Originally posted by James ):

Who the ♥♥♥♥ besides children plays jail break

Bro kid in a candy store. Cept that kid ain’t no kid and he/she shouldn’t be after that candy 😳

[anti]

its a virus, you may want to uninstall tf2 for now until the source code leak is confirmed safe

[KONAZUMI]

You should probably post it on their community forums/discord, if you want answers.

[Owl]

Originally posted by anti:

its a virus, you may want to uninstall tf2 for now until the source code leak is confirmed safe

I did a fresh reinstall

[Be Gay, Do Crimes, Smoke Weed!]

Were sprays enabled on that server? There's a prank spray going around that makes your antivirus think it's a Trojan, good chance it was that.

[TH_Femboy Sarah]

That path is where player sprays are stored. No one hacked the server, it just had sprays enabled and someone had a spray Windows Defender didn't like. While it is theoretically possible a malicious spray could do harm, there's a good chance someone just took a random malicious executable and set it as their spray, in which case it is completely inert. I would see if I had the same spray and check its contents for you, but you censored the filename.

[Owl]

Originally posted by Sarah:

That path is where player sprays are stored. No one hacked the server, it just had sprays enabled and someone had a spray Windows Defender didn't like. While it is theoretically possible a malicious spray could do harm, there's a good chance someone just took a random malicious executable and set it as their spray, in which case it is completely inert. I would see if I had the same spray and check its contents for you, but you censored the filename.

If thats the case I hate people

[Owl]

Originally posted by Sarah:

That path is where player sprays are stored. No one hacked the server, it just had sprays enabled and someone had a spray Windows Defender didn't like. While it is theoretically possible a malicious spray could do harm, there's a good chance someone just took a random malicious executable and set it as their spray, in which case it is completely inert. I would see if I had the same spray and check its contents for you, but you censored the filename.

Originally posted by Owl:

Originally posted by Sarah:

That path is where player sprays are stored. No one hacked the server, it just had sprays enabled and someone had a spray Windows Defender didn't like. While it is theoretically possible a malicious spray could do harm, there's a good chance someone just took a random malicious executable and set it as their spray, in which case it is completely inert. I would see if I had the same spray and check its contents for you, but you censored the filename.

If thats the case I hate people

Also it was "746271ec.dat"

[Scout]

Originally posted by anti:

its a virus, you may want to uninstall tf2 for now until the source code leak is confirmed safe

bro the source code leak was like 2 years ago

[anti]

Originally posted by Scout from Team Fortress 2:

Originally posted by anti:

its a virus, you may want to uninstall tf2 for now until the source code leak is confirmed safe

bro the source code leak was like 2 years ago

lol there was another

[Scout]

Originally posted by Sarah:

That path is where player sprays are stored. No one hacked the server, it just had sprays enabled and someone had a spray Windows Defender didn't like. While it is theoretically possible a malicious spray could do harm, there's a good chance someone just took a random malicious executable and set it as their spray, in which case it is completely inert. I would see if I had the same spray and check its contents for you, but you censored the filename.

btw the actual file path is tf/materials/temp