Guru3D.com
  • HOME
  • NEWS
    • Channels
    • Archive
  • DOWNLOADS
    • New Downloads
    • Categories
    • Archive
  • GAME REVIEWS
  • ARTICLES
    • Rig of the Month
    • Join ROTM
    • PC Buyers Guide
    • Guru3D VGA Charts
    • Editorials
    • Dated content
  • HARDWARE REVIEWS
    • Videocards
    • Processors
    • Audio
    • Motherboards
    • Memory and Flash
    • SSD Storage
    • Chassis
    • Media Players
    • Power Supply
    • Laptop and Mobile
    • Smartphone
    • Networking
    • Keyboard Mouse
    • Cooling
    • Search articles
    • Knowledgebase
    • More Categories
  • FORUMS
  • NEWSLETTER
  • CONTACT

New Reviews
Intel Core i5 11400F processor review
Corsair Vengeance RGB Pro SL 3600 MHz 32GB review
ASRock Z590 Extreme review
Gigabyte Radeon RX 6700 XT Gaming OC review
Corsair K70 RGB TKL keyboard review
Corsair RM650x (2021) power supply review
be quiet! Silent Loop 2 280mm review
Corsair K55 RGB PRO XT keyboard review
Guru3D Rig of the Month - March 2021
Intel Core i9-11900K processor review

New Downloads
NVIDIA Unreal Engine 4 RTX & DLSS Demo
Intel HD graphics Driver Download Version: DCH 27.20.100.9466
CPU-Z download v1.96
GeForce 466.11 WHQL driver download
Guru3D RTSS Rivatuner Statistics Server Download 7.3.2 Beta 2
MSI Afterburner 4.6.4 Beta 2 Download
HWiNFO Download v7.02
Corsair Utility Engine Download (iCUE) Download v4.9.350
Quake II RTX Download 1.5.0
GeForce 465.89 WHQL driver download


New Forum Topics
Is it normal for Zen 2 all-core to max out at 4 GHz? My 3900X in games seems to top out there Resizable Bar? AMD Radeon Adrenalin Edition 21.3.2 driver download & discussion WDDM 3.0 / 470.14 ClockTuner 2.0 for Ryzen (CTR) Guide and download AMD Epyc 7763 CPUs break Cinebench world record, crushes Intel Xeon in performance Utility for mitigations CVE-2017-5715 and CVE-2017-5754 status check Confirmed: GeForce RTX 3080 Ti with 12GB Gets Spotted in Transit GeForce 466.11 WHQL driver download & discussion Should PBO be set to "Auto" or "Enabled" in the BIOS to turn it on? Thanks!




Guru3D.com » News » GTA 5 Angry Planes mod contains malware

GTA 5 Angry Planes mod contains malware

by Hilbert Hagedoorn on: 05/14/2015 07:35 PM | source: | 13 comment(s)
GTA 5 Angry Planes mod contains malware

Guys, if you used this mod for Grand Theft Auto 5, please have a good read. The GTA forums have discovered that the popular Angry Planes mod for GTA 5 contains malware.

The mod was released this earlier month but it’s starting to look like it contains a trojan downloader or spyware.

Now, not everyone who has downloaded the mod seems to have been affected. Whether it’s down to it being caught as it downloaded, the different iterations of the mod, or – as some are speculating – someone other than the modder putting the malware in there, is yet to be confirmed.

From the forums, we know that you should look out for trojans init.exe and fade.exe if you’ve already installed the mod. It’s also advisable to change passwords, just to be on the safe side.

This morning it was discovered that the Angry Planes and No Clip scripts hosted on this site and elsewhere contained malware that ran a program known as "Fade.exe" which acted as a keylogger. 

How did this happen?
The Angry Planes mod was downloaded and run by thousands of people and various other community mod hosting sites and forums. The mod did exactly what it advertised, however it also spawned a thread that installed malware on your machine behind the scenes. The threat was not picked up by running the .asi file through VirusTotal, which made it difficult to detect before running. 

What should I do now?
If you haven't uninstalled the scripts yet - DO! That's not enough, though. You'll also need to check your computer for "Fade.exe" and other offending applications. We highly advise that you change sensitive passwords, since this keylogger could have picked up any of the keys you inputted since running it. 

Beyond obviously removing these files from our site, we're going to beef up the approval process on these kinds of scripts. We're very sorry to the legitimate mod authors out there, the "bad guys" ruined a good thing! If you post compiled scripts in .asi, .dll, or .net.dll formats, the approval process will be much lengthier. We recommend avoiding these formats completely and publishing your mods as .lua or .cs source files, these kinds of scripts will be approved very quickly because the source can be verified.

How can I stay safe?
We will be doing our best to avoid hosting these kinds of files on our site. If you're still paranoid, avoid tools and script mods, which are currently the only types of GTA V mods that could potentially contain malware. Any mod installed by OpenIV (which we 100% trust), including handling/weapon/data config mods and model/texture swaps, can't contain malware because of the nature of their sources.



GTA 5 Angry Planes mod contains malware




« AMD releases list of compatible DirectX 12 graphics cards & APUs · GTA 5 Angry Planes mod contains malware · BioStar Hi-Fi A68U3P »

3 pages 1 2 3


Extraordinary
Senior Member



Posts: 19562
Joined: 2010-04-21

#5070330 Posted on: 05/14/2015 06:58 PM
Scanned with MB since using the angry planes mod, no issues

Not even a folder similar to the guys screenshot

Cyberdyne
Senior Member



Posts: 3584
Joined: 2010-01-16

#5070336 Posted on: 05/14/2015 07:09 PM
http://www.vg247.com/2015/05/14/gta-5-angry-planes-mod-found-to-contain-malware/
https://www.gta5-mods.com/
I would get rid of it...

Reddoguk
Senior Member



Posts: 2066
Joined: 2010-05-26

#5070369 Posted on: 05/14/2015 07:47 PM
I must of been one of the lucky ones that didn't get the infected mods. I do double scan everything though with Nod and MB.

Elfa-X
Senior Member



Posts: 151
Joined: 2005-02-02

#5070525 Posted on: 05/14/2015 11:18 PM
I downloaded it but never got around to opening the rar. I dodged a bullet.

Angantyr
Senior Member



Posts: 797
Joined: 2013-11-23

#5070563 Posted on: 05/15/2015 12:05 AM
Dealing with malware is always an extreme annoyance, but going through that GTA forum thread about the issue is ... "Interesting". Specially on page 7 and onwards where the first analytical view of the virus is shown to be some random danish dude :3eyes:

3 pages 1 2 3


Post New Comment
Click here to post a comment for this news story on the message forum.


Guru3D.com © 2021