New exploit downloads trojans to your PC from servers

[fever 9,884]

Just got sent this and thought it best to share

 

http://forums.steampowered.com/forums/showthread.php?t=3261584
 

Just a heads up this is about tf2 downloading files to your machine, its nothing to do with clicking on links...you seriously should read it

[paulr 270]

thanks for the heads up m8

[luop90 4,400]

I've got a config specifically targeted to blocking shit like this (and other stuff). I'll post it when I get back from school.

[Domino 3,168]

As a QA tester, your title makes me cry.

[+Dr. Obvious 14,606]

As a QA tester, your title makes me cry.

Whud?

[Se7en 10,762]

You don't really need any config for this, just go to tf2 advanced options and untick the Allow downloading files from server. You won't be able to join any server that uses custom sounds/maps/textures automatically but you can download them manually if you are so inclined and it's a fair trade off.

[luop90 4,400]

You don't really need any config for this, just go to tf2 advanced options and untick the Allow downloading files from server. You won't be able to join any server that uses custom sounds/maps/textures automatically but you can download them manually if you are so inclined and it's a fair trade off.

My config does the console command for that, along with overriding certain commands by creating empty aliases for them.

Here's the one I use that I edited to my needs, but it's good as overall coverage.

//------------------------------------------------
// TF2 Anti-Virus by Casual v1.0
//------------------------------------------------

// Protection against server_can_execute bypass
// Make your cfg/config.cfg read-only for extra protection
cl_allowupload 0
alias cl_allowupload "echo Blocked cl_allowupload!"
alias clear "echo Blocked clear!"
alias unbindall "echo Blocked unbindall!"

// Adblock for motd, extra protection:
// > Create an empty file in your tf directory named textwindow_temp.html and make it read-only (this prevents the motd from being saved & loaded)
// > Add '127.0.0.1 motd.pinion.gg' to your hosts file. This prevents a well known motd advertising network to load
cl_disablehtmlmotd 1
alias closed_htmlpage "echo Blocked pinion!"

// Gets rid of servers playing annoying sound files
alias sndplaydelay "echo Blocked sndplaydelay!"
alias playgamesound "echo Blocked playgamesound!"
alias soundfade "echo Blocked soundfade!"

// Servers don't need this
alias cl_spec_mode
alias rpt_connect
alias r_screenoverlay