Be adivsed, Be aware...

[Kodiak]

I know many of us dislike the Nexus for one reason or another, myself included. Yesterday however this was posted and began to circulate among some of the TES modding communities. This isn't to bash Nexus. I don't give a shit. THis is about spreading the word and awareness so you guys, the Lover Lab community, know what is going on and you can protect yourself by using a little extra caution while downloading Skyrim mods.

 

A warning from Dark0ne on Nexus:

 

 

This is a heads up announcement to please, for the love of all that is good, always keep your wits about you when downloading from here or anywhere on the internet.

 

There is currently an individual who is placing trojans within well known pieces of Skyrim software, such as the Skyrim Character Editor and even Skyrim Mod Organizer, and then uploading them as new files here on Skyrim Nexus (note, the original files here and here are NOT compromised, this user is uploading new files to the site masquerading as these files). This trojan has code within it that will retrieve any passwords you have stored in your browser and send them to the script kiddy's email address. The script kiddy is then using the details he has stolen from users "unlucky" enough to be exploited in this way, logging in to their accounts here on the Nexus and then uploading another trojan via the same method.

 

If you believe you may have fallen for this exploit then ALL the passwords you have stored in your browser have been compromised. You should change your passwords immediately for any and all sites you use, and change your passwords on any sites where you have used the same password, even if you don't have that site's login stored.

 

If you stick to common sense practises while browsing the internet then this will not be a problem for you at all. Things you should always be suspicious of or do:

• [li]Files with comments disabled that have only been uploaded in the past day[/li]

  [li]Elaborate and complex files uploaded by new users or users who have previously not uploaded a single file or made a single comment on the sites[/li]

  [li]Software that has absolutely no business using your internet connection trying to make a connection to the internet[/li]

  [li]Executable files, or files containing .DLL libraries unless you are absolutely sure it can be trusted.[/li]

  [li]Always, always run a virus scan on any files you download from this or any site you download from[/li]

  [li]If in doubt, don't download or open the file and wait to see what other more experienced users are reporting[/li]

I sympathise with the people who have been caught by this, but you got caught by this because you aren't using your common sense. Please, for your sake, keep your wits about you and don't let your guard down when downloading files on the internet.

 

If you don't have a firewall, or if your firewall does not warn you when new, unrecognised and untrusted software is trying to connect to the internet please follow these steps:

• [li]Find your router[/li]

  [li]Rip your router away from any connected cables[/li]

  [li]Open the nearest window[/li]

  [li]Throw your router out of it[/li]

  [li]Close the window[/li]

Honestly, get a firewall, install it, and understand how it works. Without one it's very possible your system is a drone in a botnet and likely a part of the perpetual problem of the internet that is DDoS'ing, something that we're no stranger to here.

 

http://forums.nexusmods.com/index.php?/topic/1477752-be-careful-trojans-masquerading-as-popular-executables/

 

I've seen it a few times, and the way they were uploaded always seemed fishy. I was not aware that the malignant was host-hopping though.

 

Be smart while downloading new mods. No telling if this shit-stain is doing the same thing on other mod sites, this one included.

[Ark of Truth]

Hence why you should have a good anti-virus checker......

[Vancien]

This bit was funny: 

 

 

If you don't have a firewall, or if your firewall does not warn you when new, unrecognised and untrusted software is trying to connect to the internet please follow these steps:

• [li]Find your router[/li]
  [li]Rip your router away from any connected cables[/li]
  [li]Open the nearest window[/li]
  [li]Throw your router out of it[/li]
  [li]Close the window[/li]

   

Haha! I scan things that I download but one can never be too safe. It's sad that people resort to this type of malicious internet behavior. Thanks for the heads up!

[Benmc20]

Dark0ne must warn Newusmods visitors, but how many will really learn ? By experience, not so much.

 

(for myself, my computers have all an antivirus software and my router has a firewall componnent fully active, but i don't trust 100 percent thoses and am very cautious for what i download and where)

[myuhinny]

Yeah I saw this a few days ago in the banned from the nexus thread. I haven't downloaded anything for skyrim in awhile been sticking mostly to oblivion and fallout nv.

[Seraphim's Call]

Good thing I haven't really DL'd any mods except trusted ones from here.

 

Thanks for the heads up, I'm gonna be way more careful.

[EdinMG]

That's why I never save my passwords on Firefox (or any program that needs a login), and everytime that I close it, everything is deleted automatically, cookies, temporary files...etc !!!

[nobilight]

Thanks for the headsup. As many others have stated you can't be to careful when it comes to security.

[Sunja44]

-Router firewall

-Windows firewall

-Antivirus software

-Two different Antimalware softwares (who ever got caught by Mobogenie once will understand why)

-A few browser addons like AdBlock Plus, DisconnectMe and NoScript

-Running Java only at the minimum application range, that is needed to show websites properly.

 

The only missing thing for security would be a proxy server (I am actually thinking to build one with a second PC).

 

You can't have 100% security, but there is a difference between being totally dumb and 100%.

 

[Guest corespore]

I don't DL from nexus anymore, but i just renewed my webroot so i'm doing a disk scan just to make sure. Thanks for the heads up.

[quin666]

So what bad news?

[calranthe]

I have a can of chicken soup it sits on my router and protects me from all the evil things of the internet.

[gvman3670]

That's why I never save my passwords on Firefox (or any program that needs a login), and everytime that I close it, everything is deleted automatically, cookies, temporary files...etc !!!

Same here. Of course, this means I have to log in every time, but it's not a big deal.