[Updated] Nexus Trojan/Virus alert

[lera213]

At the moment i am still getting "reported bad site". I'm on Google Chrome Browser.

 

 

Warning: Visiting this site may harm your computer!

 

The website at www.thenexusforums.com contains elements from the site www.fallout3nexus.com, which appears to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.

For detailed information about the problems with these elements, visit the Google Safe Browsing diagnostic page for www.fallout3nexus.com.

Learn more about how to protect yourself from harmful software online.

 

I understand that visiting this site may harm my computer.

Same here! I'm on my 4th deep scan, nothing is showing up.

[Sativarg2]

Hi,

 

I have not gone onto the download area since hearing of the virus. But can anyone tell me the name of the virus/trojan that was on the site? My husband is a computer tech and frequently has to deal with customers who have viruses on their computers and has asked me to find out which one this was.

 

I would appreciate it if anyone could let me know. Thanks for your help.

If you are determined to sample the malware you may be able to trap some with a honey pot or sandboxed browser(Does sandbox security really protect your desktop? | Security Central - InfoWorld) if you set one up and goto:

Google Safe Browsing diagnostic page for www.fallout3nexus.com/downloads then find your way to the pages with content from the domains listed there. But by now those malicious adds should be gone all together. Some users may have quarantined versions saved by antiviral or antimalware programs on their systems.

 

this post has more info about found malware

 

gorbajev777 post #95 in this thread

[nomore123]

beside google and Firefox. Now my norton 360 is saying site is unsafe and 6 computer threats.

[sagittarius22]

Everything seems to be normal for me...

[Sativarg2]

Everything seems to be normal for me...

Confirmed: I have blocking enabled in firefox and the warning is not firing for

Fallout 3 Nexus - Fallout 3 mods and community

Updates today

any longer :thumbsup:

 

still warned at http://www.tesnexus.com/downloads/today.php though

[nomore123]

Hello again FYI norton report hope it helps

 

 

fallout3nexus.com

 

Summary

•Computer Threats: 6

•Identity Threats: 0

•Annoyance factors: 0

 

Total threats on this site: 6

 

 

 

General Info

Web Site Location United Kingdom

 

 

Norton Safe Web has analyzed fallout3nexus.com for safety and security problems. Below is a sample of the threats that were found.

Threat Report

Total threats found: 6

 

 

Drive-By Downloads

Threats found: 6

Here is a complete list: (for more information about a specific threat, click on the Threat Name below)

 

Threat Name: MSIE ADODB.Stream Object File Installation Weakness

Location: http://fallout3nexus.com/modules/members/index.php?id=128909

 

 

 

Threat Name: MSIE ADODB.Stream Object File Installation Weakness

Location: http://www.fallout3nexus.com/modules/members/index.php?id=309068

 

 

 

Threat Name: MSIE ADODB.Stream Object File Installation Weakness

Location: http://www.fallout3nexus.com/modules/login/index.php?redirect=/modules/login/index.php?redirect=/

 

 

 

Threat Name: Direct link to MSIE ADODB.Stream Object File Installation Weakness

Location: http://www.fallout3nexus.com/modules/login/index.php?redirect=/

 

 

 

Threat Name: Direct link to MSIE ADODB.Stream Object File Installation Weakness

Location: http://fallout3nexus.com/

 

 

 

Threat Name: Direct link to MSIE ADODB.Stream Object File Installation Weakness

Location: http://www.fallout3nexus.com/downloads/filesofthemonth.php

 

 

 

 

 

 

 

[Lexx666]

The website at www.thenexusforums.com contains elements from the site www.tesnexus.com, which appears to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.

For detailed information about the problems with these elements, visit the Google Safe Browsing diagnostic page for www.tesnexus.com.

Learn more about how to protect yourself from harmful software online.

 

I understand that visiting this site may harm my computer.

 

Same here. :confused: :confused: :confused:

 

In big red screen. :confused: :confused: :confused:

 

Only browse cathegories sections and DL-section.

 

Site shows no more warnings. :confused: :confused:

[OldStacky]

All clear with Google from the UK today.

Earlier Zone Alarm warned then Avast picked up the Trojan so I am happy.

While I am sure this was a bummer for you, I say, "Caviat Emptor". As for those that fell foul, leave that to the thories of Darwin. Protect and Survive!

[Werewolf_13]

I just scanned the computer and I found: "TrojanDownloader: Java/Rexec.B" and "Exploit:Win32/Pdfjsc.IP" which both had severe alert level. I also found "Tool:Win32/Cmdow" and "HackTool:Win32/PWDump.A" which both had a medium threat level.

 

I do not think it is a coincidence that all these were found on the same day as this site got attacked. Just information on what is really on this site. Shame that this should happen to this great site.

Edited September 25, 2010 by Werewolf_13

[Chiramu]

I just got terribly scared when AVG popped up and said it detected a threat I closed the browser straight away!

Thankyou for the fix :)