Potential Database Breach

[Magickingdom]

Thank you for the warning.

My pass words are all different, but...

If it is a key logger and you have it,wouldn't changing you pass word be handing them your pass word?

A list of known infected files would be most useful. Also the name of the dll (if it is the same one always) as well. And is it installed in the game base directory or? IE fo3 or skyrim along with the game exe?

Edited December 6, 2015 by Magickingdom

[katleigh93]

In response to post #31561115. #31561180, #31561660, #31562180, #31562605 are all replies on the same post.

mokaiba wrote: im not worried about anyone getting into my email since I dont even know my email password. I have it written down because its just a bunch of randomness. eg, SJDHF&yhfsdhgf&*^#&*$TGFg375r2hdehfbghus <- like that lol

katleigh93 wrote: Hehehehe, thats the best kind to have mokaiba :D

mokaiba wrote: I do this for all websites that i care about keeping others out. This was not one of them and had a really simple password because I didnt care if anyone gained access as they wouldnt gain anything from it. I think they gained access to my account but didnt change anything and only wrote down the email. I have noticed an increase of spam mail to my email address this past week. Just in case they try to change my password here, I went and changed it from my 'lower case eight-letter' password to an alphanumeric :)

btw, I dont use my real name or personal information anywhere as well. even facebook has a fake name for me.

ultim8f8 wrote: Difficulty to remember: maximum
Bits of entropy: maximum

But there are better ways: xkcd: Password Strength

mokaiba wrote: I use entire sentences when it comes to work and financial-related passwords. I treat those as on an entirely different level than everything else. eg, ILikePinkButterFliesthatswimintheOcean1! good luck guessing that and cracking it lol

Lol, now that security, hehehehe

[Nixsy]

In response to post #31562240.

angryglock wrote: Thanks for being forthright. I've always thought Nexus is a good Stewart of our information. Breaches happen the trick is how you handle them.

I have one suggestion as a mod contributor. On the My Files list, show the last file update on the summary so we don't have to go to each one looking for activity. Just show the last file add/change/delete date for on the mod. That would help to alert us to something being amiss.

Also consider an auto email to the modder when any file is changed/added/deleted.

I second this, also enabling some form of 2FA similar to steam or maybe using google authenticator when pushing file changes. Edited December 6, 2015 by Nixsy

[536861646f57]

I'm not particularly concerned. I have almost no personal information here. And even if there was a breach, exactly what would they do with a bunch of random hex coding?

[SingABrightSong]

In response to post #31561115. #31561180, #31561660, #31562180, #31562605, #31562795 are all replies on the same post.

mokaiba wrote: im not worried about anyone getting into my email since I dont even know my email password. I have it written down because its just a bunch of randomness. eg, SJDHF&yhfsdhgf&*^#&*$TGFg375r2hdehfbghus <- like that lol

katleigh93 wrote: Hehehehe, thats the best kind to have mokaiba :D

mokaiba wrote: I do this for all websites that i care about keeping others out. This was not one of them and had a really simple password because I didnt care if anyone gained access as they wouldnt gain anything from it. I think they gained access to my account but didnt change anything and only wrote down the email. I have noticed an increase of spam mail to my email address this past week. Just in case they try to change my password here, I went and changed it from my 'lower case eight-letter' password to an alphanumeric :)

btw, I dont use my real name or personal information anywhere as well. even facebook has a fake name for me.

ultim8f8 wrote: Difficulty to remember: maximum
Bits of entropy: maximum

But there are better ways: xkcd: Password Strength

mokaiba wrote: I use entire sentences when it comes to work and financial-related passwords. I treat those as on an entirely different level than everything else. eg, ILikePinkButterFliesthatswimintheOcean1! good luck guessing that and cracking it lol

katleigh93 wrote: Lol, now that security, hehehehe

As strong as XKCD's password is in regards to bits of entropy, it is rather vulnerable to dictionary attacks, where instead of "CorrectHorseBatteryStaple" being 25 characters, it is just four common strings that are concatenated.

That said "gibberish" strings can be made more easily remembered. An example given was "4S&7Ya,oFb4thutCanN,ciL,&dttPtaMac=.", which is interpreted by the human reader as an abbreviaton of the opening of the Gettysburg Address

[kimbote]

Have change the credentials and thank you for being upfront. Many websites wait until it's too late.

 

http://i.imgur.com/TE8fYu8.jpg

[GeohoundJason]

The fact you say what you do and come out to say it does speak volumes man. So many companies try to do damage control after things have hit a major crisis level, you're working to contain it before it gets to that crisis point. I'm certain you guys will figure it out soon.

[blattgeist]

Thanks for telling is the truth upfront. My trust is still not broken. You are very dedicated in what you do here @Dark0ne and I respect that. It wasn't your fault. What I wonder about is why do people target non-profit sites like the Nexus?

 

Anyway.. my password should be safe enough that the hashes alone shouldn't be cracked in no time.. gonna change it today to be on the safe site however.

 

And as GeohoundJason already said, the image is the thing that most companies try to hold up. But telling the people about problems when they occur instead of waiting forever for them to get leaked eventually speaks volumes. Thanks.

Edited December 6, 2015 by blattgeist

[sydney666]

In response to post #31559215. #31561365, #31561800, #31562090 are all replies on the same post.

sydney666 wrote: I love your site, and what you do for the community Dark0ne.

I have been installing well over 5-6gb of mods in the last week, and I noticed something odd when I installed a mod via NMM. My UAC said something was being installed and I, being tired just clicked on yes. Unfortunately I had installed about 10-15 mods and have no idea which mod caused the issue.

When I checked to see "what" was installed, it said it was Synaptics Pointing Device Driver. I googled it and it is something to do with the laptop mouse pad "thingy". I am on a pc and don't have this device at all. So I tried to uninstall it via Control Panel and it stated that the system could not uninstall the program because it was not installed. I ran a virus scan with Avast, used TDSkiller, Malwarebytes, ESET online scanner and many others and nothing was found.

Since this program installed, I get delays when typing in web browsers and oddly enough I have even lost 10-15 fps when using mods that alter the fallout 4 exe such as post processing mods using Reshade. Prior to this issue, I had no issues at all downloading any files or with any fps lags, even with the same presets using this method.

I am concerned that maybe one of the reshade template/preset mods may have had a virus "dll" in it, possibly a keylogger. The dll file is synlSDLL.dll

If you need more info, feel free to contact me.

umiluv wrote: I'm sorry to hear that happen. Good luck to you on getting it off your system. And thank you for your story to help others.

CreeperLava wrote: Try using Revo Uninstaller to uninstall this, or search for other programs of the same type to force the uninstallation. Optionally, also remove the driver in your driver manager.

Dan3345 wrote: Synaptics is the driver suite for your touchpad/trackpad.

Now if you don't have a trackpad, and have never plugged one into your desktop I'd say it's weird that it's on there. but if it really is as you say the Synaptics Pointing Device, then I'd say its just the driver package.

I don't have a touchpad/trackpad and never plugged one in.

Actually this is a fresh install of Windows 10. I made sure nothing was installed prior to getting started on FO4 modding. It is weird because whatever mod it was, it did install this package/suite...it doesn't make sense.

I actually did use Revo to uninstall it, but it said nothing was there to be uninstalled. I went to those locations and nothing was there, even checking hidden files. In the end I had to go into my registry and remove the windows/uninstall item from the control panel list.

The system is clean, thank god for that. The whole thing that makes it weird is that whatever it was installed on my system when I installed a mod via NMM. Like I said, I can't remember exactly what it was, because I was really tired and I just clicked yes, before going into panic mode. Now, it was either a mod with it's own install script, or it was from one of those post processing presets, but then if it was a preset, I only install those manually...so possibly it was not that after-all. Whatever mod did it, it did it via NMM install scripts. Lastly the other odd thing was that the "program" was uninstallable via the normal methods - making it quite suspect.

Since uninstalling/cleaning up those files and removing all presets and dll's from fallout 4 folder (copied and pasted over from a backup folder cleanly - then copied data folder from mods and checked through that), I no longer have fps drops or lag while typing.

Fingers crossed I guess, but I hope this helps anyone out there if they had a similar issue...just so odd, and could just be co-incidental - but I wanted to share it nonetheless.

Good luck out there, kudos to the Nexus team and I hope you all continue to have fun with FO4! Edited December 6, 2015 by sydney666

[chuckles0000]

In response to post #31559215. #31561365, #31561800, #31562090, #31564070 are all replies on the same post.

sydney666 wrote: I love your site, and what you do for the community Dark0ne.

I have been installing well over 5-6gb of mods in the last week, and I noticed something odd when I installed a mod via NMM. My UAC said something was being installed and I, being tired just clicked on yes. Unfortunately I had installed about 10-15 mods and have no idea which mod caused the issue.

When I checked to see "what" was installed, it said it was Synaptics Pointing Device Driver. I googled it and it is something to do with the laptop mouse pad "thingy". I am on a pc and don't have this device at all. So I tried to uninstall it via Control Panel and it stated that the system could not uninstall the program because it was not installed. I ran a virus scan with Avast, used TDSkiller, Malwarebytes, ESET online scanner and many others and nothing was found.

Since this program installed, I get delays when typing in web browsers and oddly enough I have even lost 10-15 fps when using mods that alter the fallout 4 exe such as post processing mods using Reshade. Prior to this issue, I had no issues at all downloading any files or with any fps lags, even with the same presets using this method.

I am concerned that maybe one of the reshade template/preset mods may have had a virus "dll" in it, possibly a keylogger. The dll file is synlSDLL.dll

If you need more info, feel free to contact me.

umiluv wrote: I'm sorry to hear that happen. Good luck to you on getting it off your system. And thank you for your story to help others.

CreeperLava wrote: Try using Revo Uninstaller to uninstall this, or search for other programs of the same type to force the uninstallation. Optionally, also remove the driver in your driver manager.

Dan3345 wrote: Synaptics is the driver suite for your touchpad/trackpad.

Now if you don't have a trackpad, and have never plugged one into your desktop I'd say it's weird that it's on there. but if it really is as you say the Synaptics Pointing Device, then I'd say its just the driver package.

sydney666 wrote: I don't have a touchpad/trackpad and never plugged one in.

Actually this is a fresh install of Windows 10. I made sure nothing was installed prior to getting started on FO4 modding. It is weird because whatever mod it was, it did install this package/suite...it doesn't make sense.

I actually did use Revo to uninstall it, but it said nothing was there to be uninstalled. I went to those locations and nothing was there, even checking hidden files. In the end I had to go into my registry and remove the windows/uninstall item from the control panel list.

The system is clean, thank god for that. The whole thing that makes it weird is that whatever it was installed on my system when I installed a mod via NMM. Like I said, I can't remember exactly what it was, because I was really tired and I just clicked yes, before going into panic mode. Now, it was either a mod with it's own install script, or it was from one of those post processing presets, but then if it was a preset, I only install those manually...so possibly it was not that after-all. Whatever mod did it, it did it via NMM install scripts. Lastly the other odd thing was that the "program" was uninstallable via the normal methods - making it quite suspect.

Since uninstalling/cleaning up those files and removing all presets and dll's from fallout 4 folder (copied and pasted over from a backup folder cleanly - then copied data folder from mods and checked through that), I no longer have fps drops or lag while typing.

Fingers crossed I guess, but I hope this helps anyone out there if they had a similar issue...just so odd, and could just be co-incidental - but I wanted to share it nonetheless.

Good luck out there, kudos to the Nexus team and I hope you all continue to have fun with FO4!

sounds like it could be a keylogger... i honestly would wipe my system and start over just to be sure...