Database Breach - An Update

[2456gamer]

In response to post #31701780.

Soulbringer1 wrote: dsound.dll is a Microsoft dll sound file. I do not understand how a Microsoft file can be a malicious file??????????????????? Are you sure you are not just telling people something to passify them??? i do know that one of the mods that got hacked left a bug in my game. the clock is about 25 to thirty digits on screen. and my game keeps crashing when i enter buildings. also the ground keeps going grey like losing it's texture or mesh. also some clothing mods are not working. and I know my load order is correct. So what is the real story? Have you found anything Concrete? or we are supposed to believe that a Microsoft sound dll file is the culprit??

dsound.dll is a file name and extension... the dsound portion doesnt actually tell you s#*! about what it does. it could potentially be a .dll that changes... something too a picture of a cat or some s#*!... so yes its also the name to several windows files, but that doesn't mean that its from windows.

[marmed911]

In response to post #31695200.

Loukiana wrote:

So, I just tried to change my password, and upon clicking the button to finalise that, I get sent to the equivalent of a 404 Error page. It's just a blank Firefox page with a button on it saying 'Try Again' and a notice that the Nexusmods server can't be found. Anybody else have this problem, and if so, any suggestions? I can (obviously) access all my account info here and the rest of the forums (equally obviously) are accessible and working just fine for me. It's only the Change Password feature that's leading to a 'Server Not Found' error.

Greetings.

 

Well i got the same problem tonight but i use IE10 ( and W7 64 bits ) ... firstly i was thinking it was because my new paswword was too long ( +/- 35 characters) but not, in fact you need to activate some Internet protocols ( TLS 1.0, 1.1 & 1.2 , and SSL 3.0 etc ... ) . So check your internet advenced settings to see if this could solve your problem or not .

 

I've not checked the SSL 2.0 protocol in my advenced settings ... so i suppose you don't need to activate this one with your FireFox Navigator.

 

 

Sorry for my English , it's not my native tongue/language.

 

Cheers.

 

NB : i did so using a simple restricted account ( i always use a limited account without any "Administrator" rights ) and the "issue" was solved , i'm now with a new password.

 

PS : sorry i forgot to mention an important point : i came here at the Nexus tonight ( +/- 0h40 Bruxelles time ) following a message i found in my e-mail box ( it was sent a few weeks ago by the Nexus ) , and at the same time i tried to reply to this one ( here on the forum) i receive an antivirus/antimalware alert ( from MSE at +/- 0h43 Bruxelles time ) ) ... more informations about the neutralysed " invader " here :

 

http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?name=SoftwareBundler%3aWin32%2fDowadmin&threatid=223436&enterprise=0

 

So , sorry the intruder was removed before i saw this Nexus topic ... so i cannot give you more information about its name .

I was able to change my password no problems just now.

[RealmEleven]

In response to post #31701780. #31702235 is also a reply to the same post.

Soulbringer1 wrote: dsound.dll is a Microsoft dll sound file. I do not understand how a Microsoft file can be a malicious file??????????????????? Are you sure you are not just telling people something to passify them??? i do know that one of the mods that got hacked left a bug in my game. the clock is about 25 to thirty digits on screen. and my game keeps crashing when i enter buildings. also the ground keeps going grey like losing it's texture or mesh. also some clothing mods are not working. and I know my load order is correct. So what is the real story? Have you found anything Concrete? or we are supposed to believe that a Microsoft sound dll file is the culprit??

2456gamer wrote: dsound.dll is a file name and extension... the dsound portion doesnt actually tell you s#*! about what it does. it could potentially be a .dll that changes... something too a picture of a cat or some s#*!... so yes its also the name to several windows files, but that doesn't mean that its from windows.

> "dsound.dll is a Microsoft dll sound file."

Not always. For example....

> "I do not understand how a Microsoft file can be a malicious file???????????????????"

Is it still a Microsoft file if it is altered by a third party?
More to the point, does the fact that the filename is "dsound.dll" make it a Microsoft file?

> " i do know that one of the mods that got hacked left a bug in my game."

The most recent update to FO4 automatically disables all esp files when it starts. If I were to guess, there are some replacement textures which need appropriate management which were not disabled when the game disabled the esp or esm file necessary to make them work properly.

If you can find esp/esm based mods working in-game:

Have you tried to reproduce the problem with a new character made after all of your changes? IF so, can you reproduce the problem with a new character generated after disabling all your mods and restarting the game without them?

Sometimes chopping and changing mod files around too much and, particularly, if this happens at the wrong time or in the wrong order - very strange things can happen to savegame behaviour. I'm kinda waiting for this one to drop on my savegames as I'm not exactly careful, myself.

Anyway, if you've ruled out the recent update as the problem and can reproduce the fault with a new character and no installed mods, I'd suggest getting Steam to verify your game and reinstall, if necessary.

Also, I'd strongly suggest a full disk scan of everything (with an AV package) now that you are informed that someone's tried to pull a fast one on Nexus users. The same goes for everyone-else too. Give your computer a bug-hunting day so you can have some peace of mind.

Speaking strictly for myself, I really don't like having to jump at shadows just for the sake of neglecting to sweep the building after finding an unsecured access point.

[Mupp98]

Gotta say this was handled smooth and transparent, not used to that so manny thanks and keep up the good work :)

[Uridium]

dsound.dll is a Microsoft dll sound file. I do not understand how a Microsoft file can be a malicious file??????????????????? Are you sure you are not just telling people something to passify them??? i do know that one of the mods that got hacked left a bug in my game. the clock is about 25 to thirty digits on screen. and my game keeps crashing when i enter buildings. also the ground keeps going grey like losing it's texture or mesh. also some clothing mods are not working. and I know my load order is correct. So what is the real story? Have you found anything Concrete? or we are supposed to believe that a Microsoft sound dll file is the culprit??

 

You do realize that you can name a file anything you want and change the extension, right?

 

They arn't going to call it ImAVirusRunMe.exe are they.

 

 

I would also like to offer my thanks to the mods and staff at NEXUS for the informative and helpful thread post.

[JZSquared]

In response to post #31701780. #31702235, #31704800 are all replies on the same post.

Soulbringer1 wrote: dsound.dll is a Microsoft dll sound file. I do not understand how a Microsoft file can be a malicious file??????????????????? Are you sure you are not just telling people something to passify them??? i do know that one of the mods that got hacked left a bug in my game. the clock is about 25 to thirty digits on screen. and my game keeps crashing when i enter buildings. also the ground keeps going grey like losing it's texture or mesh. also some clothing mods are not working. and I know my load order is correct. So what is the real story? Have you found anything Concrete? or we are supposed to believe that a Microsoft sound dll file is the culprit??

2456gamer wrote: dsound.dll is a file name and extension... the dsound portion doesnt actually tell you s#*! about what it does. it could potentially be a .dll that changes... something too a picture of a cat or some s#*!... so yes its also the name to several windows files, but that doesn't mean that its from windows.

RealmEleven wrote: > "dsound.dll is a Microsoft dll sound file."

Not always. For example....

> "I do not understand how a Microsoft file can be a malicious file???????????????????"

Is it still a Microsoft file if it is altered by a third party?
More to the point, does the fact that the filename is "dsound.dll" make it a Microsoft file?

> " i do know that one of the mods that got hacked left a bug in my game."

The most recent update to FO4 automatically disables all esp files when it starts. If I were to guess, there are some replacement textures which need appropriate management which were not disabled when the game disabled the esp or esm file necessary to make them work properly.

If you can find esp/esm based mods working in-game:

Have you tried to reproduce the problem with a new character made after all of your changes? IF so, can you reproduce the problem with a new character generated after disabling all your mods and restarting the game without them?

Sometimes chopping and changing mod files around too much and, particularly, if this happens at the wrong time or in the wrong order - very strange things can happen to savegame behaviour. I'm kinda waiting for this one to drop on my savegames as I'm not exactly careful, myself.

Anyway, if you've ruled out the recent update as the problem and can reproduce the fault with a new character and no installed mods, I'd suggest getting Steam to verify your game and reinstall, if necessary.

Also, I'd strongly suggest a full disk scan of everything (with an AV package) now that you are informed that someone's tried to pull a fast one on Nexus users. The same goes for everyone-else too. Give your computer a bug-hunting day so you can have some peace of mind.

Speaking strictly for myself, I really don't like having to jump at shadows just for the sake of neglecting to sweep the building after finding an unsecured access point.

You can also try disabling all your mods and see if you still encounter the problem. If you do not, then you might want to turn on your mods one at a time to find the culprit. If it is a problem with a mod, I would report it to the mod author right away so it can be fixed.

[JZSquared]

In response to post #31699195.

rickman wrote: If you are reading this Robin, know this: the community is supportive BECAUSE you share this stuff outright, clearly, and with incredible haste. If you treated us like Sony did in December of 2012, knowing the problem and denying it for two weeks or more, we'd probably be a lot less kind. There is also this to consider: You told us EXACTLY what, who, when, and how, as soon as you could, and in plain, simple terminology. I (and most likely about 10,000,000 others) appreciate a straightforward answer when there is an issue. But MOST IMPORTANTLY, you are kind and humble about it. If someone was mad at the employees of Nexus after your immaculate behavior, They are clearly not the kind of individual that we should be associated with as a user base. I personally love this site for a myriad of reasons, to explain it would take a ten+ page essay to enumerate all of the reasons why. To be clear though, the biggest reason, THE STAFF TREATS THE USER BASE LIKE PEOPLE. Despite there being 10,000,000 of us, we don't feel like faceless numbers. And that is because you seem to CARE. Don't stop doing that, and this awesome community will probably never devolve.

Thank you for being the best you can be.
Richard.

^This sums up my feelings exactly. I couldn't have said it better myself.

[Guest deleted3214325]

So what if people who have had their information taken don't see this post? Why did I have to hear about this on another site instead of receiving an email saying I should change my password??

[Sentariel]

Two-factor authentification is awesome idea. It would be great if every significant changes in users profile will request confirmation code sent to users phone. But for authorization - i think it will be enough to ask confirmation code when user's IP differs too much (other region) from his usual IP.

Anyway i glad that this crisis passed.

[Lokie7]

In response to post #31699195. #31709590 is also a reply to the same post.

rickman wrote: If you are reading this Robin, know this: the community is supportive BECAUSE you share this stuff outright, clearly, and with incredible haste. If you treated us like Sony did in December of 2012, knowing the problem and denying it for two weeks or more, we'd probably be a lot less kind. There is also this to consider: You told us EXACTLY what, who, when, and how, as soon as you could, and in plain, simple terminology. I (and most likely about 10,000,000 others) appreciate a straightforward answer when there is an issue. But MOST IMPORTANTLY, you are kind and humble about it. If someone was mad at the employees of Nexus after your immaculate behavior, They are clearly not the kind of individual that we should be associated with as a user base. I personally love this site for a myriad of reasons, to explain it would take a ten+ page essay to enumerate all of the reasons why. To be clear though, the biggest reason, THE STAFF TREATS THE USER BASE LIKE PEOPLE. Despite there being 10,000,000 of us, we don't feel like faceless numbers. And that is because you seem to CARE. Don't stop doing that, and this awesome community will probably never devolve.

Thank you for being the best you can be.
Richard.

JZSquared wrote: ^This sums up my feelings exactly. I couldn't have said it better myself.

I second this, entirely. Well said.