Morrowind

Forums security issues

  • Comment
The forums are currently being focused by some Ukrainian "hackers" for malicious attacks. As a result I have taken the forums offline as I work to sure up the forum security and protect against future attacks.

The activity on the Nexus sites will hopefully go unhindered during this down-time.

There's no reason to believe this is an attack focused on the community, rather just an attack on a popular message board that can provide the hackers with access to some potentially unsecured computers. I would like to reiterate that if you are browsing the internet without an anti-virus or firewall as a bare minimum of protection then you are very, very open to being exploited by these sorts of hackers.

Keep safe.

Update at 23:21
I'm still working on tightening security on the forums and have confined the skin choices to the default forum skin for the time being. It's bright, I know. I'll go to sleep soon and will assess the security situation in the morning. If the hackers have injected some malicious code again it will be back to square one.

79 comments

  1. CommanderAE
    CommanderAE
    • member
    • 6 kudos
    Be safe. Use an internet condom.
  2. Shadowcaster
    Shadowcaster
    • account closed
    • 0 kudos
    The problem could be php itself, not claiming to be an expert but php does have more holes in it than asp if security is weak and too many ports open. There are probably ways to expose leaky code and or take advantage of it. If the problem isn't on the security end I suggest a move towards a different forum system "not necessarily asp".
  3. bigballjohn
    bigballjohn
    • member
    • 1 kudos
    hey why cant i sign in to the forum it has a number i guess its a rule it number 2000 i just cant do anything plz help
  4. User_1848331
    User_1848331
    • account closed
    • 90 kudos
    hackers always attack popular places... WHY CRUEL WORLD WHY?! lol i havent gotten anything yet, except that one time my anti virus reported the page as unsafe and closed it. Didnt have it though
  5. nahovian
    nahovian
    • member
    • 7 kudos
    So from other comments I heard that this virus attacks you using internet explorer so I got and idea to stop the virus getting control of your internet: download mozilla firefox and google chrome then uninstall internet explorer this should stop them from getting you because I heard that it uses explorer so if you delete explorer then some of it's effects are gone.
  6. zaldiir
    zaldiir
    • Moderator
    • 480 kudos
    ccSvcHst.exe seems to be a process for Symantec Corporation i.e. Norton 360... (Which I suggest you uninstall if you want your computer to be faster^^ -install AVG or some other free AV instead.)
  7. alonsomartinez
    alonsomartinez
    • member
    • 79 kudos
    what about ccsvchst.exe ? Im running a scan now
  8. zaldiir
    zaldiir
    • Moderator
    • 480 kudos
    svchost.exe is good, and it's often more than one of them. It's a host file that runs dll files, which again runs a bunch of necessary (or in some cases unecessary) services.

    What you need to look for when it comes to svchost.exe, is if there are some that have ALMSOT similar name. (i.e scvhost.exe or svhcost.exe) - if you have any of those, it's probably a virus. But if all those tasks are named exactly svchost.exe, you're good.
  9. alonsomartinez
    alonsomartinez
    • member
    • 79 kudos
    What is schvost.exe ? my computer seems to have about 8 of them open in task manager in processes
  10. zaldiir
    zaldiir
    • Moderator
    • 480 kudos
    My AV showed no warnings when entering the site either, and did not find anything when I scanned my computer.

    And I haven't noticed any strange behavior after that either, so I'm quite sure I never caught the virus.

    And just if people wonder: The forum is perfectly safe to surf through at the moment. (meaning it may be something at a later time, but right now it's safe.)