Facehook3

Does Nod32 protect from Facehook3?

I play on a system called steam and their is a mod called garrys mod in which I somtimes play but when joining some servers you can get infected with facehook3, does nod32 protect from this or will need to use a differance program?

More Facehook3 info: http://www.gmodsecurity.com/?mod=viewvirus&virusid=21
The Mod: http://gmod.garry.tv/
Steam: http://www.steampowered.com/
More known virues which can infect though joining a server: http://www.gmodsecurity.com/?mod=known

Thanks

 

I try to search at nod32 signatures search engine (http://www.nod32sse.com), the result is not found...

maybe you can submit the samples to eset.

CMIIW

 

Well, there is no facehook in NOD32 database but it might give it another name. I'm not sure. Contact support [at] nod32.com with a link to this thread or send any sample you have to sample [at] nod32.com.

 

Or try to upload the virus to virustotal.com, and see the result..
maybe it has another name in nod32

 

Looks like a nice mod. Shame it seems to be so insecure - it's got site just for exploits etc.

As others suggested, if you have any suspected samples you can submit them for analysis at VirusTotal.
If you come across any that NOD32 doesn't yet detect you can send them to ESET directly as noted here.

My suggestion - don't use this (apparently exploitable) mod. Since nothing can give you 100% protection from all threats you'll do more for your security by removing at the source as many holes as possible. In the interim have you considered this service here?

Cheers

 

I don't have a sample of this worm/keylogger just play the game. I think it's best to wait for gmod10 which doesn't suffer from this which is comming soon by the sounds of it. The site www.gmodsecurity.com is only fairly new, but the mod isn't.

Blocking the script files would stop this but when a server needs them to do somthing new for the mod it won't work for you.

 

As you were already advised , please contact the ESET TechSupport and ask them about this . Provide them with acurate information link to this thread and other links you may find useful .

They will be able to tell you if it is detected and if it isn't they will soon add it.

The emails are :
support[at]eset.us
support[at]eset.sk