Facehook3

Discussion in 'NOD32 version 2 Forum' started by Anim8, Aug 15, 2006.

Thread Status:
Not open for further replies.
  1. Anim8

    Anim8 Registered Member

    Joined:
    Jun 7, 2006
    Posts:
    19
    Does Nod32 protect from Facehook3?

    I play on a system called steam and their is a mod called garrys mod in which I somtimes play but when joining some servers you can get infected with facehook3, does nod32 protect from this or will need to use a differance program?

    More Facehook3 info: http://www.gmodsecurity.com/?mod=viewvirus&virusid=21
    The Mod: http://gmod.garry.tv/
    Steam: http://www.steampowered.com/
    More known virues which can infect though joining a server: http://www.gmodsecurity.com/?mod=known

    Thanks
     
  2. gatorzone

    gatorzone Registered Member

    Joined:
    Jun 1, 2006
    Posts:
    8
    Location:
    djakarta sin sity
    I try to search at nod32 signatures search engine (http://www.nod32sse.com), the result is not found...

    maybe you can submit the samples to eset.

    CMIIW
     
  3. pykko

    pykko Registered Member

    Joined:
    Apr 27, 2005
    Posts:
    2,236
    Location:
    Romania...and walking to heaven
    Well, there is no facehook in NOD32 database but it might give it another name. I'm not sure. Contact support [at] nod32.com with a link to this thread or send any sample you have to sample [at] nod32.com. :)
     
  4. gatorzone

    gatorzone Registered Member

    Joined:
    Jun 1, 2006
    Posts:
    8
    Location:
    djakarta sin sity
    Or try to upload the virus to virustotal.com, and see the result..
    maybe it has another name in nod32 ;)
     
  5. NOD32 user

    NOD32 user Registered Member

    Joined:
    Jan 23, 2005
    Posts:
    1,766
    Location:
    Australia
    Looks like a nice mod. Shame it seems to be so insecure - it's got site just for exploits etc.
    As others suggested, if you have any suspected samples you can submit them for analysis at VirusTotal.
    If you come across any that NOD32 doesn't yet detect you can send them to ESET directly as noted here.

    My suggestion - don't use this (apparently exploitable) mod. Since nothing can give you 100% protection from all threats you'll do more for your security by removing at the source as many holes as possible. In the interim have you considered this service here?

    Cheers :)
     
  6. Anim8

    Anim8 Registered Member

    Joined:
    Jun 7, 2006
    Posts:
    19
    I don't have a sample of this worm/keylogger just play the game. I think it's best to wait for gmod10 which doesn't suffer from this which is comming soon by the sounds of it. The site www.gmodsecurity.com is only fairly new, but the mod isn't.

    Blocking the script files would stop this but when a server needs them to do somthing new for the mod it won't work for you.
     
  7. ASpace

    ASpace Guest

    As you were already advised , please contact the ESET TechSupport and ask them about this . Provide them with acurate information link to this thread and other links you may find useful .

    They will be able to tell you if it is detected and if it isn't they will soon add it.

    The emails are :
    support[at]eset.us
    support[at]eset.sk

    :thumb:
     
Thread Status:
Not open for further replies.