That file might have something to do with my IK Multimedia installations, someone else got the same file too after installing IK Multimedia Amplitude

 

anyone know how to install on mac?

 

We still don't know if this release is actually safe right? Would you suggest to wait for some another release from familiar teams?

 

Last edited: Mar 26, 2021

Use WFC from Binisoft (Malwarebytes)! Much more better as host editing..

 

I hope from a R2R statement next days about this release!

 

I'm not really into Synths, so I'm not gonna try this one..

But perhaps you could use a program like Wireshark to know more about the type of Data/Packets that are being sent/received to those servers.
Who knows what you could find..

I've got no idea, but the Amazon servers could be a number of things like:
could be part of the "crack" to validate/emulate original ReFx servers behavior,
could be used to gather usage Data,
could be used to infect your computer and rape you and your beloved ones in the process (figuratively speaking..)

So yeah, since this is not R2R, but Chinese warez,
I would give Wireshark a try and see what it does.. or at least have a proper Firewall going on!


Btw, I bet Manuel must be rolling in his future grave.. lol
But who knows, this could prompt them to release Nexus 4 sooner than expected,
very easy to live off a golden egg's hen, hard to withdraw from it..

 

Last edited: Mar 26, 2021

Mac Installation:

1. Copy plugin files to your plugins folders: (Components, VST & VST3 folders)

2. You can put the (Nexus Content) folder where ever you want. Just remember to modify the path in step 3.

3. Motify settings.json in reFX > Nexus folder using a text editor.

Change from:
"library_folder": “/Applications/NEXUS library/”,
To: "library_folder": “/WHEREVER/YOU PLACED/THE NEXUS CONTENT FOLDER/“

It should look something like this, for an example:
“/Library/Audio/Plug-Ins/Nexus Content/“

4. Put the reFX folder TO: /Users/Shared/

5. Open your DAW, Scan for new VST’s

A pop-up screen will show up telling you that NEXUS3 is registered. Click OK

 

There seems to be TLS and TCP traffic when using Wireshark.

If they were emulating the original reFX servers behavior (which they aren't, and Nexus still connects to the original reFX servers), they'd do it offline. There's no point on emulating servers here... using more servers.

I don't know, maybe it's not malicious at all. But seeing that, and the obfuscation... there are reasons to think it's sketchy.

 

..

 

Is the above working if I place the library on a different drive other than the system?For the moment I can't make it to scan the lib in my VSTi hard drive

 

I did manage to decrypt TLS packets in wireshark once, it was a bit painful but it works

 

Are talking about the release of nexus 3 for Mac on the sister site?...Seems to be a bit controversial...Some people saying that there is a trojan in it...can anyone confirm please if it is safe or not before I try it - cheers

 

It makes complete sense, this is the kind of thing skilled hackers do. They make temporary cracks of software that is in high demand and use it as a tool to do things such as encrypting your whole computer and holding you at ransom until you pay x-amount of cryptocurrency to them, or just harvest all your data from you in the background.

 

Last edited: Mar 26, 2021

Not sure about Mac version. We're discussing Windows version.

Even worse when you see that it was posted by some anonymous uploader (on a chinese forum). No release info. Just a Baidu link and installing instructions.

 

Virustotal now has 20 detections... VirusTotal

Malwarebytes Anti-Malware and Adwcleaner still not detecting anything

 

Not really and indicator of anything, but the list keeps growing...

 

Yeah it doesn't mean anything yet, especially when considering that most of the "detections" are related to the file being possibly unwanted and having low reputation score. But yeah, there were 5 detections yesterday

Also I wouldn't personally install any of those anti-malware programs that detected this .dll, maybe ESET being an exception (but it is known to give more false positives than any other AV program).

 

Last edited: Mar 26, 2021

Here we have a plugin that (apparently) most people are desperate to install, maybe because this has reached cult status. Considering that this comes from an unknown (maybe even dubious) source, this doesn't stop people from blindly installing it. Installing software that people don't own comes with no warranty at all, this is the invisible terms and conditions check box that people blindly accept.

This could be a false positive, in which case it is a win for everyone.
This could be farming your data and sending it off to some nefarious pacman.
You pay your money, you take your chances.

 

Like this?

 

They are calling us white foreign devils in the chinese forum lmao, and according to them media has brainwashed us so that chinese people can't be trusted.