Watch out for ransomware (nexus.exe)

[DustinC86]

 

OMG LOL @ OP!! You reformatted!?!?!? ROOOOFL. I downloaded this same trojan from this site yesterday.

 

I'm going to tell you how to fix it, if anyone else comes across it. Hopefully they won't be like the OP and REFORMAT! LMAO! Ok...

 

Once the screen pops up blocking any further action, turn off the computer. Unplug it from the internet, or turn your router off. Boot the computer back up, and you'll notice the screen doesn't pop back up.

At this point, you should run the scan for whatever virus protection you have. I personally use Malwarebytes, it IS the best. It caught it for me in no time, and got rid of it.

 

If your anti-virus doesn't fix this trojan, try to get on a different PC and download Malwarebytes, along with the update and upload it to your PC via flashdrive, install, then scan with it. It comes with a 2 week trial, but costs just 15 dollars ONCE afterwards, and is totally worth it.

 

 

P.S.

 

To folks like the OP: Reformatting just means you suck with computers and don't know how to fix anything. Get a hold of me if you have a problem, I can save you losing your data, or paying a tech $100 or more. :smile: Cheers!

Guy your attitude sucks. If you got infected by some unknown .exe and than start to make fun out of other people with the same problem you should just be very very quiet.

LOL! I got infected with it because I'm new to modding. I thought the trojan that was labeled Nexus.exe was something I needed for what I was downloading. If you read my post, it's VERY easy to get rid of, AND i just told everyone the BEST anti virus program.

 

As we say in IT: Reformatting just means you don't know how to fix it, or you're too lazy. I've NEVER reformatted any drives. I'm more than tech savvy, and run a small business fixing computers. I'd suggest anyone that needs help, drop me a pm with your problem. If you get infected with this Nexus trojan, read my previous instructions. If you don't understand them, don't hesitate to contact me, and I'll point you in the right direction.

[breakwind]

I agree with fiewiel, just because you think you are better than others is no excuse to make fun of them, remember those same people that you gloat at may be experts in fields you are useless at and need help with

[DeathInSpace]

Ok guys.

 

Been modding the past couple days, looks like they took down the San Jose server and I haven't encountered the nexus.exe since. So I think it's completely fixed.

[C0lex]

Hey guys, i started to mod my fallout 3 game last night. I also got infected by some ransomware police virus, i had to reformat and re-install Windows etc.

 

Just to be aware it was from the manual download of Uninstaller_For_NMCs_Texture_Pack_for_FO3, and i was using one of the UK links listed.

 

I probably could of prevented the virus if i wasn't so tired, but still not the point! I hope it gets sorted. :excl:

[Ichibu]

 

what will happen if i shutdown my cpu and start it again, will the fake fbi show up? I just hope it wont! Cuz right now im using my avg to scan my whole cpu and remove that trojan

 

Depends on the virus... Some of them are easy to remove some are very hard, to the point where you will need to do a system restore, which means that everything on your PC will have to go. Its like getting a new PC, nothing is on it but the windows operating system...

 

Most of the time, viruses are made to spread, that means if you have a virus it will go to other areas of your PC and infect files. Some if not all are made to collect personal information like your passwords, emails, anything really, even your credit cards. Shutting down your PC will not help, in some cases it might never load to the desktop, in all cases the virus will always be there.

 

I'm not sure why you are so worried about your game saves, I would be worried about my personal information... Doing a system restore is the best way to remove a virus, sometimes even that might not help because some virus can stay on the hard drive even after reformatting it.

 

 

I'm not sure if you understand what "CPU" stands for, but thats not what your scaning... CPU stands for Central Processing Unit, its also not the part that gets infected by a virus. The part that gets infected by a virus is your hard drive "HDD".

 

noo. system restore is not that at all, perhaps you mean format, or windows recovery or something. system restore simply restores a backup of particular files from an earlier date, in the hopes that it replaces newly infected files with old clean ones. helps more often than i expect actually.

also i have serious doubts that all viruses are made to collect personal information. sounds like u learn to much from newspapers :P

 

oh and i got a prompt for nexusmods.exe today btw, didnt replicate the next 3 times but i did forget which server also

Edited March 31, 2013 by Ichibu

[bben46]

That ransomeware bogus police/FBI virus is a tough one to completely remove. It blocks most antivirus programs from running once it is installed - hopefully your antivirus blocks it from installing first. If you do get caught by this POS. >:(

 

My recommendation is to use a CD or USB rescue disk - several of the major anti-virus companies have them FREE. You use the rescue disk to boot from, bypassing Windows altogether - they usually boot in Linux - and no, you really don't have to know anything about linux to use them. :cool:

 

You may have to use another PC to download and create the CD as the virus blocks you from doing that as well as from running your anti-virus program.

 

Here is a source for one of them that I have used. http://majorgeeks.com/Kaspersky_Rescue_Disk_d6501.html

 

AVG, Trend, Comodo and a few others have similar free rescue disks. Google 'rescue disk' for more.

 

Download the file - then burn it to a CD as an ISO ( Win7 & 8can do this directly, WinXP may need a 3rd party program to burn an ISO.

 

Power your computer all the way down first, then Boot the computer using the cd (or usb if you went that way) - you may have to specify that it boot from the CD or USB when you first start your computer. Select the defaults Be sure to allow it to access the internet for updates to it's virus database (updated daily) and scan - it will take some time so take a break.

 

Hopefully the people that created this virus are put away for a long time.

[Ichibu]

wow... really? staff dont care that their servers are still infected? or is this not the real thread about this? :s

[Dart98Rock]

I had something like this before (MS Tool Removal), it disguised itself as a Microsoft Anti-Virus tool. I went into Safe Mode with Networking and downloaded AVG (free version). Then restarted my computer and booted into normal mode, installed AVG and it got rid of it while installing.

 

Might help with this problem.

[korun]

wow... really? staff dont care that their servers are still infected? or is this not the real thread about this? :s

?? i'm not sure if i understood well

it's a thread among 10 000 other's, curing a network isn't easy as a PC don't you think?

 

@@

[Jaradin]

Sounds like some people in here need an attitude change.

 

Dustin - Seriously? You're being a dick.

 

Ichibu - Come on man, think before you speak, of course the staff care, they pay for the damn things to let YOU and the rest of us enjoy the site. They're not getting paid to sit on their asses. This affects ALL of us. It's not a simple problem that can be resolved with your wishful thinking. So just knowledge up and be patient.