Nexus.exe flagged as ransomware (again)

[kstev99]

This morning MBAM removed nexus.exe from my system.  When I searched I found that the same thing happened to nexus.exe back in April 2017.  It's Back!!

-Log Details-
Protection Event Date: 7/28/18
Protection Event Time: 10:52 AM
Log File: 2b7892e2-927e-11e8-afd2-1c872c6044b0.json
Administrator: Yes

-Software Information-
Version: 3.5.1.2522
Components Version: 1.0.391
Update Package Version: 1.0.6105
License: Premium

-System Information-
OS: Windows 10 (Build 17134.165)
CPU: x64
File System: NTFS
User: System

-Ransomware Details-
File: 1
Malware.Ransom.Agent.Generic, C:\Program Files (x86)\Winstep\nexus.exe, No Action By User, [0], [392685],0.0.0

 

[thisisu]

Hi,

Please zip and attach C:\Program Files (x86)\Winstep\nexus.exe so we can whitelist this one too.

Thanks

[kstev99]

Strangely after re-booting it is no longer being identified as ransomware.  When the ransomware was flagged, my steam client was downloading a large update.  Not sure if that could be related or not, but it seems ok now.

I have tried attaching the file as both a ZIP and RAR file, size around 10MB, but after the uploading progress bar reaches 100% I get an error every time that reads:

There was a problem processing the uploaded file. -200

 

[thisisu]

Ok, thanks for letting me know. I'm not sure about the upload error, that could be due to some type of forum maintenance or limitation on file size.

If the detection occurs again, try attaching this log file: C:\ProgramData\Malwarebytes\MBAMService\logs\MBAMSERVICE.LOG

Sorry for the inconvenience with the detection earlier.