Helper.exe Not Found. It May Have Been Deleted By The Antivirus
Vella Massart
I've used MO2 with the classic version of Skyrim for a while, so I was already familiar with it. It was working fine. But I finally decided to switch over to SSE, and I uninstalled and deleted nearly everything on the SSD I keep Skyrim on. The problem came when I downloaded MO2 again and tried to set it up to work with Nexus links. I had them working fine before. But now every time I try to associate them, whether I do it through MO2 itself or by trying to run nxmhandler.exe, nxmhandler.exe mysteriously *disappears* from the folder and if I'm trying inside MO2 I get a message that says "Sorry, failed to start the helper application." When I try to run helper.exe to see what's going on with it, all it says is "Invalid number of perameters -1." I scoured the internet before making this post trying to figure it out for myself. I made sure I was running as administrator--I even set nxmhandler.exe and helper.exe to run in administrative mode too, just in case. It made no difference. I redownloaded and repaired the VC redist files suggested on the MO2 Nexus page (even though MO2 was working fine this morning, so I was pretty sure it wasn't that.), and that didn't help. I have the entire drive set as an exception in my antivirus software. I had some MO files in my App Data folder that I deleted. I even reformatted my SSD because I thought it might be a weird Windows 10 administration/privilege issue, and that might solve it. I mean, yeah, I know perfectly well how to just download manually and install, but it's nice to be able to right click a mod and go to the Nexus page for it after it's installed, and that doesn't work with manual installation. Also, I'm not sure what else the helper.exe does, but I feel like there might be other issues at some point if I can't get it working. Help, please?
And now I'm getting a message saying that I don't even have administrative permission to put the nxmhandler.exe file in the drive at all. Everything else copies over just fine, it's just that one fine that Windows is being ridiculous about. I checked the properties for the folder, and sure enough Windows thinks it's Read Only and no matter how many times I unset it, it keeps stubbornly saying that it is when I close and reopen the properties. I tried disabling Read Only through commands, and even that didn't help--when I checked the properties it still thinks the folder is Read Only. And I ran a diagnostic tool on the drive, and it says it's fine, so I don't think the drive is just broken. So I'm guessing this is a Windows10-is-awful-and-I-hate-it issue, not actually an MO2 issue.
helper.exe not found. it may have been deleted by the antivirus
DOWNLOAD ✏ ✏ ✏ https://urllie.com/2zwfIH
Sounds like Antivirus activity to me. I would download an archive version of MO2 from the discord channel and before unzipping the archive, right click on it and select "Unblock" and then copy the files to their final destination. This should be away from any Windows UAC controlled folders and not in the games directory.
Hm, I don't have "Unblock" as an option, but I tried starting my computer in safe mode and installing then running nxmhandler.exe from there, and it actually ran then, and now that it's done it's initial thing and I've restarted normally, all seems to be working fine... I can download to MO2 with the buttons on Nexus and I am not seeing any message about helper.exe working or not one way or another. Since this absurdity didn't stop me from copying that file over, I'm hoping I won't have any other problems related to it... We'll see...
I've been facing the same problem.I restarted windows in safe mode but it didn't solve it for me. Also there is no unblock option in any exe or dll of MO2. Other than the irritating message the MO works fine.
Hello, Ive somehow found myself infected with some kind of malware I've never seen before. I was gifted a game from a friend which came from a code, the site the code went on was some foreign text filled site, and In retrospect looked less than reputable. I think I got phished and that the code wasn't to a game he purchased for me, but a directory to malware. I've only known this friend for a short period, and we haven't gotten along, so I wouldn't doubt it if he is the source of this problem. Maybe I was just stupid in downloading what seemed like a gifted game.(Edit- I used translator on a .txt file from the folder of the game, and can confirm the game is from a pirating site which was advertised in the .txt. I was unaware of this fact while downloading it, and DO NOT support piracy, I'm very angry at myself for believing a "gift code" could give me a free game and will not do so again.) The virus from this "Gift" seems to have rooted itself in my fontdrvhost.exe and can't be deleted. I've isolated what file it is, and deleted the "game" and all of its files from my computer, with only the undeletable file remaining. For the record, I did go through a installation process for the game, so I think that's how I got infected. The virus, or the file that can't be deleted no matter what I try, is a ".TTE File". Ive tried to delete it multiple times through different methods like safemode and such to no avail, I would either get "is in use in a program" or "you don't have permission". I only got "you don't have permission" once after many tries, the rest were Programs in Use. I eventually used windows process explorer to find what process was hooking onto it, and I found the fontdrvhost.exe is what it was seemingly latched onto. I've tried multiple methods since then to try and rid myself of the file, and cannot find a way to do so. I've also tried scanning it with Avira and Malwarebytes Pro and have gotten nowhere, as the programs don't seem to recognize it as a threat.. I've definitely learned my lesson on Downloading anything anyone sends me over the internet. Apparently you can't even trust your friends anymore, as I've been unable to contact him since I went through the process, and believe this to be a sort of revenge for recent mishaps in our relationship. Sorry for the off topic mentions, please help me through this foolish problem of mine.
Hi,
Thanks for posting in the Malware Removal for Windows Help forum. Being infected is not fun and can be very frustrating to resolve, but don't worry because we have a team of experts here help you!!
Note: Please be patient. When the site is busy it can take up to 48 hours before a malware removal helper can assist you. If no one has replied to your new topic after 48 hours please contact a Moderator or Administrator to let them know.
First, if you haven't done so, please run a Threat Scan with the latest version of Malwarebytes. This may resolve your malware infection issue without the need for additional support. Click "Reveal Hidden Contents" below for details:
Next, if you're still experiencing issues after running Malwarebytes, then technical logs will be required to assist you. Click "Reveal Hidden Contents" below and follow the instructions to run the Farbar Recovery Scan Tool:
Please download the Farbar Recovery Scan Tool here and save it to your desktop. Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit
Finally, attach the Malwarebytes Threat Scan, FRST.txt and Additional.txt logs to your reply and Follow this topic to get notified when an expert has replied. Click "Reveal Hidden Contents" below for details.
Note: If you are unable to attach files, please copy and past the contents of the requested files in your Reply instead.
To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.
After posting your new post, make sure you click the Follow button near the top right of this page, and select the option "An email when new content is posted Change how the notification is sent" so that you're alerted by email when someone has replied to your post.
Thank you so much for the speedy reply, My logs are below, I included a safemode scan I did just before posting this thread as a bonus, the logs you requested will be found below that.
Here is the export from a full scan I did in safemode before starting the thread, it ended moments ago after an hr or so.
Thanks once more for the fast response
The files you requested are apparently some sort of anti cheat for a game, thought I don't know which they are for.
As of right now, my main concern is the file listed below, which is currently undeletable from my computer since the assumed phishing attempt by my "friend".
It came with the install, and is the only remnant of whatever it is I installed left on my computer, and so far I'm still unable to remove it.
Virus total pings it as clear, but whatever the problem is, it's seemingly immune to deletion. I've tried clearing it through a shred program, removing it's permissions, safemode booting, etc.
I'm honestly at a loss..
Thanks for the update. Can you give full navigational address for moonstone.TTE and i`ll see if it will move with FRST. Also regarding the cheat files that VT gives all clear, do you want those files and services removing...?
The directory of whatever this crap is, is this
D:\C\Program Files (x86)\Imouto Paradise 3\Game\妹ぱらだいす３\res
The file is inside the final folder
And I did some research on the origin on those anticheat files, and apparently they are from a game called Warface that I installed a while back.
I suppose I am fine with them being there since anticheats have a bad habit of sticking around after you uninstall a game, I'm kind of used to the annoyance..
Feel free to give me directions on how to remove them so that I may do so if need be in the future, but I'd like to focus on removing the previous file mentioned on my PC.
Thanks again