Is nvwins.vxe a virus?

mustafa November 3, 2010
Pinterest Stumbleupon Whatsapp

Recently, I experienced that my PC was slowing down. Whenever I perform a simple task like viewing contents of a folder, the PC would slow down.

My antivirus didn’t show any virus alert, but it found the following file to be suspicious: nvwins.vxe.

As of now I have stopped the program in windows task manager, startup menu, and quarantined the file. I located the file in C:\progfiles\winNT\ The file was installed recently, along with these files: fswins.fs and nonvwins.nof

What are they?

Ads by Google

  1. Jahgoveg
    November 5, 2010 at 11:33 pm

    Hope u get that thing off of ur computer.

  2. Anonymous
    November 4, 2010 at 8:50 am

    Hi
    We suggest you to remove nvwins.exe from your computer as soon as possible.
    Nvwins.exe is Trojan/Backdoor. Kill the process nvwins.exe and remove nvwins.exe from Windows startup.

    upload the file to virustotal and check
    http://www.virustotal.com/

    • mustafa
      November 4, 2010 at 10:41 am

      Hi
      thanks a lot ha14 , I checked with virustotal.com ,got the following
      Antivirus Version Last Update Result
      AhnLab-V3 2010.11.04.03 2010.11.04 Win-Trojan/Securisk
      AntiVir 7.10.13.134 2010.11.04 TR/Dropper.Gen
      Antiy-AVL 2.0.3.7 2010.11.04 -
      Authentium 5.2.0.5 2010.11.04 W32/Dropper.BBPA
      Avast 4.8.1351.0 2010.11.03 Win32:Trojan-gen
      Avast5 5.0.594.0 2010.11.03 Win32:Trojan-gen
      AVG 9.0.0.851 2010.11.03 Downloader.Agent2.KYK
      BitDefender 7.2 2010.11.04 Trojan.Generic.2830429
      CAT-QuickHeal 11.00 2010.11.04 -
      ClamAV 0.96.2.0-git 2010.11.04 -
      Comodo 6613 2010.11.04 UnclassifiedMalware
      DrWeb 5.0.2.03300 2010.11.04 Trojan.MulDrop1.33973
      Emsisoft 5.0.0.50 2010.11.04 Trojan-Dropper.Agent!IK
      eSafe 7.0.17.0 2010.11.03 Win32.TRDropper
      eTrust-Vet 36.1.7955 2010.11.04 -
      F-Prot 4.6.2.117 2010.11.03 W32/Dropper.BBPA
      F-Secure 9.0.16160.0 2010.11.04 Trojan.Generic.2830429
      Fortinet 4.2.249.0 2010.11.04 -
      GData 21 2010.11.04 Trojan.Generic.2830429
      Ikarus T3.1.1.90.0 2010.11.04 Trojan-Dropper.Agent
      Jiangmin 13.0.900 2010.11.04 TrojanDropper.Agent.alxg
      K7AntiVirus 9.67.2903 2010.11.03 Trojan
      Kaspersky 7.0.0.125 2010.11.04 Trojan-Dropper.Win32.Agent.bkhq
      McAfee 5.400.0.1158 2010.11.04 Generic MSIL.a
      McAfee-GW-Edition 2010.1C 2010.11.04 Heuristic.BehavesLike.Win32.Spyware.B
      Microsoft 1.6301 2010.11.04 Trojan:Win32/Malat
      NOD32 5590 2010.11.04 probably a variant of Win32/TrojanDropper.Agent.FBETYDY
      Norman 6.06.10 2010.11.04 W32/Suspicious_Gen2.APIYQ
      nProtect 2010-11-04.02 2010.11.04 Trojan.Generic.2830429
      Panda 10.0.2.7 2010.11.03 Trj/CI.A
      PCTools 7.0.3.5 2010.11.04 Trojan.ADH
      Prevx 3.0 2010.11.04 Medium Risk Malware
      Rising 22.72.02.04 2010.11.04 -
      Sophos 4.59.0 2010.11.04 Mal/Generic-L
      Sunbelt 7213 2010.11.04 Trojan.Win32.Generic!BT
      SUPERAntiSpyware 4.40.0.1006 2010.11.04 -
      Symantec 20101.2.0.161 2010.11.04 Trojan.ADH
      TheHacker 6.7.0.1.076 2010.11.04 Trojan/Dropper.Agent.bkhq
      TrendMicro 9.120.0.1004 2010.11.04 TROJ_GEN.R49E1JI
      TrendMicro-HouseCall 9.120.0.1004 2010.11.04 TROJ_GEN.R49E1JI
      VBA32 3.12.14.1 2010.11.03 Trojan-Dropper.Win32.Agent.bkhq
      ViRobot 2010.10.4.4074 2010.11.04 -
      VirusBuster 12.71.4.0 2010.11.03 -

      its a trojan.

  3. Josh Fox
    November 4, 2010 at 3:15 am

    Did you mean nvwins.exe?
    If so, from what I've found it is indeed malicious software, but I have not seen what damage it actually does other than hog resources and slow down the computer.

    What antivirus are you using? It never hurts to scan using a different antivirus because some won't include certain definitions and some others will include much more than is needed. You might want to look around Make Use Of to find some alternatives to what you are currently using: http://www.makeuseof.com/tags/anti-virus/

    Personally, I use a combination of SUPERAntiSpyware (portable version) available from http://www.superantispyware.com and ClamWin Antivirus from http://www.clamwin.com
    Both programs are free. I use the portable version of SAS because some malicious software will block software from running or functioning based on it's name and the portable version is named randomly as "SAS_{8 random digits}.com" to prevent this. On top of that, It's about the best I've found as far as speed and accuracy. Just be sure to check for updates every time you run the portable version.

    • mustafa
      November 4, 2010 at 11:03 am

      Yeah actually its "nvwins.vxe.exe" .I am using the "Net Protector AntiVirus+internet security" ,it has worked fine in detecting viruses & worms apart from this one case. Here is its website http://www.indiaantivirus.com
      I will definitely give the other antivirus you mentioned a try