Is nvwins.vxe a virus?

mustafa November 3, 2010

Recently, I experienced that my PC was slowing down. Whenever I perform a simple task like viewing contents of a folder, the PC would slow down.

My antivirus didn’t show any virus alert, but it found the following file to be suspicious: nvwins.vxe.

As of now I have stopped the program in windows task manager, startup menu, and quarantined the file. I located the file in C:\progfiles\winNT\ The file was installed recently, along with these files: fswins.fs and nonvwins.nof

What are they?

  1. Jahgoveg
    November 5, 2010 at 11:33 pm

    Hope u get that thing off of ur computer.

  2. Anonymous
    November 4, 2010 at 8:50 am

    We suggest you to remove nvwins.exe from your computer as soon as possible.
    Nvwins.exe is Trojan/Backdoor. Kill the process nvwins.exe and remove nvwins.exe from Windows startup.

    upload the file to virustotal and check

    • mustafa
      November 4, 2010 at 10:41 am

      thanks a lot ha14 , I checked with ,got the following
      Antivirus Version Last Update Result
      AhnLab-V3 2010.11.04.03 2010.11.04 Win-Trojan/Securisk
      AntiVir 2010.11.04 TR/Dropper.Gen
      Antiy-AVL 2010.11.04 -
      Authentium 2010.11.04 W32/Dropper.BBPA
      Avast 4.8.1351.0 2010.11.03 Win32:Trojan-gen
      Avast5 5.0.594.0 2010.11.03 Win32:Trojan-gen
      AVG 2010.11.03 Downloader.Agent2.KYK
      BitDefender 7.2 2010.11.04 Trojan.Generic.2830429
      CAT-QuickHeal 11.00 2010.11.04 -
      ClamAV 2010.11.04 -
      Comodo 6613 2010.11.04 UnclassifiedMalware
      DrWeb 2010.11.04 Trojan.MulDrop1.33973
      Emsisoft 2010.11.04 Trojan-Dropper.Agent!IK
      eSafe 2010.11.03 Win32.TRDropper
      eTrust-Vet 36.1.7955 2010.11.04 -
      F-Prot 2010.11.03 W32/Dropper.BBPA
      F-Secure 9.0.16160.0 2010.11.04 Trojan.Generic.2830429
      Fortinet 2010.11.04 -
      GData 21 2010.11.04 Trojan.Generic.2830429
      Ikarus T3. 2010.11.04 Trojan-Dropper.Agent
      Jiangmin 13.0.900 2010.11.04 TrojanDropper.Agent.alxg
      K7AntiVirus 9.67.2903 2010.11.03 Trojan
      Kaspersky 2010.11.04 Trojan-Dropper.Win32.Agent.bkhq
      McAfee 5.400.0.1158 2010.11.04 Generic MSIL.a
      McAfee-GW-Edition 2010.1C 2010.11.04 Heuristic.BehavesLike.Win32.Spyware.B
      Microsoft 1.6301 2010.11.04 Trojan:Win32/Malat
      NOD32 5590 2010.11.04 probably a variant of Win32/TrojanDropper.Agent.FBETYDY
      Norman 6.06.10 2010.11.04 W32/Suspicious_Gen2.APIYQ
      nProtect 2010-11-04.02 2010.11.04 Trojan.Generic.2830429
      Panda 2010.11.03 Trj/CI.A
      PCTools 2010.11.04 Trojan.ADH
      Prevx 3.0 2010.11.04 Medium Risk Malware
      Rising 2010.11.04 -
      Sophos 4.59.0 2010.11.04 Mal/Generic-L
      Sunbelt 7213 2010.11.04 Trojan.Win32.Generic!BT
      SUPERAntiSpyware 2010.11.04 -
      Symantec 20101.2.0.161 2010.11.04 Trojan.ADH
      TheHacker 2010.11.04 Trojan/Dropper.Agent.bkhq
      TrendMicro 2010.11.04 TROJ_GEN.R49E1JI
      TrendMicro-HouseCall 2010.11.04 TROJ_GEN.R49E1JI
      VBA32 2010.11.03 Trojan-Dropper.Win32.Agent.bkhq
      ViRobot 2010.10.4.4074 2010.11.04 -
      VirusBuster 2010.11.03 -

      its a trojan.

  3. Josh Fox
    November 4, 2010 at 3:15 am

    Did you mean nvwins.exe?
    If so, from what I've found it is indeed malicious software, but I have not seen what damage it actually does other than hog resources and slow down the computer.

    What antivirus are you using? It never hurts to scan using a different antivirus because some won't include certain definitions and some others will include much more than is needed. You might want to look around Make Use Of to find some alternatives to what you are currently using: [link removed]

    Personally, I use a combination of SUPERAntiSpyware (portable version) available from and ClamWin Antivirus from
    Both programs are free. I use the portable version of SAS because some malicious software will block software from running or functioning based on it's name and the portable version is named randomly as "SAS_{8 random digits}.com" to prevent this. On top of that, It's about the best I've found as far as speed and accuracy. Just be sure to check for updates every time you run the portable version.

    • mustafa
      November 4, 2010 at 11:03 am

      Yeah actually its "nvwins.vxe.exe" .I am using the "Net Protector AntiVirus+internet security" ,it has worked fine in detecting viruses & worms apart from this one case. Here is its website
      I will definitely give the other antivirus you mentioned a try