Readers like you help support MUO. When you make a purchase using links on our site, we may earn an affiliate commission. Read More.

Recently, I experienced that my PC was slowing down. Whenever I perform a simple task like viewing contents of a folder, the PC would slow down.

My antivirus didn't show any virus alert, but it found the following file to be suspicious: nvwins.vxe.

As of now I have stopped the program in windows task manager, startup menu, and quarantined the file. I located the file in C:\progfiles\winNT\ The file was installed recently, along with these files: fswins.fs and nonvwins.nof

MAKEUSEOF VIDEO OF THE DAY
SCROLL TO CONTINUE WITH CONTENT

What are they?

Jahgoveg
2010-11-05 23:33:00
Hope u get that thing off of ur computer.
2010-11-04 08:50:00
HiWe suggest you to remove nvwins.exe from your computer as soon as possible.Nvwins.exe is Trojan/Backdoor. Kill the process nvwins.exe and remove nvwins.exe from Windows startup. upload the file to virustotal and checkhttp://www.virustotal.com/
mustafa
2010-11-04 10:41:00
Hithanks a lot ha14 , I checked with virustotal.com ,got the following Antivirus Version Last Update Result AhnLab-V3 2010.11.04.03 2010.11.04 Win-Trojan/Securisk AntiVir 7.10.13.134 2010.11.04 TR/Dropper.Gen Antiy-AVL 2.0.3.7 2010.11.04 - Authentium 5.2.0.5 2010.11.04 W32/Dropper.BBPA Avast 4.8.1351.0 2010.11.03 Win32:Trojan-gen Avast5 5.0.594.0 2010.11.03 Win32:Trojan-gen AVG 9.0.0.851 2010.11.03 Downloader.Agent2.KYK BitDefender 7.2 2010.11.04 Trojan.Generic.2830429 CAT-QuickHeal 11.00 2010.11.04 - ClamAV 0.96.2.0-git 2010.11.04 - Comodo 6613 2010.11.04 UnclassifiedMalware DrWeb 5.0.2.03300 2010.11.04 Trojan.MulDrop1.33973 Emsisoft 5.0.0.50 2010.11.04 Trojan-Dropper.Agent!IK eSafe 7.0.17.0 2010.11.03 Win32.TRDropper eTrust-Vet 36.1.7955 2010.11.04 - F-Prot 4.6.2.117 2010.11.03 W32/Dropper.BBPA F-Secure 9.0.16160.0 2010.11.04 Trojan.Generic.2830429 Fortinet 4.2.249.0 2010.11.04 - GData 21 2010.11.04 Trojan.Generic.2830429 Ikarus T3.1.1.90.0 2010.11.04 Trojan-Dropper.Agent Jiangmin 13.0.900 2010.11.04 TrojanDropper.Agent.alxg K7AntiVirus 9.67.2903 2010.11.03 Trojan Kaspersky 7.0.0.125 2010.11.04 Trojan-Dropper.Win32.Agent.bkhq McAfee 5.400.0.1158 2010.11.04 Generic MSIL.a McAfee-GW-Edition 2010.1C 2010.11.04 Heuristic.BehavesLike.Win32.Spyware.B Microsoft 1.6301 2010.11.04 Trojan:Win32/Malat NOD32 5590 2010.11.04 probably a variant of Win32/TrojanDropper.Agent.FBETYDY Norman 6.06.10 2010.11.04 W32/Suspicious_Gen2.APIYQ nProtect 2010-11-04.02 2010.11.04 Trojan.Generic.2830429 Panda 10.0.2.7 2010.11.03 Trj/CI.A PCTools 7.0.3.5 2010.11.04 Trojan.ADH Prevx 3.0 2010.11.04 Medium Risk Malware Rising 22.72.02.04 2010.11.04 - Sophos 4.59.0 2010.11.04 Mal/Generic-L Sunbelt 7213 2010.11.04 Trojan.Win32.Generic!BT SUPERAntiSpyware 4.40.0.1006 2010.11.04 - Symantec 20101.2.0.161 2010.11.04 Trojan.ADH TheHacker 6.7.0.1.076 2010.11.04 Trojan/Dropper.Agent.bkhq TrendMicro 9.120.0.1004 2010.11.04 TROJ_GEN.R49E1JI TrendMicro-HouseCall 9.120.0.1004 2010.11.04 TROJ_GEN.R49E1JI VBA32 3.12.14.1 2010.11.03 Trojan-Dropper.Win32.Agent.bkhq ViRobot 2010.10.4.4074 2010.11.04 - VirusBuster 12.71.4.0 2010.11.03 - its a trojan.
Josh Fox
2010-11-04 03:15:00
Did you mean nvwins.exe?If so, from what I've found it is indeed malicious software, but I have not seen what damage it actually does other than hog resources and slow down the computer.What antivirus are you using? It never hurts to scan using a different antivirus because some won't include certain definitions and some others will include much more than is needed. You might want to look around Make Use Of to find some alternatives to what you are currently using: [link removed]Personally, I use a combination of SUPERAntiSpyware (portable version) available from http://www.superantispyware.com and ClamWin Antivirus from http://www.clamwin.comBoth programs are free. I use the portable version of SAS because some malicious software will block software from running or functioning based on it's name and the portable version is named randomly as "SAS_{8 random digits}.com" to prevent this. On top of that, It's about the best I've found as far as speed and accuracy. Just be sure to check for updates every time you run the portable version.
mustafa
2010-11-04 11:03:00
Yeah actually its "nvwins.vxe.exe" .I am using the "Net Protector AntiVirus+internet security" ,it has worked fine in detecting viruses & worms apart from this one case. Here is its website http://www.indiaantivirus.comI will definitely give the other antivirus you mentioned a try