nvs32.exe

Last Updated on Sunday, 23 September 2012 12:05 Sunday, 30 May 2010 14:43

A file by the name nvs32.exe is created by a computer virus program that affect the computers running on the Microsoft windows operating systems. It's analysis report is given below.

Files found - view
C:\windows\msvat80.dll
C:\windows\system32\nvs32.exe
C:\windows\system32\adobeavi.exe
C:\windows\system32\adobemp4.exe

This virus stops following services -
"Error Reporting Service",
and "Security Center"

This virus is identified as Palevo/ Ackantta. It sends mass mail from the affected computer.

There may be more files created by this virus program. You can find them out. First locate and note down the "date of creation" of nvs32.exe or any of the files mentioned above, and after that, search the hard disk for other files created on that date or onward. See image.

Necessary steps required to remove this virus program

To start the services created by the virus program.
To remove processes created by the virus program from the Task Manager.
To search and delete files created by the virus program from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise files created by the virus program inside the hidden folders will not be found.
To remove obsolete registry keys using CCleaner.

Detailed instructions and free Tools.

Preventive steps to avoid virus programs.

Reprinted with permission from Threatexpert.com

Disclaimer

Vocabulary of the technical terms used in this article