Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Niwus.exe is a virus or spyware?

11 Feb 2010   #1

windows 7 ultimate
 
 
Niwus.exe is a virus or spyware?

Hi everybody.....
When I start my laptop shown that niwus.exe want to connect internet, this program come from \program files\windows NT\, if I am allowed to connect to the Internet, the program spends approximately Internet quotas 70kb
Is this kind a new variant virus or spyware?, can't I delete them and how the the safe way to to remove them?
And here another file in windows NT, it call niwus.nof
The lister of niwus.nof:
URL,,Stealth Redirect To,http://stebuklas.dgorter2.hop.*********.net/ ,0,0
URL,,Stealth Redirect To,http://stebuklas.brammidas.hop.*********.net/ ,0,0
URL,,Stealth Redirect To,http://stebuklas.websellers.hop.*********.net/ ,0,0
URL,,Stealth Redirect To,http://stebuklas.btbet.hop.*********.net/ ,0,0
URL,,Stealth Redirect To,http://stebuklas.cragar.hop.*********.net/ ,0,0
URL,p,Stealth Redirect To,http://stebuklas.postyourhm.hop.*********.net/ ,0,0

Why this progam want to connect internet by visit to those sites?

2nd question:
My laptop installed AVG Internet Security v9.0.733
If I connect the internet my firewall say that the following program (windows) trying to connect:
wermgr.exe
rundll32.exe
service.xe
taskhost.exe
isass.exe
svchost.exe
msdt.exe
msiexec.exe
Can't I stop them by blocking to the internet connection?, and why Windows always try connect internet?
Please, I need advise.


My System SpecsSystem Spec
.

11 Feb 2010   #2

Windows 7 RTM
 
 

Upload the file (Niwus.exe) to Virus Total, and if any A/V scanners pick it up as something nasty.

I can tell you that rundll32.exe, service.exe, taskhost.exe, svchost.exe, and msiexec.exe are safe if they are running from the \Windows\System32 or \Windows\SysWOW64 directories. The others in your second question may be safe, but I can't comment on them.
My System SpecsSystem Spec
11 Feb 2010   #3

Windows 7 Ultimate - 64-bit | Windows 8 Pro - 64-bit
 
 

Quote   Quote: Originally Posted by Damarwulan View Post
Hi everybody.....
When I start my laptop shown that niwus.exe want to connect internet, this program come from \program files\windows NT\, if I am allowed to connect to the Internet, the program spends approximately Internet quotas 70kb
Is this kind a new variant virus or spyware?, can't I delete them and how the the safe way to to remove them?
And here another file in windows NT, it call niwus.nof
The lister of niwus.nof:
URL,,Stealth Redirect To,http://stebuklas.dgorter2.hop.*********.net/ ,0,0
URL,,Stealth Redirect To,http://stebuklas.brammidas.hop.*********.net/ ,0,0
URL,,Stealth Redirect To,http://stebuklas.websellers.hop.*********.net/ ,0,0
URL,,Stealth Redirect To,http://stebuklas.btbet.hop.*********.net/ ,0,0
URL,,Stealth Redirect To,http://stebuklas.cragar.hop.*********.net/ ,0,0
URL,p,Stealth Redirect To,http://stebuklas.postyourhm.hop.*********.net/ ,0,0

Why this progam want to connect internet by visit to those sites?

2nd question:
My laptop installed AVG Internet Security v9.0.733
If I connect the internet my firewall say that the following program (windows) trying to connect:
wermgr.exe
rundll32.exe
service.xe
taskhost.exe
isass.exe
svchost.exe
msdt.exe
msiexec.exe
Can't I stop them by blocking to the internet connection?, and why Windows always try connect internet?
Please, I need advise.

Hello, Welcome to SF,

According to some
forums that file is a Virus. best thing to do would be disable from Startup.

Start >
msconfig > Startup then if you find it uncheck it and reboot the System that should prevent from Starting up.

Also download Malwarebytes and run it.

Other services that your referring to are Windows services which you don't want to block.

Hope this helps,
Captain
My System SpecsSystem Spec
.


12 Feb 2010   #4

windows 7 ultimate
 
 

Ok, stoping this program using msconfig.exe
If this virus, can't I delete folder \program files\windows NT\*.* ?
Many thanks
My System SpecsSystem Spec
12 Feb 2010   #5

W7, Xp Pro
 
 

I would follow the advice given if i were you.

cheers.
My System SpecsSystem Spec
12 Feb 2010   #6

Windows 7 Pro
 
 

Hi

As advised previously...

1 - Upload a File to Virustotal
  • Highlight all the following in purple and press Ctrl+C on your keyboard to copy
  • c:\program files\windows NT\niwus.exe
  • Please click >here< to visit Virustotal
  • Click into the blank box on the Virus Total page and press Ctrl+V on your keyboard to paste
  • Click the Send File button
  • Copy and paste the Virustotal results back here please
My System SpecsSystem Spec
14 Feb 2010   #7

Windows 7 Ultimate 64 bit
 
 

theres a new antivirus out that runs as a BAT file
called
ComboFix
try it let us know if it workss
even
Malwarebytes
dont panic and run them all at the same time if its a bad virus or spyware run in safe mode and use the antivirus to scan there thn youll have no porgrams running but your OS
cya
My System SpecsSystem Spec
14 Feb 2010   #8

Win 7 Ultimate 32bit
 
 

ComboFix is not an Antivirus.

Quote:
You should not run ComboFix unless you are specifically asked to by a helper. Also, due to the power of this tool it is strongly advised that you do not attempt to act upon any of the information displayed by ComboFix without supervision from someone who has been properly trained. If you do so, it may lead to problems with the normal functionality of your computer.
I would add,, a skilled helper that gives you specific advice on how to use it and run it. Mainly the guys at the forums listed at the bottom of the link i provided.
My System SpecsSystem Spec
14 Feb 2010   #9

W7, Xp Pro
 
 

Very true Tepid. Only EVER use Combofix when asked to by a Trusted person on a Trusted Security forum!!!

Same goes for any advanced Removal/ analysis software.
My System SpecsSystem Spec
15 Feb 2010   #10

Windows 7 Pro
 
 

Quote   Quote: Originally Posted by Tepid View Post
ComboFix is not an Antivirus.

Quote:
You should not run ComboFix unless you are specifically asked to by a helper. Also, due to the power of this tool it is strongly advised that you do not attempt to act upon any of the information displayed by ComboFix without supervision from someone who has been properly trained. If you do so, it may lead to problems with the normal functionality of your computer.
I would add,, a skilled helper that gives you specific advice on how to use it and run it. Mainly the guys at the forums listed at the bottom of the link i provided.
Yep! That cannot be stressed enough.
My System SpecsSystem Spec
Reply

 Niwus.exe is a virus or spyware?




Thread Tools



Similar help and support threads for2: Niwus.exe is a virus or spyware?
Thread Forum
uTorrent spyware/virus System Security
Virus, Spyware, Malware, etc. defined System Security
virus, spyware, malware? System Security
Windows 7 built in anti-virus & spyware programs System Security
Do I have a spyware or a virus? System Security
What virus/spyware program to get for 7 64? System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 04:29 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33