TVs. Consoles. Projectors and accessories. Technologies. Digital TV

Nssm exe application error. Delete the nssm exe process. What is a clean system

Judging by the forums, there are truly a huge number of rumors, opinions and assumptions circulating on the Internet regarding the occurrence of this error. Suffice it to say that Yandex finds two million pages for the query “Memory cannot be read”. An impressive figure, you will agree.

The reason for the error is quite simple: the virtual memory manager detects an attempt to access memory pages that are not allowed for this process to access. This error, of course, is not fatal, so the standard error message “Memory cannot exist...” is displayed. To put it simply, a certain space is allocated in memory for each program. And if the application starts to go beyond this space, i.e. tries to read something from there (read) or write something there (written), then the following error will appear. That is why Microsoft does not give any recommendations for eliminating this error, because it is not its fault that some user programs cannot adequately manage the memory allocated to them.

The most common opinions about the reasons for this error:

  1. Bad memory- on many forums, the first thing they advise is to check the random access memory (RAM), but in fact, bad memory behaves somewhat differently. As a rule, this either instantly reboots the computer, or simply freezes/crashes in various applications.
  2. Virus attack- viral activity usually manifests itself somewhat differently. Often this looks like a refusal to launch infected applications, the absence of the Desktop (i.e. Explorer\explorer.exe does not start) or 100% processor load. But, of course, this does not mean that you can do without an antivirus. An error has appeared - check your computer for viruses. Especially if there was no such error before.
  3. Lack of Windows updates- in fact, the number of installed updates does not affect this error in any way. In other words, you can install standard WinXP+SP2 and sit quietly at your computer, or you can download all the updates that are available, but still get this error, although on the Internet you can sometimes find advice on how to remove a particular update. Additionally, many users install complex update packages (better known as Service Packs) that contain several hundred updates, making it impossible to determine the culprit.

Possible causes of the error "Memory cannot be read\written"

Possible reason #1 - DEP service

Reference :"Data Execution Prevention (DEP) is used to prevent viruses and other security threats from entering your computer that execute malicious code from areas of memory that should only be used by the Windows operating system and other programs. This type of security threat causes damage by taking up everything in turn." areas of memory used by a program.The virus then spreads and damages other programs, files, and even email contacts.

Unlike a firewall or antivirus program, DEP does not prevent potentially dangerous programs from being installed on your computer. Instead, it monitors programs to ensure they use system memory in a safe manner. To achieve this, DEP works alone or in conjunction with compatible microprocessors and marks certain areas as "not executable". If a program tries to run code (any code) from a protected area, DEP closes the program and displays a notification."

A comment : If a program triggers this feature, Microsoft recommends that you select OptOut mode and add that program to the exceptions list. However, often a program consists not of one executable module, but of many dynamic libraries, and it is not always possible to accurately determine which one triggers DEP. If you really need the program, but you can’t get it to work using the method described above, it’s easier to disable DEP entirely by editing boot.ini. Although, if the likelihood of this error occurring is small, and if you do not encounter it, it is better to leave DEP enabled - this way the system will be more protected from the possibility of executing a virus.

There are four options for configuring the DEP function

OptIn- (set by default). In this configuration, only essential system programs and services are affected by the DEP function.

OptOut- DEP is enabled for all processes and applications, except those manually added by the user to the exception list.

Always On- In this mode, DEP is always enabled for the system as a whole, all processes and applications, regardless of the settings of the user or software manufacturer.

AlwaysOff- DEP is completely disabled.

The first two settings can be switched using the control panel: " System" -> "Additionally" -> "Performance" -> button " Options" -> bookmark " Data Execution Prevention". (For additional description, see the link from there.)

To completely enable or disable DEP, you must manually edit the hidden file located in the root of the boot partition of the disk boot.ini by adding section to the end of the line

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect

key /NoExecute with one of the options:

NoExecute = OptIn
NoExecute = OptOut
NoExecute = AlwaysOn
NoExecute = AlwaysOff

The most common advice you see is to disable the DEP (Data execution prevention) service. To do this, you need to open the file C:\boot.ini and replace the line in it

/noexecute=optin to /noexecute=AlwaysOff.

You must restart your computer to apply the changes.

Reference: The boot.ini file is one of the most important system files, so it is hidden by default. Accordingly, to display it you will need to allow the display of hidden and system files. You can also open it for editing if, in My Computer Properties, select Advanced at the top and click the “Settings” button (lowest). In the window that opens, click the "Edit" button to open boot.ini for editing.

Possible reason No. 2 - software conflict

Simply put, one of the programs prevents another program from functioning correctly and this error appears. It is clear that there is no clear list of conflicting software. However, Norton Internet Security 2007, Kaspersky Internet Security 2009, Outpost Firewall, K-Lite Mega Codec Pack and Dr.Web antivirus, as well as drivers from Hewlett-Packard printers, appeared on the Internet. This also includes a “cluttered” system. If Windows has been idle for six months or more, then this error may well appear, especially if the OS is actively used, i.e. New programs, games and drivers are often installed.

Helpful information: If you have a Beholder TV tuner, then do not install drivers for it via install.exe. Specify the path to the driver inf file manually through the Hardware Installation Wizard (Device Manager - right-click on the device - Update driver...).

Possible error No. 3 - the operation of the Dr. debugger. Watson

Windows XP has a debugger called Dr. Watson. To disable it, open the registry (Start-Run: regedit) and expand the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion branch. One of the very first sections in it will be AeDebug. Right-click on it and select Delete. But keep in mind that this action does not claim to solve the memory reading error; it can only remove the error message itself.

Possible error No. 4 - Russian characters in the file path

Even in our times, it is necessary to try to install games/programs along normal paths, trying to avoid Russian letters in the name, as well as too long paths. For example, it is much better to install the game in the D:\Games\Earth 2150 folder than in C:\Program Files\Earth 2150 - War of the Worlds. And when installing programs, extra folders with the names of the developer or the program version may be added to the path. Use the shortest and most understandable paths possible (for example E:\Programs\Fraps).

Possible error No. 5 - problem accessing the system library

This error may be due to a problem accessing the system library ole32.dll, which could be corrupted or unregistered (for example, when installing/uninstalling other programs). To fix this possible cause, do Start-Run:

regsvr32 %SystemRoot%\system32\ole32.dll

Possible reason #6 - trying to submit a bug report

A very original piece of advice, which said that a similar error (Memory cannot be read\written) can be avoided by disabling the sending of any error reports to Microsoft in WinXP. In My Computer Properties, select Advanced at the top and click the "Error Report" button. A small window will open. It needs to be brought to this form:

Possible reason No. 7 - problems with multi-core processors

If you have a multi-core processor (that is, 2 cores or more), then try downloading a small program CPU-Control and set it to "CPU 1" mode. The number of cores can be viewed in the Device Manager (Processors branch; 1 processor = 1 core, 2 processors = 2 cores, etc.). If CPU-Control did not help you, then set it to Auto, close it and delete it.

Note: On systems with a single-core processor, this program is useless.

Possible reason No. 8 - problems with the paging file

It is recommended to monitor how the system accesses this file. To do this, in My Computer Properties, select Advanced at the top and click the “Settings” button (topmost). A new window will open. In it you also need to select Advanced at the top and click the “Change” button at the bottom. Select the disk on which you want to place the paging file (preferably, it should be less fragmented). Place a dot next to the item Special size and enter the numbers in the fields:

It is advisable to set the minimum and maximum volumes to be the same. Before exiting, you must click the "Set" button. Reducing/disabling the paging file will require a reboot. When increasing/enabling the paging file, a reboot is usually not necessary. Below are the recommended values ​​for the size of the paging file depending on the amount of RAM on the computer itself:

  • 512MB RAM = 1536MB swap file
  • 1024MB RAM = 1024MB swap file
  • 1536MB RAM = 512MB swap file
  • 2048MB RAM = 256MB for swap file or 0MB altogether

Possible reason No. 9 (!!!) - incompatibility of RAM

It is unlikely, but a similar error can be caused if two RAM modules from different manufacturers are used in pairs. Accordingly, it’s easy to check: just remove one of the modules.

Possible reason No. 10 (!!!) - bad power supply

A memory reading error can also be caused by a low-quality/old power supply. Of course, this is very unlikely, but the most ideal option would be to connect the computer to a known normal power supply. If you don’t have the opportunity to borrow a power supply from someone, then simply turn off various small things, i.e. CD\DVD drive, expansion cards installed in PCI slots, printer, etc.

Possible error No. 11 (!!!) - incorrectly set memory timings

One of the most “severe” cases*. In short, all RAM is built on timings (delays) for reading/writing data. This is what standard RAM looks like with its delays:

Please note that the delays for each frequency are different. Accordingly, if the timings are set incorrectly (although the motherboard should do this automatically), then the computer may be, to put it mildly, unstable. Usually this is expressed by a freeze/reboot, but I have come across suggestions that this can also cause the error “Memory cannot be read\written”. Accordingly, it is recommended to set the timings manually or even increase them slightly. Unfortunately, only a very small number of users (about 1 in 1000) are able to independently set the correct timings for their RAM in the BIOS. This can also include an incorrectly set memory frequency or voltage, although an interesting message was found on one of the forums: The person was helped by a decrease in memory frequency.

I myself am very skeptical about this type of memory reading error.

Possible error No. 12 (!!!) - memory overheating

Of course, RAM modules heat up during operation, but additional cooling is required only for specific memory sticks, for example, those that are overclocked by the manufacturer itself and therefore require good cooling. But regular memory (which 95% of users have) works fine even in poorly ventilated cases. Although in this case all this can be checked very easily - just open the case.

We are trying to identify the culprit of the error

In the first place, of course, is the conflict of programs/drivers. Unfortunately, even with a complete list of installed applications, it is impossible to say which one is causing the error. Accordingly, the only option is to methodically test applications. To do this, you will need an application\game that 100% causes the error (this is necessary to save time), as well as a clean system.

What is a clean system

A clean system is called Windows XP + Service Pack 2 of the Russian or English version, which was installed on a pre-formatted partition on the hard drive. This means that numerous homemade WinXP builds that are scattered on the Internet are not suitable for testing.

Testing methodology

The technique is very simple. So, you have installed a clean system. We created a user (by the way, preferably with an English name) and logged in. Install the problematic application and look at its behavior. If everything is in order, then you start installing the applications that you are used to usually using. After installing each of them, test the problematic software. If everything is in order, we continue to install the programs. I would like to draw your attention to the fact that there should not be anything other than Windows itself and the application being tested. No drivers or other software.

If reinstalling the system is unacceptable to you, and some applications refuse to work due to a memory reading error, then you can try booting into Safe Mode and try to launch them there. If in this situation there is no error, it means that the culprit of the error is loaded during normal system boot.

Reference: When loading in Safe Mode, video drivers are not loaded, so you won’t be able to test games in it. If you need to test a program that uses the network, then select not the usual Safe mode, but one with network support.

Most computers need the following drivers after reinstalling Windows:

-Video driver
-Audio driver
-Network driver
  • Practice has shown that for GeForce 7xxx series video cards in WinXP, ForceWare 93.71 drivers are the most optimal. I know that this is an old version, but I didn’t have a single problem with it, which is why I recommend it to all other people. This advice will be useful to you if the error “Memory cannot be read” crashes in some game (Half-Life 2 is especially famous for this), and the game does not start, because... "does not see" the video card without drivers.
  • Sound drivers (especially if it is an integrated sound chip like RealTek or SoundMAX) can cause a wide variety of errors, so for the purity of the experiment, try to refrain from installing them for as long as possible
  • Drivers for the network controller have rarely been seen to have any problems, so you can install them with peace of mind. Useful if you are testing a program that uses the network (for example, a browser)
  1. It is advisable to use memory from the same manufacturer. Of course, there are many computers that use memory from different companies, but it’s still better not to take risks.
  2. It is best to install paired modules of the same volume, i.e. It is not advisable to install a RAM type 2x256MB + 2x512MB. Of course, with a high degree of probability this combination will work normally, but it is still advisable to install the same modules (for example, 4x512MB or 2x1024MB).

Note : Some of the information was taken from the forums of various Warez portals, but the rules of the Gambling Forum prohibit leaving links to such portals, so the list of sources is not complete. I apologize to those people whose messages were used as a source of information without citing it.

And once again: if you have a build (ZverCD, etc.) and this problem starts, then it is advisable to install a clean system. Because if you have an assembly, then no one will even talk to you

The conditions for distributing the text are free; the author of this material is not responsible for your actions.

The file nssm.exe belongs to the application Non-Sucking Service Manager that is a service helper program similar to srvany and cygrunsrv. This program has a graphical service installer and remover, and can be configured to take different actions based on the exit code of the managed application. To install a service using nssm, type the command nssm install and the prompt will appear for entering the path to the application that is desired to run as a service, and the command-line options to send it. Clicking Install Service completes the installation of the service. Removing a service follows a similar procedure, which is accessed by typing nssm remove . This program is able to delete any service, even those that are not managed by nssm so the user should be careful when deleting a service. The process nssm registers itself as an Event Log message source, which means that running multiple instances or different versions of nssm from different locations may cause confusion.

How can I stop nssm.exe and should I?

Most non-system processes that are running can be stopped because they are not involved in running your operating system. nssm.exe. is used by Non-Sucking Service Manager If you shut down nssm.exe, it will likely start again at a later time either after you restart your computer or after an application start. To stop nssm.exe, permanently you need to uninstall the application that runs this process which in this case is Non-Sucking Service Manager, from your system.

After uninstalling applications it is a good idea to scan you Windows registry for any left over traces of applications. Registry Reviver by ReviverSoft is a great tool for doing this.

Is this a virus or other security concern?

ReviverSoft Security Verdict

Please review nssm.exe and send me a notification once it has
been reviewed.

What is a process and how do they affect my computer?

A process usually a part of an installed application such as Non-Sucking Service Manager, or your operating system that is responsible for running in functions of that application. Some application require that they have processes running all the time so they can do things such as check for updates or notify you when you get an instant message. Some poorly written applications have many processes that run that may not be required and take up valuable processing power within your computer.

Is nssm.exe known to be bad for my computer's performance?

We have not received any complaint about this process having higher than normal impact on PC performance. If you have had bad experiences with it please let us know in a comment below and we will investigate it further.


Hello, dear users! In today’s article, I suggest you consider the most likely causes associated with an error in reading the memory of personal computers. In general, by and large, it should be noted that a memory reading error can be caused by various errors and therefore, to eliminate the occurrence of such an error, as a rule, it is necessary to perform a number of specific actions that will eliminate the error that has arisen associated with reading memory.

Due to their professional responsibilities, users often ask me the question: Memory cannot bereadhow to fix? It is in this article that I would like to outline for you a number of the basic steps that helped me eliminate the cause of the memory reading error. However, I will tell you that in some cases it was not always possible to successfully resolve the error associated with reading memory using the steps outlined in this article, but in most cases, of course, this problem can be eliminated without resorting to reinstalling Windows.

So, the appearance of an error of this kind: “Memory cannot be read” is due to the fact that a certain program or application is trying to access some pages of memory (in other words, trying to read something or write something), access to which was initially denied this program. That is, this is a software error. The operating system, in turn, detects this whole thing and accordingly blocks this program, thereby generating a memory read error. Below is a screenshot of this same error.

In principle, we can say that the appearance of such an error does not pose a direct threat to the entire operating system, but this does not tell us that errors of this type can simply be safely ignored and further work on the computer can continue. The system only notifies the user that a particular program does not quite correctly manage the memory provided to it and goes beyond the limited area. In many cases, such an error occurs due to programs that are not licensed or that made errors in the code during the process of writing the program, which in turn cause crashes, freezes, and errors in the computer.

Memory cannot be read, how to fix it? Ways to fix the error!

So, let's say an error keeps appearing on your computer: and what exactly is the reason for its occurrence. Let's find out what methods can successfully resolve this error in most cases. I will give only those methods (methods) thanks to which I managed to completely get rid of this annoying error.

First, I advise you to clean your computer of all kinds of rubbish and impurities; you will learn how to do this from the article:

Data Prevention Service (DEP ) . First, a few words about what kind of service this is. Data Prevention Service is a set of software and hardware technologies that monitor how programs use memory. In simple words, it controls access to the memory of any program. If, for example, you are working in a specific program, and while working, a window with the text “The program has stopped working” suddenly appears, then you are offered two options for solving this problem. In Windows 7, the error appears as the following window.

As a result, of course, the program will close and any unsaved work will be lost. If you've ever encountered a similar error, I think you understand what I'm talking about.

And the reason for everything is precisely the incorrect operation of the program you were working with; a little earlier I already spoke about the reasons for the incorrect operation of such programs. So the question arises: is it possible to somehow eliminate such a problem? It is disabling the data prevention service that allows you to prevent the error from occurring. However, based on my practical skills, I must tell you that disabling DEP does not always allow you to achieve the desired result. For a more complete understanding of the DEP service, I suggest you consider the basic operations that this service allows you to perform.

So, first we need to know how to get to the DEP service itself and where is it located? It is important to know that all actions you perform must be performed as an administrator.

In order to open the DEP service window, you will need to perform the following steps:

For Windows 7:

Start => Control Panel => System and Security => System => Advanced system settings.

Then in the window that opens, go to the “Advanced” tab and select the “Performance” section, in which you will need to click on “Options”.

In the window that opens, we see that the DEP service can be set for an individual program, or for all programs, applications, or you can simply disable this service altogether.

It should be noted that by default the service is enabled for main programs; for example, we should disable DEP only for a specific program. To do this, set the switch as shown in the figure below and click the “Add” button.

In my example, I specified the executable file of the Double GIS 2.0 program and clicked “Apply” and “OK”. You will need to restart your computer for the changes to take effect. If you need to enable DEP for a program in the future, simply uncheck the box next to the program that you want to include under the DEP service.

Finally, click “Apply” and restart your computer.

Now it's time to consider how you can disable DEP. To do this, we will use the command line. Click "Start" and enter "cmd" in the search bar.

Then right-click on “cmd” and select “Run as administrator” from the menu that appears.

Now in the window that opens, in the appropriate line you will need to enter the following command bcdedit.exe /set (current) nx AlwaysOff

Then press “Enter” and restart your computer. Thus, after a reboot, the DEP command will be inactive, that is, disabled. In order for the DEP service to become active again, you will need to enable it. To do this, you will need to open the command line again and enter the following command:

bcdedit.exe /set (current) nx OptIn

Then you will need to press “Enter” and restart the computer.

How to disable DEP service in Windows XP?

For Windows XP, we will disable the DEP service in the following way:

First, go to the system properties and in the “Advanced” tab, go to the “Options” section, as shown in the figure below.

In the next window you should click “Edit”

If the above operations did not help solve the problem with the error: Memory cannot bereadhow to fix and get rid of it in other ways? Let's look at some other methods.

— System libraryole. dll

The opinion of many experienced users is that the installation or removal of certain programs may not occur entirely correctly, as a result of which all this is displayed when accessing the system library. To correct errors in the system library itself, you will need to specify a special command.

To do this, in the “Run” command line you will need to enter the command regsvr32 %SystemRoot%\system32\ole32.dll, press “Enter” and restart the computer.

— Software conflict

It is possible that one program interferes with the normal operation of another program, resulting in the “Memory cannot be read” error. Theoretically, it is believed that the more different programs are installed on your computer, the greater the likelihood that the “Memory cannot be read” error will appear.

It should also be noted that the operating system is cluttered; if, let’s say, various programs and applications are regularly installed and uninstalled on your computer, then in this case it would be more advisable to clean the operating system of undeleted files.

There are often situations when, when installing games or programs, users incorrectly indicate the path for installing programs; therefore, in the future, this may cause the error “Memory cannot be read” or an incorrectly installed program will interfere with the normal functioning of another program.

In one of my previous articles, I already said that there are utilities that are designed to clean the system registry, startup, and the entire computer as a whole from unnecessary files; one of such programs is the CCleaner program. You can read more about how to use this program .

- Error reporting

Any errors that occur in the operating system are usually generated in a so-called report. You can try to disable error reporting in Windows 7, or if you have a version of Windows XP installed, then disabling error reporting will not be a problem in it either.

You can disable error reporting in Windows 7 by following the following thread:

Start => Control Panel => System and Security => Action Center. After this, you should select the “Options” section.

If this section is not displayed, click on “Maintenance” to open additional error reporting options. Ultimately, the window shown in the figure below will open:

Here you just need to select “Do not check for new solutions”, click “OK” and restart the computer.

For Windows XP:

Start => Control Panel => System => Advanced => Error Report. Next, you will need to check the “Disable error reporting” box and do not forget to uncheck the “But notify about critical errors” box.

Now you should click “OK” and restart your computer.

- Swap file.

Errors when working on a computer may occur if the optimal size of the paging file is not set on your computer. It often happens that a notification of such a nature as “Virtual memory is running out” appears; you must agree that not every novice user is able to independently figure out what the problem is and how to add this virtual memory. In general, I wrote a separate article about the paging file, in which I described in detail what value should be set for a certain amount of RAM, and what types of memory there are. So don’t be lazy and read the article:

Since I’m talking about computer memory, I want to add that one of the reasons for the “Memory cannot be read” error may be a mismatch between programs or games and the computer configuration. For example, you want to install a game on your computer that requires 1 GB of RAM, but in your case you have one stick of RAM installed with only 512 MB.

— The operating system version is not genuine;

Errors may occur due to a non-licensed version of Windows. Today, the various existing pirated builds of operating systems have a high probability that you will constantly have to reinstall Windows. After all, such broken versions of operating systems themselves contain errors in the code, which in turn reduce the computer’s protection from virus attacks and there is little chance that your data will remain intact and safe even in the event of an internal system failure.

In general, of course, I would say that if errors appear in the system, first perform a full scan of your computer for viruses, because it is quite possible that the conflict could be caused by some recently installed Trojan program.

So, what should you do if the tips described above did not help get rid of the “Memory cannot be read” error. In this case, you will need to check the hard drive for errors and also defragment the disk. If you don’t know how to do this, then I recommend reading my articles:

If the error continues to appear, then the next step is to reinstall the operating system and then format the system partition. After all, the reason for the error may be hidden in the operating system assembly itself. And an assembly, as you know, is a system in which the interface of the operating system differs from the actual one, that is, its modification does not meet the requirements of Windows, hence the change in some system files, and besides, the drivers included in such an assembly do not always correspond to the hardware.

Concluding today’s article, I would also like to say that not every user can afford to install a licensed operating system. Therefore, if you install a non-original version of Windows on your computer, with the hope that your computer will work even better, faster, then be prepared for the fact that such an assembly may soon appear with the appearance of possible errors and computer freezes.

Have you ever encountered the error: Memory cannot be read, how did you manage to fix it? Maybe you know your own methods for eliminating such an error that were not voiced by me in this article, I will be glad to hear from you in the comments.

P.S =>>> So, as for today’s article, I told you and now I would like to name the best commentator of the past month, who left the most comments on the blog, it was Denis ( [email protected]). Denis, send me your WMR wallet number, I will transfer you a cash prize.

That's all for today! See you all in the article =>

Dear users, if after reading this article you have any questions or would like to add something regarding the subject of this article or the entire Internet resource as a whole, then you can use the comment form. Also ask your questions, suggestions, wishes..

So, for today, that’s actually all I wanted to tell you about in today’s episode. I can only hope that you found interesting and useful information in this article. Well, I, in turn, am waiting for your questions, wishes or suggestions regarding this article or the entire site as a whole

Today we will look at an application about which there is very little information on the Internet. Despite this, in most cases the process of this utility does not pose any danger. But to be sure of this, you need to carefully study it and analyze the behavior of the system. Therefore, let’s look at what kind of Nssm program this is and how to remove it.

Program description

Nssm (the Non-Sucking Service Manager) is a free, portable utility for running any application as a service on Microsoft operating systems. Those. with its help, you can convert the program into a standard Windows service and equate it to system processes, providing the appropriate permissions and permissions. It is not known why to do this and who might need this application, but if you are reading this article, it means you are definitely not going to use Nssm for its intended purpose.

By default, nssm.exe is located at C:\Users\<ИмяПользователя>\AppData\Roaming, has a size of 294,912 (96% of cases) or 338,944 bytes and has a fairly low potential danger rating (19%).

It is noteworthy that the application file is located in a folder intended for temporary files of various programs. From this we can conclude that Nssm is needed for the operation of one of the software products pre-installed on the computer and does not pose a threat to personal data and the system as a whole.

How to delete?

If you set out to get rid of unknown software, follow these steps:


If Nssm was a regular utility, the application will be removed from the computer. But there are known cases where viruses, worms and Trojans disguised themselves as Non-Sucking Service Manager. If nssm.exe loads the processor or displays an “application error” pop-up window, it’s worth talking about your PC being infected.

To disinfect your computer, follow these steps:

If Nssm has not been removed, and problems with slow computer operation and freezes have not disappeared, it is recommended to download Dr.Web CureIt! and completely scan your hard drive for malware. If you find virus software, follow the virus scanner prompts.

In any case, the Non-Sucking Service Manager is not a vital utility and is recommended for removal at the slightest hint of ill will. And if it is needed for the operation of another application, then you will be notified about this and download the verified version from the official website. Now we know what kind of program Nssm is and how to remove it.

Hello friends I’ll tell you about the nssm.exe process, it’s not a particularly popular process, but some users are annoyed by it with its presence in the task manager. After rummaging around on the Internet, I didn’t find anything intelligible, nothing is clear.

But I started digging further. And this is what I found, this process nssm.exe, it seems to belong to a program such as a service manager (as it turned out, this is a console program). This program can run any software as a service. That is, it can be useful for an advanced user who understands what’s what. But if you are a beginner, then all this is unlikely to be interesting to you.

But after some more digging on the Internet, I came to the conclusion that the nssm.exe process could also easily be a Trojan or a virus, which many antiviruses do not see. But I think they already see it, there’s just not enough information, but it was left on the Internet a long time ago.

The nssm.exe process is usually located in this folder:

But I read on some sites that it can also be in system folders like Windows or System32, and this is really suspicious.

Here is the process itself and its properties:


And here's where it is:


But look carefully, what’s also interesting is that the process is simply located in the Roaming folder. Although this folder as a rule should contain other folders in which programs store their settings, at least this has always been the case.

I was looking for more information on the Internet and came across the site nssm.cc, which most likely has something to do with the nssm.exe process. There is also an opinion that another asshole also belongs to nssm.exe, this is srvany.exe.

I went to this site and downloaded some program called nssm 2.24:


The program was downloaded in a zip archive, inside of which there was a folder nssm-2.24, and it contained other files and folders:


I looked a little, in general, in the src folder there are some files that clearly relate to the C++ programming language (most likely these are some kind of source code). And in the win32 and win64 folders there are versions of the nssm.exe process for 32 and 64-bit Windows, well, it seems a little clear. There are also two files, this is the log file and the README file (translated as read me).

As I understand it, this nssm.exe file needs to be placed in the system32 folder and then you can use it from the command line

There is also information on the site about what nssm is, I translated it using Google translator, in general, it’s also not particularly clear what exactly we are talking about:


In general, this is such nonsense

Well, then how to remove this nssm.exe?

If your nssm.exe file is located in the System32 or Windows folder, then do not touch it, most likely it is not a virus. And if it is a virus, then it can be removed using anti-virus utilities, I will write about this later.

If you have nssm.exe in this folder:

C:\Users\YourName\AppData\Roaming

You can delete it, but first finish it in the task manager.

Somehow I stepped and didn’t write at all how to find out where the running process is located. Look, you open the task manager and in the Processes tab, find the same nssm.exe (or another process) and right-click on it, select File location:


And then the folder from where it is launched will open. Well, that is, I hope it’s clear

I have one more trick for you. After the folder has opened, you can end the process in the task manager and rename the selected file in the folder, for example to:

Now this process will not start. And if it starts, it looks a lot like a virus

I also found out that the nssm.exe process can easily be a virus and will be identified as Trojan.Win32.Gibi.qg. For some users, this process loads the processor, these are the things

So what should we do in the end?

Well, it seems to me that there is only one right decision. This is a check with special utilities for both regular viruses and adware (these are more annoying, but not as dangerous). And here are the utilities I recommend:

  • — removes ad viruses well, checks the registry, Windows folders, browser folders, can analyze browser extensions;
  • — just like the previous utility, it is aimed at ad viruses, but uses slightly different detection mechanisms, no worse; can find threats even in cookies, this is data that was left by sites on your computer; finds viruses and Trojans in normal programs and removes them from there;
  • — a well-known scanner, probably one of the best in terms of a universal solution; checks everything possible, removes common but more dangerous viruses, spyware and adware; downloaded with a random name and already with anti-virus databases;

Check your computer with these utilities. If they don’t find anything, then most likely you don’t have viruses.

I wrote everything I dug up to you. I hope everything was useful, I wish you good luck

01.06.2016

Related publications