What is the "nxservice64.exe" process on windows 7? Is the "nxservice64.exe" process a virus? Can I terminate the "nxservice64.exe" process?

"nxservice64.exe" process is part of the NoMachine software package that provides multiple networking functionalities including graphical terminal service between Windows, Max and Linux systems. "nxservice64.exe" process is launched by the "NoMachine Device Server (nxservice)" service.

"nxservice64.exe" process is normally running under the parent process "Boot" as shown in the process tree below:

Boot
   nxservice64

On the Processes tab of "Task Manager", "nxservice64.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
nxservice64.exe           8,836 K   

Additional information about "nxservice64.exe" process:

Command line:
   "C:\Program Files (x86)\NoMachine\bin\nxservice64.exe" --servicemode

Programe file information:
   Name: nxservice64.exe
   Location: C:\Program Files (x86)\NoMachine\bin\nxservice64.exe
   Description: 
   Version: 
   Size: 898920 bytes
   Last modified: 6/8/2018 8:57:38 PM
   Company Name: 
   
Some data files used:
C:\ProgramData\NoMachine\var\log\nxdeviced.log
C:\Program Files (x86)\NoMachine\bin
C:\ProgramData\NoMachine\var\log\nxservice.log

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKU\.DEFAULT\Control Panel\International
HKLM\SYSTEM\ControlSet001\services\WinSock2\Parameters\Protocol_Catalog9
HKLM\SYSTEM\ControlSet001\services\WinSock2\Parameters\NameSpace_Catalog5
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PERFLIB
HKU\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
HKLM\SYSTEM\ControlSet001\services\.NET CLR Data\Performance

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\system32\kernel32.dll
C:\windows\system32\KERNELBASE.dll
C:\windows\system32\ADVAPI32.dll
C:\windows\system32\msvcrt.dll
C:\windows\SYSTEM32\sechost.dll
C:\windows\system32\RPCRT4.dll
C:\windows\system32\newdev.dll
C:\windows\system32\USER32.dll
C:\windows\system32\GDI32.dll

"nxservice64.exe" process is not a virus. You should terminate "nxservice64.exe" process, if you are not using NoMachine services.

 

⇒ "nxd.exe" Process on Windows 7

⇐ Application Service Processes on Windows 7

⇑ Application Service Processes on Windows 7

⇑⇑ Windows 7 Processes Tutorials