"nxd.exe" Process on Windows 7

Q

What is the "nxd.exe" process on windows 7? Is the "nxd.exe" process a virus? Can I terminate the "nxd.exe" process?

✍: FYIcenter.com

A

"nxd.exe" process represents "NoMachine NX Server" program. "nxd.exe" process is part of the NoMachine software package that provides multiple networking functionalities including graphical terminal service between Windows, Max and Linux systems. "nxd.exe" process is launched by the "NoMachine Device Server (nxservice)" service.

"nxd.exe" process is normally running under the parent process "Boot" as shown in the process tree below:

Boot
   nxd

On the Processes tab of "Task Manager", "nxd.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
nxd.exe                   7,396 K   NoMachine NX Server

Additional information about "nxd.exe" process:

Command line:
   "C:\Program Files (x86)\NoMachine\\bin\\nxd.exe"

Programe file information:
   Name: nxd.exe
   Location: C:\Program Files (x86)\NoMachine\bin\nxd.exe
   Description: NoMachine NX Server
   Version: 6.2.4.0
   Size: 171368 bytes
   Last modified: 6/8/2018 8:57:16 PM
   Company Name: NoMachine
   
Some data files used:
C:\Windows
C:\Windows\SysWOW64
C:\ProgramData\NoMachine\var\log\nxd.log
C:\ProgramData\NoMachine\var\log\nxerror.log

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions
HKLM\SYSTEM\ControlSet001\Control\Nls\CustomLocale
HKU\.DEFAULT\Control Panel\International
HKLM\SYSTEM\ControlSet001\services\WinSock2\Parameters\Protocol_Catalog9
HKLM\SYSTEM\ControlSet001\services\WinSock2\Parameters\NameSpace_Catalog5

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\SYSTEM32\wow64.dll
C:\windows\SYSTEM32\wow64win.dll
C:\windows\SYSTEM32\wow64cpu.dll
C:\Program Files (x86)\NoMachine\bin\nxd.exe
C:\windows\SysWOW64\ntdll.dll
C:\windows\syswow64\kernel32.dll
C:\windows\syswow64\KERNELBASE.dll
C:\Program Files (x86)\NoMachine\bin\libnx.dll
C:\Program Files (x86)\NoMachine\bin\libcrypto.dll

"nxd.exe" process is not a virus. You should terminate "nxd.exe" process, if you are not using NoMachine services.

 

"oracle.exe" Process on Windows 7

"nxservice64.exe" Process on Windows 7

Application Service Processes on Windows 7

⇑⇑ Windows 7 Processes Tutorials

2019-04-22, 2474🔥, 0💬