File nssm.exe in data store 10.9.1 gives virus warning

[mody_buchbinder]

Hi All

I use the www.virustotal.com site to test C:\Program Files\ArcGIS\DataStore\framework\runtime\couchdb\bin\nssm.exe and get a message that it contain virus.

Anybody runs into this problem? Can you install DataStore without this file?

Thanks

[George_Thompson]

I would reach out the Esri Technical Support on this question.

[Kanin]

I would recommend contacting the security team at the link: https://trust.arcgis.com/en/security-concern

Best regards,
Kanin 

If this answer solved your question, please mark it as "Accept as Solution" to help others who have the same question.

[JonEmch · Accepted solution]

nssm.exe is a windows process. This executable file creates logs all progress in an Event log. nssm.exe is part of couchdb, which may cause anti-virus software to flag it as a third party file.

While this file could be removed, it is not recommended nor supported due to potential adverse affects in the software. We are looking to remove this entirely in the upcoming releases of ArcGIS Enterprise.

For more details, I would reach out to PSIRT

[RandallWilliams]

All, 

This is an old thread, but this question pops up occasionally. 

NSSM.exe is a service manager. Basically, it helps manage a running batch file as a windows service so that if it dies, it restarts. It's not a "virus". It ships with CouchDB, which we use for the tile store. We don't actually use NSSM - we build our own service. You can delete this with no worries. The reality is that this is a false positive due to a similarly named tool:

https://forums.malwarebytes.com/topic/265430-potential-nssmexe-false-positive/