Select to view content in your preferred language

File nssm.exe in data store 10.9.1 gives virus warning

1881
4
Jump to solution
01-04-2022 06:02 AM
mody_buchbinder
Frequent Contributor

Hi All

 

I use the www.virustotal.com site to test C:\Program Files\ArcGIS\DataStore\framework\runtime\couchdb\bin\nssm.exe and get a message that it contain virus.

Anybody runs into this problem? Can you install DataStore without this file?

Thanks

0 Kudos
1 Solution

Accepted Solutions
JonEmch
Esri Regular Contributor

nssm.exe is a windows process. This executable file creates logs all progress in an Event log. nssm.exe is part of couchdb, which may cause anti-virus software to flag it as a third party file.

While this file could be removed, it is not recommended nor supported due to potential adverse affects in the software. We are looking to remove this entirely in the upcoming releases of ArcGIS Enterprise.

For more details, I would reach out to PSIRT

Keep on keeping on!

View solution in original post

0 Kudos
4 Replies
George_Thompson
Esri Notable Contributor

I would reach out the Esri Technical Support on this question.

--- George T.
0 Kudos
Kanin
by Esri Contributor
Esri Contributor

I would recommend contacting the security team at the link: https://trust.arcgis.com/en/security-concern

Best regards,
Kanin 

If this answer solved your question, please mark it as "Accept as Solution" to help others who have the same question.

 

0 Kudos
JonEmch
Esri Regular Contributor

nssm.exe is a windows process. This executable file creates logs all progress in an Event log. nssm.exe is part of couchdb, which may cause anti-virus software to flag it as a third party file.

While this file could be removed, it is not recommended nor supported due to potential adverse affects in the software. We are looking to remove this entirely in the upcoming releases of ArcGIS Enterprise.

For more details, I would reach out to PSIRT

Keep on keeping on!
0 Kudos
RandallWilliams
Esri Regular Contributor

All, 

This is an old thread, but this question pops up occasionally. 

NSSM.exe is a service manager. Basically, it helps manage a running batch file as a windows service so that if it dies, it restarts. It's not a "virus". It ships with CouchDB, which we use for the tile store. We don't actually use NSSM - we build our own service. You can delete this with no worries. The reality is that this is a false positive due to a similarly named tool:

https://forums.malwarebytes.com/topic/265430-potential-nssmexe-false-positive/