Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here




A family member computer was recently attacked by a virus which has been dealt with.  While inspecting the system, I came across two files: nvModes.001 and nvModes.dat.

An internet search shows mixed reviews.  Is this a virus or is it not?  On the infected system, these files were located in C:\ProgramData.  I renamed these files and after the next restart, these two 'missing' files were re-added.  Several sites assumed that since it starts with nv that it might be associated with nvidia; however, I could not locate anything on their site.

Does anyone know if these are harmful files and if they are, how do I get rid of them.


If at first you don't succeed, then sky diving wasn't meant for you!

RE: nvModes

The general consensus as far as I can see is that these files are OK.
Have you run scans with Malwarebytes and Superantispyware?


Steve: N.M.N.F.
If something is popular, it must be wrong: Mark Twain

RE: nvModes

Many AV sites will allow you to send them a copy of the files and they will analyze them for you. Go to your AV's website and see what they will do. If they don't try another's website, like Sophos. Most don't charge since this is how they "discover" new viruses.


James P. Cottingham
I'm number 1,229!
I'm number 1,229!

RE: nvModes

Thank you both for your responses.

@sggaunt:  both of those programs were the programs I used to scan the infected computer.  The scans were done in safe mode without networking then in regular mode with updates.  After several scan (quick and full) and several reboots, these two programs no longer registered any issues.  I thank you for mentioning these two programs in case I was not familiar with them.

@2ffat:  That's for your suggestion.  I haven't tried to submit any of the files so that gives me something else to test.

Thank you again.

If at first you don't succeed, then sky diving wasn't meant for you!

RE: nvModes

To check files to see if good or bad, go here http://www.pcworld.com/downloads/file_download/fid,68724-order,4/download.html and download virus total program and install it.
When you need to check a file you can Right click on it and go to "sent to" there you will see virus total, click on it and it will up load the file to there site and scan it with 43 virus and malware programs and give you a report on the file.

RE: nvModes

Thanks for the link.  
It's greatly appreciated.

If at first you don't succeed, then sky diving wasn't meant for you!

RE: nvModes

Thanks for posting that, allteltec.  I was unaware that you could install a program for that, rather than going to the website each time.

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close