Removal guide Trojans

NWJS Process Explained – Is NWJS Malware or Legit? Read This

By Stelian5 min read

The NWJS process is a relatively common sight in Windows Task Manager for many users. But what exactly is NWJS? Is it a vital system process or a sketchy malware threat? This in-depth guide will uncover everything you need to know about NWJS.

Windows Task Manager

What is the NWJS Process?

NWJS stands for Node Webkit JavaScript. It is an open source framework for developing desktop applications using web technologies like HTML, CSS and JavaScript.

The NWJS framework essentially allows developers to build desktop apps with frontend interfaces powered by web UI frameworks. It bundles the Node.js runtime environment and Chromium browser capabilities into a single runtime for building these hybrid native/web apps.

Some key capabilities provided by NWJS include:

  • Access to Node.js modules for backend capabilities like file system access, child processes, databases, etc.
  • DOM manipulation and JavaScript execution via Chromium’s V8 engine.
  • HTML5 and CSS3 support for building rich user interfaces.
  • Integration of web APIs like IndexedDB and WebSockets.
  • Multi-platform support for deploying on Windows, Mac and Linux.

When you see a process called NWJS running in Task Manager, it is from an app built using this framework. The process executes the underlying NWJS engine to render the UI and run the app’s JavaScript code.

Why Does the NWJS Process Run?

The main reason you will see NWJS running on your system is because you have installed apps created with NWJS, like Slack, Visual Studio Code, or Spotify.

These apps need the NWJS process to run continuously in the background to power their frontend interface and overall functionality.

Specifically, the NWJS process does things like:

  • Render HTML/CSS/JS that makes up the app’s user interface
  • Execute the JavaScript logic for the app
  • Enable access to native OS capabilities like files and hardware
  • Facilitate communication with the backend server

So in short, the NWJS process runs persistently to make apps built on this framework work properly. Ending the task would cause the associated app to stop working correctly.

Is the NWJS Process Malware? Should I Be Worried?

The NWJS process is not malware. As long as the file path for NWJS leads to the app you installed, it is a legitimate process powering the app and nothing to worry about.

Some key points:

  • Open source NWJS is safe framework used by many reputable apps.
  • Top apps like Slack, Spotify, Skype all rely on NWJS.
  • NWJS needs to run constantly so apps function normally.
  • Ending task improperly will break apps relying on it.

You only need to investigate if you see multiple NWJS processes or the file path is suspicious. But in most cases, NWJS will be linked to apps you knowingly installed.

So rest assured that seeing NWJS running is normal and not indicative of any malware or virus. It is a benign process that is required for many popular desktop programs to work properly.

What Apps Use NWJS?

Many top apps across various categories utilize the NWJS framework and will show the NWJS process in Task Manager, including:

Messaging & Communication

  • Slack – Team collaboration and chat app.
  • Discord – Free voice and text chat app for gamers.
  • Skype – Video chat and instant messaging app.

Music & Entertainment

  • Spotify – Popular music streaming service.
  • Netflix – Video streaming platform for movies/TV.
  • Twitch – Live game streaming and esports platform.

Developer Tools

  • Visual Studio Code – Lightweight code editor from Microsoft.
  • GitHub Desktop – Open source Git client.
  • Apache NetBeans – Java IDE.

Productivity & Utilities

  • Wunderlist – Task management and to-do list app.
  • Caprine – Unofficial Facebook messenger client.
  • Rambox – Messaging and email hub app.
  • Shift – Work schedule management app.

And many moreacross business, design, photography, and other categories. Any desktop app built on NWJS will have the associated process running in the background.

Normal Resource Usage of NWJS

Like any process, the NWJS engine uses a certain amount of your computer’s CPU, memory, disk and network bandwidth to function. This resource usage varies depending on which NWJS app you are running.

Here are some general guidelines for normal NWJS behavior:

  • CPU – Up to 2-4% utilization with spikes during active use.
  • Memory – 50 to 150 MB range typically. Can go higher for certain apps.
  • Disk – Very minimal read/write activity.
  • Network – Low traffic. Mainly checks for app updates.

High CPU or RAM utilization by NWJS could indicate an issue with the associated app hogging resources. But in general, the NWJS process aims to be lightweight and is not intensive itself.

You mainly need to watch for any NWJS processes using abnormally high resources beyond expected levels. That would signify a problem with the individual app, not NWJS itself.

How to Check NWJS File Location

As mentioned before, the key way to verify NWJS is safe is to check where it originates from. The file path will tell you which app it is tied to.

Here are quick steps to check NWJS file location in Windows:

  1. Launch Task Manager (Ctrl + Shift + Esc)
  2. Go to the “Processes” tab
  3. Right click on any NWJS process
  4. Select “Open file location”

This will open Windows Explorer to the executable file path of NWJS. You can then see which app directory it is contained within, and verify it matches an app you knowingly installed.

You can also use the Properties window or command line tools like Handle or Process Explorer to check NWJS file path if needed.

Is Ending the NWJS Process Safe?

In most cases, manually ending the NWJS process is not recommended. The apps relying on NWJS will immediately stop working properly if you forcibly end it.

NWJS needs to run persistently for the associated app to function. You are essentially terminating the app by ending NWJS. Any app crashes, lost data, or instability caused will be on you.

However, ending NWJS may very rarely be needed as a last resort if an app is completely frozen with runaway NWJS usage. This forcibly restarts the app and NWJS process. But this should only be done if absolutely necessary.

Restarting your PC will also safely restart NWJS if you just need to reset it without directly ending the task. This is the best approach if you suspect NWJS-related issues.

Is Your Device Infected? Run a Free Malware Scan

Slow performance, constant pop-ups, or strange behavior? These are classic signs of a malware infection. A quick way to check is to scan your device with Malwarebytes Free, one of the most trusted malware removal tools available. If you only visited a scam page and didn’t download or install anything, this scan is optional.

The free version detects and removes the most common threats, including:

  • Adware β€” the cause of those annoying pop-ups
  • Browser hijackers β€” unwanted redirects and changed homepages
  • Trojans and spyware β€” hidden programs stealing your data
  • Potentially unwanted programs (PUPs) β€” software you never asked for

πŸ‘‰ Select your device below β€” Windows, Mac, or Android β€” then follow the simple steps to download Malwarebytes, scan your system, and remove any threats it finds. The scan usually takes 5 to 20 minutes.

Run a Malware Scan with Malwarebytes for Windows

Malwarebytes is one of the most popular and trusted anti-malware tools for Windows β€” and it’s completely free for removing infections. It catches threats that many antivirus programs miss, including adware, browser hijackers, and trojans. Follow the steps below to scan your PC and remove what Malwarebytes finds.

  1. Download Malwarebytes

    Click the button below to download the latest version of Malwarebytes for Windows from the official source. The free version is all you need β€” it will scan your computer and remove adware, browser hijackers, and other malicious software at no cost.

    Malwarebytes Free for WindowsScans and removes malware at no cost
    Download MalwarebytesOfficial installer for Windows 11 and 10. Your download starts right away.Want real-time protection? See Malwarebytes Premium
  2. Install Malwarebytes

    When the download finishes, open your Downloads folder and double-click the MBSetup file. If Windows shows a User Account Control pop-up, click “Yes” to allow the installation.

    Windows File Explorer Downloads folder with the Malwarebytes setup file highlighted
  3. Follow the On-Screen Prompts to Install Malwarebytes

    The setup wizard will walk you through a few quick screens:

    • Choose where you’re installing the program β€” “Personal Computer” or “Work Computer” β€” then click Next.

      Malwarebytes Setup asking you to choose a protection type, with Personal selected
    • Malwarebytes will now install on your device. This usually takes under a minute.

      Malwarebytes Setup installing the program, with the progress at 92 percent
    • When installation is complete, the “Welcome to Malwarebytes” screen will open automatically.

      Welcome to Malwarebytes screen with the Get started button highlighted
    • On the final screen, click Open Malwarebytes to launch the program.

      Malwarebytes Setup success screen with the Open Malwarebytes button highlighted
  4. Optional: Check for rootkits with a Custom Scan

    You don’t need to change any settings for a normal scan. The standard Threat Scan in the next step is enough for most problems, so you can go straight to it.

    If you also want to check for rootkits, use a Custom Scan. In current versions of Malwarebytes, rootkit scanning is only available there:

    1. On the Scanner tile, click the three-dot menu and select Advanced Scan.
    2. Choose Custom Scan. In its options, check Scan for rootkits.
    3. Select your system drive (usually C:\) as the location to scan, then start the scan. It takes longer than a Threat Scan.
    4. When it finishes, review and quarantine the results as described in the steps below.

    Rootkit scanning isn’t available on Windows devices with ARM processors.

  5. Start the Scan

    Click the blue Scan button. Malwarebytes will automatically update its virus database and start checking your computer for malware.

    Malwarebytes dashboard with the Scan button on the Scanner tile highlighted
  6. Wait for the Scan to Finish

    The scan checks your entire system for browser hijackers and other malicious programs, so it can take 5 to 20 minutes depending on your computer. Feel free to do something else β€” just check back occasionally to see the progress.

    Malwarebytes Threat Scan in progress, listing the scan stages and the number of items scanned
  7. Quarantine the Detected Threats

    When the scan is done, you’ll see a list of everything Malwarebytes found β€” malware, adware, and potentially unwanted programs. Click the “Quarantine” button to remove all of them at once.

    Malwarebytes Threat Scan results listing detected potentially unwanted programs, with the Quarantine button highlighted

    Malwarebytes will now remove the malicious files and registry entries and move them safely into quarantine.

    Malwarebytes moving the selected detections to quarantine
  8. Restart Your Computer

    Some threats can only be fully removed after a reboot. If Malwarebytes asks you to restart, click Yes. Once you’re logged back in, Malwarebytes has finished removing the threats it found.

    Malwarebytes message asking to restart the computer to finish the removal, with the Yes button highlighted

When the scan is done, check whether the problems you noticed have stopped. If they continue, see the options below.

Keep your PC protectedStop the next infection before it starts
If your antivirus let this threat through, it may not be enough on its own. Malwarebytes Premium adds real-time protection that blocks malware, ransomware, and malicious websites before they can infect your computer.See Malwarebytes Premium

If you are still having problems with your computer after completing these instructions, then please follow one of the steps:

Run a Malware Scan with Malwarebytes for Mac

Malwarebytes for Mac is a free on-demand scanner that removes the malware other security software tends to miss β€” adware, browser hijackers, and unwanted programs included. Cleaning an infected Mac with Malwarebytes has always been completely free, and it’s our go-to recommendation. Follow the steps below to scan your Mac and remove what Malwarebytes finds.

  1. Download Malwarebytes for Mac

    Click the button below to download the latest version of Malwarebytes for Mac.

    Malwarebytes Free for MacScans and removes malware at no cost
    Download MalwarebytesOfficial installer for macOS. Your download starts right away.Want real-time protection? See Malwarebytes Premium
  2. Open the Malwarebytes setup file

    When the download finishes, open your Downloads folder and double-click the setup file to begin the installation.

    Double-click on setup file to install Malwarebytes

  3. Follow the On-Screen Prompts to Install Malwarebytes

    The Malwarebytes for Mac Installer will guide you through a few quick screens. Click “Continue” and keep following the prompts until the installation completes.

    Click Continue to install Malwarebytes for Mac

    Click again on Continue to install Malwarebytes for Mac

    Click Install to install Malwarebytes on Mac

    When the installation is complete, Malwarebytes opens to the Welcome to Malwarebytes screen. Click “Get started“.

    Malwarebytes needs Full Disk Access to check your whole Mac. When it asks, open System Settings > Privacy & Security > Full Disk Access, turn on Malwarebytes (it may be listed as Malwarebytes Protection), and confirm with your password or Touch ID. Then return to Malwarebytes. On macOS Monterey and earlier, this setting is in System Preferences > Security & Privacy > Privacy.

  4. Select “Personal Computer” or “Work Computer”

    Malwarebytes will ask what type of computer you’re installing it on. Click either Personal Computer or Work Computer, whichever applies.
    Select Personal Computer or Work Computer mac

  5. Start the Scan

    Click the “Scan” button. Malwarebytes will automatically update its detection database and begin checking your Mac for malware.
    Click on Scan button to start a system scan Mac

  6. Wait for the Scan to Finish

    Malwarebytes will scan your Mac for adware, browser hijackers, and other malicious programs. This can take a few minutes, so feel free to do something else β€” just check back occasionally to see the progress.
    Wait for Malwarebytes for Mac to scan for malware

  7. Quarantine the Detected Threats

    When the scan is done, you’ll see a list of everything Malwarebytes found. Click the “Quarantine” button to remove all the threats at once.
    Review the malicious programs and click on Quarantine to remove malware

  8. Restart Your Mac

    Malwarebytes will now remove all the malicious files it found. Some threats can only be fully removed after a reboot β€” if Malwarebytes asks you to restart, allow it. Once you’re logged back in, check whether the problems you noticed have stopped. If they come back, save the scan report and ask for help in our forum.
    Malwarebytes For Mac requesting to restart computer

If the problems you noticed continue after the scan, see the options below.

Keep your Mac protectedStop the next infection before it starts
If your Mac got infected, its built-in protection may not be enough on its own. Malwarebytes Premium for Mac adds real-time protection that blocks malware and adware before they can infect your Mac.See Malwarebytes Premium

If you are still experiencing problems while trying to remove a malicious program from your computer, please ask for help in our Mac Malware Removal Help & Support forum.

Run a Malware Scan with Malwarebytes for Android

Malwarebytes for Android scans your phone or tablet for malware, adware, and potentially unwanted apps. The free version scans only when you start a scan. Real-time protection, which checks apps automatically, is part of the paid Premium version.

  1. Download Malwarebytes for Android.

    You can download Malwarebytes for Android by clicking the link below.

    Malwarebytes for AndroidScans your phone and removes malware at no cost
    Get Malwarebytes for AndroidOpens Google Play in a new tab.Want real-time protection? See Malwarebytes Premium for Android
  2. Install Malwarebytes for Android on your phone.

    In the Google Play Store, tap “Install” to install Malwarebytes for Android on your device.

    Tap Install to install Malwarebytes for Android

    When the installation process has finished, tap “Open” to begin using Malwarebytes for Android. You can also open Malwarebytes by tapping on its icon in your phone menu or home screen.
    Malwarebytes for Android - Open App

  3. Follow the on-screen prompts to complete the setup process

    When Malwarebytes opens, it walks you through a short setup. Tap Get started and follow the prompts. If you see an offer for a trial or a paid plan, read it before you accept. You can skip it and keep using the free scanner.

    Malwarebytes will ask for permission to access the files on your phone so it can scan them. Tap Allow, or turn on the permission in the Android screen that opens, then return to Malwarebytes.

  4. Run a scan with Malwarebytes for Android

    On the main screen, tap Scan now. In some versions, you open the menu, tap Scanner, and then tap Run a scan.

  5. Wait for the Malwarebytes scan to complete.

    Malwarebytes will now start scanning your phone for adware and other malicious apps. This process can take a few minutes, so we suggest you do something else and periodically check on the status of the scan to see when it is finished.
    Malwarebytes scanning Android for Vmalware

  6. Remove the detected apps.

    When the scan has been completed, you will see a list of the threats that Malwarebytes for Android has detected. Next to each detected item, tap the menu icon (three dots), then choose to uninstall the app or delete the file. Android then asks you to confirm. Tap OK or Uninstall to remove the app.

  7. Restart your phone.

    When the detected apps are removed, restart your phone if Malwarebytes asks you to. Then check whether the problems you noticed have stopped.


If the problems you noticed continue after the scan, see the options below.

Keep your phone protectedStop the next infection before it starts
Malwarebytes for Android Premium adds real-time protection that blocks malicious apps and scam links before they can harm your phone.See Malwarebytes for Android

If you are still having problems with your phone after completing these instructions, then please follow one of the steps:

A factory reset erases everything on your phone. Your apps, photos, files, and settings are deleted, so use it only if the problem continues after the steps above and after you’ve asked for help. Before you reset:
  • Back up your photos, videos, files, and messages, for example to your Google account or a computer.
  • Make sure you know your Google account email and password. The phone asks for them after the reset. If you changed the password recently, Google recommends waiting 24 hours before you reset.
  • On a Samsung phone, also make sure you know your Samsung account password.
  • If you use an authenticator app for two-step verification, move your accounts to another device or save your backup codes first.
On a Google Pixel, go to Settings > System > Reset options > Erase all data (factory reset). On a Samsung Galaxy phone, go to Settings > General management > Reset > Factory data reset. Menu names differ on other phones, so check your manufacturer’s support site.

Stay Protected: Block Ads and Malicious Sites

No scan can prove a device is completely clean, so it helps to block threats before they reach you. Most infections start with a malicious ad or a fake download button β€” so blocking them at the source is your best defense.

We recommend AdGuard, which blocks malicious ads, phishing pages, and dangerous redirects before they can reach you.

πŸ‘‰ Download AdGuard and browse safely

Conclusion

While its name may seem vague at first glance, NWJS is actually a key process that runs many popular desktop applications on Windows. It executes the necessary engine to power apps built with the NWJS framework.

Now that you understand its pivotal role in delivering the frontend experience for Slack, Spotify, Visual Studio Code and more, you can rest easy knowing NWJS is not malware.

The NWJS process is a benign and expected part of running apps that rely on it. While its resource usage and troubleshooting may require occasional monitoring, you need not proactively end the task or worry about security risks.

With the tips in this guide, you can optimize NWJS performance, resolve any issues that arise, and verify the process is tied to legitimate applications.

So the next time you notice NWJS running in Task Manager, remember it is simply enabling many of your favorite programs to function normally. As long as the file path checks out, NWJS is safe to ignore and allow to operate smoothly in the background.

Make your next click a safer one.

Spotting a scam is a good start. These tools can add protection when you browse, open messages, or download software.

Affiliate links We may earn a commission if you buy through these links, at no extra cost to you. How we’re funded

MalwarebytesSCAM & MALWARE PROTECTION

Scam awareness. Malware protection.

Malwarebytes combines device protection with tools for checking suspicious messages and links, so you have more information before you act.

  • Scam Guard for suspicious messages
  • Real-time malware protection with Premium
Explore MalwarebytesExplore features on the official website
AdGuardAD & TRACKER BLOCKING

Less clutter. More control.

AdGuard filters intrusive ads and trackers, helping reduce unwanted interruptions and giving you more control over your browsing.

  • Blocks intrusive ads and pop-ups
  • Filters trackers while you browse
Explore AdGuardExplore features on the official website

Features vary by device and plan. These tools add protection; they do not guarantee that a website or offer is trustworthy.

Join the discussion

0 comments

Share your experience or ask a question about this article.

Discussion

Start the conversation

Have a question or something useful to share? Add the first comment.

Report a comment

Reports are private and reviewed by a moderator.

Written by

Stelian

Stelian is a malware and virus removal expert with more than 15 years of experience. Stelian leads malware analysis and removal at MalwareTips, writes the step-by-step removal guides and helps readers recognize and avoid online scams.

61,160 articlesWriting since 2011
More from Stelian β†’

MalwareTips community Β· since 2010

Stuck on a step? 75,000+ members can help you for free.

Post your question on the forum and our volunteer malware removal experts will walk you through it, step by step.

75K+members
999K+forum messages
100K+forum topics
17+years online

Previous

Remove CapitalProjectSearch Adware [Virus Removal Guide]

Next

How To Remove BOTY Ransomware [Virus Removal Guide]

Share