The Nahimic audio driver is preinstalled on many PCs, Motherboards and Headset/Headphones by manufacturers like MSI, Lenovo, Dell, Alienware, Gigabyte, Huawei, Honor, Machenike, Thunderobot, AsRock.
Why is Nahimic (and it's maker A-Volute) spreading across my disk?
It's in C:\ProgramData\A-Volute
It's in Task Scheduler
It's in the startup menu under C:\Users\(username)\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
It's in three separate places in device manager.
It's running in services as nahimicServices.exe
It's running in the background as nahimicSvc32 and nahimicSvc64.
I have 50 files starting with the string "Nahimic" in C:\windows alone.
It's all over the place, it can't be uninstalled or deleted, and it does next to nothing useful.
Last night I noticed a process running in the background called SET1213.TMP which is digitally signed by A-Volute, the signers of Nahimic. Yes, a TMP file running as a process!! I noticed it because it suddenly grabbed a CPU core to itself (and does so every time I leave my PC alone).
Nothing flakey here. Nothing shady here. "Volute" is a word for a spiral trap, by the way.
This is evidently a backdoor or key logger. Evidently criminal intentions?
