ntvdm.exe and 100% cpu

[Guest]

Hi,
I have on my notebook WinPro SP2 and recently I am observing that the file
ntvdm.exe is adsorbing the whole CPU. In some cases, it seems (?) that it
starts during (or after) the simple web exploration (please, let you notice
that I was reading a newspaper web page, as usually, and I did some research
by Google).
I am not practice, but I does not seem to me that I used 16bit program or
DOS application. Then, why ntvdm.exe starts? I used Spybot Search & Destroy,
as well as F-Secure anti-virus, but I have not found any malware. Do you have
any suggestion? Thank you in advance

 

[Pop`]

Hi,
I have on my notebook WinPro SP2 and recently I am observing that the
file ntvdm.exe is adsorbing the whole CPU. In some cases, it seems
(?) that it starts during (or after) the simple web exploration
(please, let you notice that I was reading a newspaper web page, as
usually, and I did some research by Google).
I am not practice, but I does not seem to me that I used 16bit
program or DOS application. Then, why ntvdm.exe starts? I used Spybot
Search & Destroy, as well as F-Secure anti-virus, but I have not
found any malware. Do you have any suggestion? Thank you in advance

ntvdm is the DOS Virtual Machine that runs 16 bit apps, as you appear to
already know. Here's a link with some info on where it belongs and such
when it's not part of a virus:
http://process.networktechs.com/ntvdm.exe.php

You might need to do some sluething to pin much down; have you checked Event
Viewer logs and Task Manage Processes for any hints?

I have a spware program called WinPatrol that does a great job of telling
who's cuasing what to run and such; easier to use than TM and much more
detail. It's at winpatrol.com . And free, of course. Sourceforge.com has
a lot of monitors; files, registry, etc..

I have others too, but unless someone else has a better suggestion, I think
WinPatrol is a good place to start. If no help, then visit sourceforge.com
and look over their monitoring apps.
If you think it's loading at startup, MS's bootvis might be helpful too.

Luck,
Pop`