ntvdm?

[darren]

hi hope u can help,
over the last couple of days i keep getting a dos looking
window pop up on my screen everytime i open a window or
folder and i dont no y , iv narrowed it down to
C:\windows\system32\ntvdm.exe,in the acual dos window it
says C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\surfai~1.exe,also
on top of the dos window i get another dos window the
same but this 1 has a small white line flickering across
the screen, im lost as to wot its doing i belive it has
something to do with nt,virtual dos machine,can the
sassar virus have done this,altho i am running projectX
and zonealarm,either way can u help.
many thanks,
pitball.

 

[Drew Cooper [MSFT]]

The executable in your temp directory is evidently a 16-bit app, so it runs
under ntvdm. There's no way for me to tell from here what the app is or why
it's running. Check your Start->Programs->Startup list and also the Run and
RunOnce reg keys if this is starting when you log on. Other possibilities
include logon scripts or another app that's invoking this one.