NTVDM CPU has encountered an illegal instruction

[Trading Ace]

Hello Gurus,

I'm running a P4 with Windows 2000 OS. I've been getting
error on statup lately ( 2 weeks )

C:\Documents& Settings\Allusers\Start
menu\Programs\Startup\winlogon.exe
The NTVDM has encountered an illegal instruction.
CS:0da8 IP:01a5 OP:63 73 2e 67 69 Choose 'Close' to
terminate the application.

Kindly advice on how I could fix this.

Regards
Ave

 

[Mark V]

Hello Gurus,

I'm running a P4 with Windows 2000 OS. I've been getting
error on statup lately ( 2 weeks )

C:\Documents& Settings\Allusers\Start
menu\Programs\Startup\winlogon.exe
The NTVDM has encountered an illegal instruction.
CS:0da8 IP:01a5 OP:63 73 2e 67 69 Choose 'Close' to
terminate the application.

Kindly advice on how I could fix this.

That is _not_ your OS's winlogon.exe which would be located in the %
systemroot%\system32\ directory and have MS information in it's
properties, Version information.

Malware I assume. Virus, Tojan, Adware, Spyware, ...

Try searching Google or your A-V and A-T vendor's sites as I do not
recall which one this may be.

Not really a .cmdprompt.admin question.

 

[Trading Ace]

Thanks Mark for the insight. So do you think I can delete
the winlogon.exe from my documents & Settings folder and
get rid of this problem.

Also, where message group should I ask this question ?

Thanks

 

[JB]

Hello Gurus,

I'm running a P4 with Windows 2000 OS. I've been getting
error on statup lately ( 2 weeks )

C:\Documents& Settings\Allusers\Start
menu\Programs\Startup\winlogon.exe
The NTVDM has encountered an illegal instruction.
CS:0da8 IP:01a5 OP:63 73 2e 67 69 Choose 'Close' to
terminate the application.

Kindly advice on how I could fix this.

Regards
Ave

dear Ave:
I am having the same issue. Did you resove the problem?
Thanks,
JB

 

[Mark V]

Thanks Mark for the insight. So do you think I can delete
the winlogon.exe from my documents & Settings folder and
get rid of this problem.

Also, where message group should I ask this question ?

If it is (likely IMO) some type of malware, then the removal may be
more or even a lot more complex than just deleting a single file.
Try to find and use tools that can both identify and remove entirely
the problem. Suggest Anti-* groups/sites and Google searches.

This might be a form of NetSky
Any decent up to date Anti-Virus _should_ be at least detecting it I
would think. Your A-V vendor is one place to start searching.

This in not directly a cmdprompt.admin issue.

 

[Ray McCormick]

If thought to be a virus you could use the online virus checker
at http://securityresponse.symantec.com/ and then click on
'Online Virus and Security Check' etc. I haven't used this
myself - just came across it by accident once.
If you have up to date virus protection this might not help,
though some viruses attempt to disable anti-virus software.

Ray