ntvdm.exe and svchost.exe-Regarding

[Swaminathan]

Hi,

I have installed Windows Vista in system. After logging into my system,when the desktop appears, i am seeing a command prompt running the below files each time i am logging in

C:\Windows\system32\ntvdm.exe
C:\Users\username\App Data\Roaming\support\svchost.exe

I would like to know what these .exe files are basically and how to make this prompt window prevent from appearing each time when i am logging in.
Whether this affects the OS & any of the system files/drivers or whether this is a virus,trojan or any kind of that

Kindly anyone help me out in this at the earliest since i am worrying a lot what these are!!

Thanks in advance
Regards,
Swaminathan..

 

[zigzag3143]

Hi,

I have installed Windows Vista in system. After logging into my system,when the desktop appears, i am seeing a command prompt running the below files each time i am logging in

C:\Windows\system32\ntvdm.exe
C:\Users\username\App Data\Roaming\support\svchost.exe

I would like to know what these .exe files are basically and how to make this prompt window prevent from appearing each time when i am logging in.
Whether this affects the OS & any of the system files/drivers or whether this is a virus,trojan or any kind of that

Kindly anyone help me out in this at the earliest since i am worrying a lot what these are!!

Thanks in advance
Regards,
Swaminathan..

Hi and welcome

The two files can be valid legit apps, or they could be viral. First what virus app are you running?

Second--If you safe boot do these files still appear?

Third--type msconfig in search. goto startup items and see if they are listed there. If so uncheck them

Let us know the results


Ken J

 

[Swaminathan]

Hi Ken,

Thanks for your kind reply.

I have checked out the things you suggested.When i am starting my system in Safe Mode, this command prompt is not appearing and also when i typed msconfig in Search, i am seeing only 'msconfig.exe' file where these files are not appearing.
But still i am seeing this command prompt appearing during my Windows startup.

I am using Norton Antivirus currently.

Kindly suggest me to solve this.

Thank you,
Swami...

 

[Swaminathan]

Hi

Any suggestions on this?

Need your reply.

Thanks,
Swami...

 

[MilesAhead]

Are you trying to run a 16 bit program on startup? Apparently ntvdm is a virtual machine to run 16 bit apps. Supposedly this isn't supported in Vista so I don't know why it would be running.

 

[Swaminathan]

Hi,

No i am not running any 16 bit applications.

 

[MilesAhead]

afaik it's a 16 bit virtual machine that was used in the past to run Dos apps. I don't know why it would even be trying to load on your system. 'cept maybe if some virus disguised itself, or some program is trying to run something 16 bit. I would look with SysInternals AutoRuns and see where it's being launched from.