The genuine ntvdm.exe file is a software component of Microsoft Windows Operating System by Microsoft Corporation. Microsoft created the "NTVDM.exe" process when it advanced from 16-bit software in DOS and Windows 3.x to the Windows NT 32-bit environment. It is an essential Windows process and should not be removed. It provides the "NT Virtual DOS Machine" (VDM) subsystem on 32-bit Windows machines to run DOS and 16-bit Windows applications. (64-bit Windows systems use internal "handles" having too many significant bits to be truncated for its use.) In Windows 8 and above it is present but compressed and disabled by default; it installs (which requires elevated privileges) when first used. By default all 16-bit DOS or Win16 apps are threads in one NTVDM process and all threads crash if one does, but not Windows. Developers can make apps use separate VDMs but not if they need shared memory to communicate. NTVDM is essential for some businesses, for example, which still consider DOS or Win16 accounting software extremely reliable and have databases with decades of transaction history.
NTVDM stands for Windows NTVirtual DOS Machine
The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the ntvdm.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.
Description: Ntvdm.exe is an important part of Windows, but often causes problems. Ntvdm.exe is located in the C:\Windows\System32 folder.
Known file sizes on Windows 10/11/7 are 526,848 bytes (71% of all occurrences), 534,016 bytes and 9 more variants.
The file is a Windows system file. The ntvdm.exe file is a Microsoft signed file. The program has no visible window.
Therefore the technical security rating is 3% dangerous; however you should also read the user reviews.
"NTVDM" can run at start up. Windows NT Virtual DOS Machine (NTVDM) for running 16-bit tasks on the 32-bit OS's (Windows NT, 2K and XP). Required if hardware on a machine with these OS's needs 16-bit DOS drivers. You can find a bit more about NTVDM here
Important: Some malware disguises itself as ntvdm.exe, particularly when not located in the C:\Windows\System32 folder. Therefore, you should check the ntvdm.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
Score
User Comments
Windows 16-bit Virtual Machine is used to run DOS programs Alex
16bit application layer for Windows NT based operating systems (NT, 2k, XP,...) Pieter-Jan Gunst
Hosts 16-bit Windows apps and DOS apps under NT, Windows 2000 and XP Bj.
This link provides detailed description zero
Although it is a Windows program, it seams to be using 100% of my CPU and the only way I can get rid of it is to constantly delete it through Task Manager. An iritating nusance... Pete
I recommend going to the Task Manager and stopping ntvdm.exe when installing our software Skyline Property Management from ssctech.com. I also stop MMC.exe--these two seem to those the install of our 3rd party software Pervasive DB and Crystal Runtime. Dale Randle (further information)
ntvdm.exe causes chasm the rift to not play on my computer billy
dos system, makes xp a bit less USeless zero0v
found it in more than ten folders on my computer BoogWar
The virus Alureon may camoflage itself as this file David Brown (further information)
ntvdm is pulling up the docs32.exe file as soon as internet connects and executes the file infmgr.exe from %systemroot% \system32. Ronald M
it uses 100% of CPU jignesh vadera
It Sarts GETMODULE 30.exe a virus so i realy thought it was a virus to but its a core file... Tyler Bundy
Invoked by Windows as VM running a DOS program. So "needed" is relative. canderson
needed to run dos applications and some games Big Smoke
do not delete or rename this file or you will have big problems. Larry Carter
adwatch kills it by default, which causes SysSuite8 diskfixer to fail emoze
It is a screen that keeps poping up saying there is a problem with it on our comptuer michelle
NT Virtual Dos Machine, is in itself not a harmful program. It can become a problem if it is replaced by a malicious version as always. In addition, badly written or a malicious dos applications which is run by ntvdm can be harmful Nab
I was at startup, And a bunch of "NTVDM"s poped up in my windows task manager, They were opening and closing and it was right after I scanned my computer.. Lewk
Fan started running continuously so checked task manager and ntvdm was using 50% cpu so ended process. Fan slowed and system ran fine afterward. Happened only once. Win XP Philip
source code of ntvdm.exe file robert collins
seems to be stopping my older DOS programs from running. Jeff
it's a windows system file but not essential.and harmful too maveric
using 100% of my CPU
When this opens, wow.exe opens with it as a sub program. When I close ntvdm.exe from Task Manager, wow.exe closes also. I believe the wow.exe is some sort of spyware. I do not run Word of Warcraft. Computer also slows down quite a bit. Rob
It uses a lot of cpu time and really slows my system when it is not caught by McAfee security software Robbo
Ntvdm.exe is used for running 16 bit applications on a 32 bit system. It is not dangerous but it will max out your CPU because of the conversions it does. LegalizeMe
It uses a lot of CPU when I run QBasic Zarquon the magnificent
Consumes an entire core of my Core 2 Duo E8400 Kevin Kim
When I execute a batch that runs in a loop, I can see ntvdm.exe running. It consumes about 80% of one of my cores. Edward L
It can be stopped using Process Blocker(try both version 4rm: http://www.processblocker.com/download.html ). I am pretty confident it'll work for you too. SMD
It is used Only when the computer user runs C/C++/C# programs Shaik Shoeb
ntvdm.is.a windows file it uses 100 percent of cpu usage to stop this file open ur task manager open process right click on ntvdm.exe then click on end process tree
essential for Windows
I closed my dos window and ntvdm.exe closed , was taking 30% cpu Bob Joy
use 99% of my CPU. Only invoked when trying to run a very old dos game Beer
when i open my laptop 20 minutes later x2 ntvdl.exe are appeared at my task manager and my cpu goes up to 100% then i have to stop them manually... plz i need help to fix it... dj pol
for installation of gre powerprep it needs ssr
ntvdm.exe will startup when you start up qb.exe version 1.1 or 4.5 . Strangely enough though when starting qb.exe version 1.1 , ntvdm uses a lot less cpu time. Leendert Schouten
it started in the background and used lots of cpu recource and ended as i closed turbo c compiler v3 for C++ Musawer
Windows Virtual DOS Machine, runs old 16-bit DOS or Windows 3.1 software. In the Task Manager, you will also see wow.exe- this is short for "Windows On Windows", emulating the older 16 bit Windows 3.1..... Bill Matthews
I ended it and my CPU went from 80%-100% to 30%-60%. My fan made less noise and nothing bad happened. rokyfox
when i downloaded 3 windows updates for XP ,NTVDM.exe used 100% of my CPU so i ended the prosses in task manager and hid the updates to stop them downloading ever again nilocelbbuh
when you download some application like online games,utilities,appsware,etc. it is perfect.No problem available...when u use it for a few times...NTVDM.EXE appear then said it cant be open because of some error.I dont think its an error.its like controlling it or eat the system. syafiq zamri
It distracts the browser from sending and receiving data Richard Keep
cannot open any application or softwares.....and even cannot delete it from system 32 directory rokktim
ntvdm.exe used to be a pipeline for malware, don't know if this still applies, blocking its execution with a good firewall creates no application problems out of well over 400 apps on my XP box. Dave Abbott
You need it, but it stays running unless you restart or close the process(es). No damage to end process but be sure you aren't installing or running a DOS program. Qermaq
seems to hog less time if you right click on it & set it to low priority - am using qbasic and need it Scott Woods
saw it first time today as I prep for DOS work...file size is 411K, a 15K dll accompanies. Firewall freaked out so blocked for now... Lloyd
Comodo firewall rates it as unsafe Moltres_ridert
It's a virtual environment for DOS programs to run in; nothing more. It's only active when DOS is in use. When you terminate the DOS program, NTVDM should turn off immediately. your name
essential for window arvind
Virtual DOS machine, to enable running 16 bit apps on 32 bit OS. user
it is display when you type edit command with any file in cmd a.kashyap
NDM process create an error file named Remind.exe and it closes and opens and close and open and ........ I have to end the process of NDM.exe it also slows my computer it's dangerous. Deepan
ntvdm.exe is must be execution before to run it. but it is done. so you not need installing before of them. the exe to be needed to run your computer. Muhammad Adi Nugroho
NTVDM means NT Virtual DOS Machine. It is a MS-DOS emulator (kind of like Dosbox) used to run 16-bit programs. Pootis
when i write a floppy file(*.flp) for OrVrBox, i found 2 "ntvdm.exe"s running there, and suddenly the file i am working on was deleted. that i coded in assembly for a hour. if it was from MS Then there is no danger. but looks like a malware starts it, or starts with it. (or it can happen because, i am working on a ultra low level language :)) information from 'www.file.net' is very useful, thankyou. me.SL (further information)
If NTVDM.EXE is required to start 16bit programs it also starts _DEFAULT and _DEFAULT.PIF. The window that opens is telling you that thus is not a Windows program. I did delete this program from Windows 7 and the hidden partion but found in APPDATA a file which said "We cannot find the 16 bit window". This Windows 16 bit programm is killing the speed you CPU with 50 percent. _DEFAULT and DEFAULT.PIF appear always on new 32 but Windows installation. Deleting whatever from WIN7 always returns after being ION the internet but WMIPRSVE.EXE is the replacing everything that is being deleted.
This program has been requested for my PC to download it for a game called Ricochet Infinity. It clearly didn't seem friendly because it requested me to do that three days after playing it. If you encounter it, use Mawlarebytes instantly and uninstall the game that requested you to download it. It's not good due that my friend got DDoSed instantly when he downloaded it. Promise me that you will delete it if you have it. It will be useless in the future. HC
I have another file which has different name and also in different folder. But act as ntvdm.exe. Such file may be malware. Gaurav
If anyone here has any problem with NTVDM.exe you have probably downloaded a Trojan that disguises itself as a system program. NTVDM.exe is normally benign. Nick Roberts
Show all user comments
Summary: Average user rating of ntvdm.exe:
based on 79 votes with 64 user comments.
30 users think ntvdm.exe is essential for Windows or an installed application.
15 users think it's probably harmless.
12 users think it's neither essential nor dangerous.
13 users suspect danger.
9 users think ntvdm.exe is dangerous and recommend removing it.
11 users don't grade ntvdm.exe ("not sure about it").
Best practices for resolving ntvdm issues
A clean and tidy computer is the key requirement for avoiding problems with ntvdm. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.
Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.
To get your computer running as fast as it did on day one, you can 8reset your PC. Your personal files will remain intact, but any programs you installed will need to be reinstalled.
To help you analyze the ntvdm.exe process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. A good Bantivirus software detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.
Score
User Comments
Alex
Pieter-Jan Gunst
Bj.
zero
Pete
Dale Randle (further information)
billy
zero0v
BoogWar
David Brown (further information)
Ronald M
jignesh vadera
Tyler Bundy
canderson
Big Smoke
Larry Carter
emoze
michelle
Nab
Lewk
Philip
robert collins
Jeff
maveric
Rob
Robbo
LegalizeMe
Zarquon the magnificent
Kevin Kim
Edward L
SMD
Shaik Shoeb
Bob Joy
Beer
dj pol
ssr
Leendert Schouten
Musawer
Bill Matthews
rokyfox
nilocelbbuh
syafiq zamri
Richard Keep
rokktim
Dave Abbott
Qermaq
Scott Woods
Lloyd
Moltres_ridert
your name
arvind
user
a.kashyap
Deepan
Muhammad Adi Nugroho
Pootis
me.SL (further information)
HC
Gaurav
Nick Roberts
Summary: Average user rating of ntvdm.exe: based on 79 votes with 64 user comments. 30 users think ntvdm.exe is essential for Windows or an installed application. 15 users think it's probably harmless. 12 users think it's neither essential nor dangerous. 13 users suspect danger. 9 users think ntvdm.exe is dangerous and recommend removing it. 11 users don't grade ntvdm.exe ("not sure about it").