ntvdm.exe

---

Threat (0 is low, 10 is high): 2
Effects: Runs 16-bit processes (console applications)
Status: 'ntvdm.exe' is critical.
Path: c:\windows\system32\ntvdm.exe

The NT-kernel's Virtual DOS Machine handles all 16-bit processes. All 16-bit processes are ran as a thread of ntvdm.exe (which, is a multithreaded application), ntvdm is essentially a 16-bit Windows emulation layer, as it reimplements all of the 16-bit Windows functionality at a 16-bit level. It is not recommend you end this process, as it could be hosting several other applications and data could be lost.

ntfrs.exe   ntmulti.exe   ntvdm.exe