ntvdm.exe
Threat (0 is low, 10 is high): 2
Effects: Runs 16-bit processes (console applications)
Status: 'ntvdm.exe' is
critical.
Path: c:\windows\system32\ntvdm.exe
The NT-kernel's Virtual DOS Machine handles all 16-bit processes. All 16-bit processes are ran as a thread of ntvdm.exe (which, is a multithreaded application), ntvdm is essentially a 16-bit Windows emulation layer, as it reimplements all of the 16-bit Windows functionality at a 16-bit level. It is not recommend you end this process, as it could be hosting several other applications and data could be lost.
ntfrs.exe ntmulti.exe ntvdm.exe