How to Remove the Ntvdm.exe virus from PC

What is Ntvdm.exe?

Ntvdm.exe is a legitimate file. It is also known as Windows NT Dos Virtual Machine which belongs to Microsoft Windows Operating Systems. It is used to provide an Environment for 16 bit process to execute on a 32 bit platform. It is commonly stored in C:\Windows\System32. The malware programmers or cyber criminals write malicious programs and name it as Ntvidm.exe and spread infections via internet to damage the software and hardware.

Affected Platform: Windows OS

How to check if your computer is infected with Ntvdm.exe malware?

When the system performance is very low, or if the Internet connection is slow, or if you get redirected to some strange websites or if you find getting annoying popup ads then the system might be affected by ntvdm.exe malware. To confirm that go to the task manager by pressing the combination of keys ctrl+alt+del and go to the process and right click on the ntvdm.exe and open the location, if the location is C:\windows\system32 then the system is not affected by ntvdm.exe malware, if the location of ntvdm.exe is somewhere else then the system is affected by ntvdm.exe

How to remove the Ntvdm.exe file from system using Comodo Antivirus?

Step 1: Download the award-winning Internet Security.

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.

Step 4: Restart your PC.

Step 5: It will take some time for the Comodo Internet Security to update the antivirus.

Step 6: Proceed with a quick scan that automatically begins after the update.

Step 7: If threats are found during the scanning, you will be prompted with an alert screen.

Step 8: Comodo Antivirus will remove the Ntvdm.exe virus from your computer including all other malwares!

Malware Entries

Safe Entries

First Seen: 10 October 2011 at 6:03 pm

No.	Company	File Type	SHA1	MD5	Malware Name	Digitally Signed	File Version	Product Version	Submitted From	Malware Behavior
1	Microsoft Corporation	Executable	82ac7d9da3b1f4f1 bfa33b239228e055 0d02359d	7dcb37b41c0b1854 b669b9b44f78fc22	Virus.Win32. Sality.gen	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	Turkey	N/A
2	Microsoft Corporation	Executable	3f89fd8ce372f230 9fb8c02a9bc585f4 146f5d05	49b877cfcc53c0b4 ec89cc7b7a583ac2	Worm.Win32.M abezat.b4	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	Morocco	N/A
3	Microsoft Corporation	Executable	9581b863eecd4ee6 b7c5e168cfd0d970 b71f6868	d59b022f4e4b8461 9dc1b8c7feb71b74	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	154.177.222.226/32	N/A
4	Корпорация Майкрософт	Executable	4d7b199281a47196 9f358d3e15140f9c 80877949	318dc50584ee4f47 109f621a45b250f2	Virus.Win32. Expiro.naf	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	Ukraine	N/A
5	Microsoft Corporation	Executable	d4c971291c317e15 039e4c649a06db69 499a47a4	e239cce766804194 098bbd94d907868d	Virus.Win32. Virut.BE	No	5.1.2600.1 106 (xpsp1.020 828-1920)	5.1.2600.1 106	Poland	N/A
6	Microsoft Corporation	Executable	9bc343b65383b9ab 2ba0961f7b8307f8 050f8a31	63f3990e6ea6d220 4ff198c52ad43089	Virus.Win32. Sality.gen	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	156.211.80.165/32	N/A
7	N/A	Executable	f7e1a666fad85b46 c3c323d1c36f2fe7 a89c4898	808becf21fd6424a 8f5db868f87b57c6	Virus.Win32. Virut.CE	No	N/A	N/A	197.156.80.220/32	N/A
8	Microsoft Corporation	Executable	1d59234549d0f6b3 9d197032681d5aff f37b67d7	a746889baba8a7a7 27c78e287803d31c	Virus.Win32. Parite.gen	No	5.2.3790.3 959 (srv03_sp2 _rtm.07021 6-1710)	5.2.3790.3 959	China	N/A
9	Microsoft Corporation	Executable	7f3b016e94027608 c62c50a91aae8df3 b5084e4e	f62e05f5b09034e3 20ec90238a19e979	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	Indonesia	N/A
10	Microsoft Corporation	Executable	d7ebe1508ce70fb6 5f18ff23ae56b7d0 74af0876	da27ddadace8abde 612738278a5946a1	Virus.Win32. Virut.CE	No	6.1.7601.2 3403 (win7sp1_l dr.160325- 0600)	6.1.7601.2 3403	Pakistan	N/A
11	Microsoft Corporation	Executable	bf1b7c72c74ea77c 3fa7e1a43e92f1a9 e715b152	88b61be0ce239648 03ba96fba463100e	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	102.43.29.105/32	N/A
12	Microsoft Corporation	Executable	2e00ceb72a49077f e94e7f65f9078a69 c9abcc2e	b39bd019e4852d68 dd45fdacd5740212	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	United States	N/A
13	Microsoft Corporation	Executable	7bdae6e3589f5d22 e781d873eb6949c7 80db5f18	3911341305e91f02 cdc25b1b09ffc2a0	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	Egypt	N/A
14	Microsoft Corporation	Executable	44eaccb20f1c5a35 fe30948801e62888 b9e70aa1	c1d262f640b35d09 4a483a68a8733706	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	154.160.21.150/32	N/A
15	Microsoft Corporation	Executable	ef342a6ef424b48c 7fb629edb7f1360a 31ff2425	b78b785ad2241ff5 1cdd80bc58b364fd	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	Turkey	N/A
16	Microsoft Corporation	Executable	7b09fb8b554d7441 dc868ea36af41607 c062d9cd	bb24e74cd620b7ea d17c6a7d59f5e093	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	Japan	N/A
17	Microsoft Corporation	Executable	3afe70643681f476 99ba246dc4b07eb0 a4a93544	9664fd8d2ef039f1 713ba4354b358439	Virus.Win32. Parite.gen	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	United States	N/A
18	Microsoft Corporation	Executable	0a16912bb319fced 1561e5a74830e982 7a5f583e	8e0790dc4b71138c 37a6a5e885444e71	Virus.Win32. Virut.CE	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Indonesia	N/A
19	Microsoft Corporation	Executable	89456fc323180d86 dcbc784606ae529d 5112a30f	dc8e05841b8ab510 8d4de77bf2fac4b5	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	102.41.88.6/32	N/A
20	Microsoft Corporation	Executable	370030132ab1d46f e8b7a9a9887ebb0e 0df29f88	87462fed3782b8d6 7ce3e2df9d91b8e9	Virus.Win32. Expiro.ew	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	United States	N/A
21	Microsoft Corporation	Executable	87b30e81e4a8d69f 0954ab0a049264d2 e87096d1	1ec9d3cd54ae1648 9c428a933318bf93	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Vietnam	N/A
22	Microsoft Corporation	Executable	6896e1dd229192d2 53949faa858d6f47 acc7f687	415ae5634f305221 63af2d271db2289b	Virus.Win32. Virut.CE	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Libyan Arab Jamahiriya	N/A
23	Microsoft Corporation	Executable	e39e606ac2f830a2 62b90dae5567df19 9ad45b14	7a970fdc187ce5a6 31e1d468a2721f06	Virus.Win32. Parite.gen	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	Bulgaria	N/A
24	Microsoft Corporation	Executable	97c20ed38d0753e3 2833acd15ee6533a 35fa500e	0d072312149da3b0 decfe7fa01f0a057	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	India	N/A
25	Microsoft Corporation	Executable	f4187abb0b517b05 867e067fd48f5078 8b94ed59	8532e8fa41dc062c c657c3892d920754	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Morocco	N/A
26	N/A	Executable	707daa51729afd39 51f9f9f1221ff062 d0d70231	b5c713faed962e82 f18974010e7d1d36	Virus.Win32. Virut.CE	No	N/A	N/A	Egypt	N/A
27	Корпорация Майкрософт	Executable	4bf544c9aabe73c8 1aafdfdee9d39814 8a313084	68716c16339690c4 c8611d47090a1bbf	Virus.Win32. Virut.Ce	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	Ukraine	N/A
28	Microsoft Corporation	Executable	1ed07424fe8afe13 57a18c8ad4e4356c ab36fd6e	bb386f820ac502ce bf2ee12d2555f3de	Virus.Win32. Parite.gen	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	United Arab Emirates	N/A
29	N/A	Executable	8de85e231220f4ac e76d6bbdbd85f258 ecbb0f78	44103e7433527e2a 8a435f22bed3ca82	Virus.Win32. Virut.CE	No	N/A	N/A	Nigeria	N/A
30	Корпорация Майкрософт	Executable	28a618c09adca750 f4ac9ec9a0c541a1 9f1b8065	0e5a19d17f5ffe9a f47423a597937c09	Virus.Win32. Golem.a0	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	Russian Federation	N/A
31	Microsoft Corporation	Executable	6cf719893e736584 9a4c16a1c0171c71 ccb271a8	761f158b9c9ff87a 15b8f93297ca6e59	Virus.Win32. Sality.gen	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	156.212.180.200/32	N/A
32	Microsoft Corporation	Executable	8306534be1fe652a a340199fa1f9f9da 6d72637b	c50622d1fbec1c36 116c0da276255f2f	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	Turkey	N/A

Prev 1 2 3...8 Next

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Safe Entries

First Seen: 12 July 2008 at 5:12 pm

No.	Company	File Type	SHA1	MD5	Digitally Signed	File Version	Product Version	Submitted From
1	ReactOS Development Team	Executable	666a89d2d57efe02 8d97f0f5909e4189 da5bda89	37731406830e1631 d079071b5fe169fd	No	0.4.9	0.4.9	10.108.51.116/32
2	Microsoft Corporation	Executable	b1f3850b801d6f89 ae9ab329d7e704f1 8fddd102	92360dcaaeda9219 ac00151cc3d6625a	No	4.00	4.00	United States
3	ReactOS Development Team	Executable	3f029b3c970ef8b6 8b02341d9bebab41 4b09c7a4	98e9117f6b68920a 3c876b3e61c432fb	No	0.1.3.0	0.1.3	Internal Submission
4	ReactOS Development Team	Executable	4faefdfe643c3022 b63b0dc93bea056f ab1d1e36	260ad064922f8fea eb07a42ae6e76037	No	0.1.0.0	0.1.0	Internal Submission
5	Microsoft Corporation	Executable	a632960558a1237b d21f5e0af2299dec 94c01762	8fb181a843f5e61e 81c1498d76433516	No	4.00	4.00	Internal Submission
6	Microsoft Corporation	Executable	5c87f6abf847226a 49f803851523574c 6b52d592	3c0175d535d584aa 26f0174578c01223	No	4.00	4.00	United States
7	Microsoft Corporation	Executable	ecc7e9281e9ec1e1 96fbfb95f295bd3d 68662df2	c6ca9e97a4fbcd96 f04a4b4f0d23a64b	No	5.00.2180. 1	5.00.2180. 1	Slovakia
8	Microsoft Corporation	Executable	df36cf59f700fc0b 3b60c009b8b877d6 233fdd72	681b807e53bdada3 37735c28c0e48a1b	No	5.1.2600.5 512 (xpsp.0804 13-2111)	5.1.2600.5 512	10.108.51.235/32
9	Microsoft Corporation	Executable	61524fe50bf01209 0053d09a0aa12200 48258c22	0b0bd2ba5b0f8312 4f3052ca538d7342	No	4.00	4.00	United States
10	Microsoft Corporation	Executable	b1f3850b801d6f89 ae9ab329d7e704f1 8fddd102	92360dcaaeda9219 ac00151cc3d6625a	No	4.00	4.00	Suriname
11	Microsoft Corporation	Executable	8eed33816daae867 d9b17e2da338f901 0bd992fa	81e58c8c4ff7c80f ca022d46105f8132	No	4.00	4.00	United States

Prev 1 2 3 Next

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Malware Search Engine

How to Remove “Ntvdm.exe”

What is Ntvdm.exe?

How to check if your computer is infected with Ntvdm.exe malware?