Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

What is causing this error?


  • Please log in to reply
7 replies to this topic

#1 Lloyd T

Lloyd T

  • Members
  • 853 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canada
  • Local time:10:01 AM

Posted 16 November 2008 - 09:16 PM

Hi everyone!

I've just cleaned my dad's laptop of malware using Malwarebytes Anti-Malware. Unfortunately, the log is unavailable because the program was intentionally removed. Anyway, after that this started to happen:

Occasionally, a Command Prompt window would appear labeled C:\WINDOWS\System32\svchost.exe. Then, an error will appear that is labeled 16 bit MS-DOS Subsystem. The error says:

C:\WINDOWS\System32\svchost.exe
The NTVDM CPU has encountered an illegal instruction.
CS:0de2 IP:0106 OP:ff ff f9 ff fe Choose 'Close' to terminate the application.

The choices are Close and Ignore. I always click on Close.

What's causing this and how do I stop it?

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,749 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:01 AM

Posted 16 November 2008 - 10:31 PM

http://support.microsoft.com/kb/245184

I think I'd either replace that file (from the XP CD)...or run sfc /scannow.

Louis

#3 Lloyd T

Lloyd T
  • Topic Starter

  • Members
  • 853 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canada
  • Local time:10:01 AM

Posted 17 November 2008 - 07:59 AM

Do I run it from Command Prompt and what does it do?

#4 Lloyd T

Lloyd T
  • Topic Starter

  • Members
  • 853 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canada
  • Local time:10:01 AM

Posted 17 November 2008 - 06:51 PM

Sorry, forgot to read the link.

It says "on Microsoft Windows NT 4.0 Service Pack 3". The laptop has Windows XP SP2, 32-bit and the laptop wasn't running any 16-bit programs when the error appeared. The error was also related to svchost.exe, not Command.com

Forgot to mention that before I ran MBAM, I scanned the laptop using Ad-Aware 2008 Free (it also found some stuff, but not as much as MBAM did) and after it removed only the malware it found, then rebooted, the error began to appear occasionally.

#5 hamluis

hamluis

    Moderator


  • Moderator
  • 55,749 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:01 AM

Posted 17 November 2008 - 06:56 PM

I only saw instances of that error...on Win 2K installs.

The two have the same basic core, so it's worth the chance that the Win 2K cure will also be the XP cure.

Win 2K and XP are close, while XP and Win 98 are really not close at all, IMO. Which is probably why Win 98 users are better off upgrading via a clean install.

The sfc /scannow is just a WAG :thumbsup:.

Louis

#6 Lloyd T

Lloyd T
  • Topic Starter

  • Members
  • 853 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canada
  • Local time:10:01 AM

Posted 17 November 2008 - 07:05 PM

Do I run it from Command Prompt or from Run?

Please note that this laptop is used for work, not for home use.

#7 hamluis

hamluis

    Moderator


  • Moderator
  • 55,749 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:01 AM

Posted 17 November 2008 - 08:46 PM

LEARN how to use SFC.EXE (system file checker) in this article! - http://www.updatexp.com/scannow-sfc.html

You should be able to run it from either...I just go with the Start/Run technique. Be sure to put a space between the c and the /.

Louis

Edited by hamluis, 17 November 2008 - 08:46 PM.


#8 Lloyd T

Lloyd T
  • Topic Starter

  • Members
  • 853 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canada
  • Local time:10:01 AM

Posted 18 November 2008 - 03:43 PM

By any chance, does any 3rd party software overwrite important system files? If I run sfc /scannow, will these programs stop working?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users