startup error: 16 bit MS-DOS Dubsystem...The NTVDM CPU has encountered an illegal instruction

original title: startup error msg.

the computer reads:

"16 bit MS-DOS Dubsystem

c:\Windows\System32\userinit.exe

The NTVDM CPU has encountered an illegal instruction.

cs:f209IP:/e09 cp:ff ff ff ff ff

Choose 'close' to terminate the application"

how do i fix this malware bug?

pls. help??

 

Hi,

That error could be malware related, and probably is, however it also can be caused by installing
old 16 bit programs which will not run on Vista.

If you need to check for malware here are my recommendations - these will allow you to do
a thorough check and removal without ending up with a load of spyware programs running
resident which can cause as many issues as the malware and maybe harder to detect as the
cause.

No one program can be relied upon to detect and remove all malware. Added that often easy
to detect malware is often accompanied by a much harder to detect and remove payload. So
its better to be overly thorough now than to pay the high price later. Check with these to an
extreme overkill point and then run the cleanup only when you are very sure the system is clean.

These can be done in Safe Mode - repeatedly tap F8 as you boot however you should also run 
them in regular Windows when you can.

Download malwarebytes and scan with it, run MRT, and add Prevx to be sure it is gone.
(If Rootkits run UnHackMe)

Download - SAVE - go to where you put it - Right Click on it - RUN AS ADMIN

Malwarebytes - free
http://www.malwarebytes.org/

Run the Microsoft Malicious Removal Tool

Start - type in Search box -> MRT  find at top of list - Right Click on it - RUN AS ADMIN.

You should be getting this tool and its updates via Windows Updates - if needed you can
download it here.

Download - SAVE - go to where you put it - Right Click on it - RUN AS ADMIN
(Then run MRT as above.)

Microsoft Malicious Removal Tool - 32 bit
http://www.microsoft.com/downloads/details.aspx?FamilyID=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

Microsoft Malicious Removal Tool - 64 bit
http://www.microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495E-94E7-6349F4EFFC74&displaylang=en

also install Prevx to be sure it is all gone.

Download - SAVE - go to where you put it - Right Click on it - RUN AS ADMIN

Prevx - Home - Free - small, fast, exceptional CLOUD protection, works with other
security programs. This is a scanner only, VERY EFFECTIVE, if it finds something come back
here or use Google to see how to remove. 
http://www.prevx.com/   <-- information
http://info.prevx.com/downloadcsi.asp  <-- download

PCmag - Prevx - Editor's Choice
http://www.pcmag.com/article2/0,2817,2346862,00.asp

Try the trial version of Hitman Pro :

Hitman Pro is a second opinion scanner, designed to rescue your computer from malware
(viruses, trojans, rootkits, etc.) that have infected your computer despite all the security
measures you have taken (such as anti virus software, firewalls, etc.).
http://www.surfright.nl/en/hitmanpro

--------------------------------------------------------

If needed here are some online free scanners to help

http://www.eset.com/onlinescan/

http://onecare.live.com/site/en-us/default.htm

http://www.kaspersky.com/virusscanner

Other Free online scans
http://www.google.com/search?hl=en&source=hp&q=antivirus+free+online+scan&aq=f&oq=&aqi=g1

--------------------------------------------------------

Also do these to cleanup general corruption and repair/replace damaged/missing
system files.

Run DiskCleanup - Start - All Programs - Accessories - System Tools - Disk Cleanup

Start - type this in Search Box ->  COMMAND   find at top and RIGHT CLICK  - 
RUN AS ADMIN

Enter this at the prompt - sfc /scannow

How to analyze the log file entries that the Microsoft Windows Resource Checker
(SFC.exe) program generates in Windows Vista cbs.log
http://support.microsoft.com/kb/928228


Run checkdisk - schedule it to run at next start and then Apply OK your way out then restart.

How to Run Check Disk at Startup in Vista
http://www.vistax64.com/tutorials/67612-check-disk-chkdsk.html

-----------------------------------------------------------------------

If any Rootkits are found use this thread and other suggestions. (Run UnHackMe)

http://social.answers.microsoft.com/Forums/en-US/InternetExplorer/thread/a8f665f0-c793-441a-a5b9-54b7e1e7a5a4/

Hope this helps.


Rob Brown - MS MVP - Windows Desktop Experience : Bicycle - Mark Twain said it right.
Rob Brown - past Microsoft MVP - Windows Insider MVP 2016 - 2021
Microsoft MVP Windows and Devices for IT 2009 - 2020

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Go tohttp://technet.microsoft.com/en-us/sysinternals/bb963902.aspx and run Autoruns and click on the Everything Tab.  Look for userinit.exe  and when you find it unxheck the box to stop it from starting at startup.  Check the whole list as there may be more than one entry.  When done, click OK and reboot.   The message should be gone.

If that doesn't work, try a clean boot http://support.microsoft.com/kb/929135.  If the problem goes away then it's just a matter of tracking down the culprit causing the problem.   Follow the procedures in the article.  Once found, delete, remove, deactivate, or uninstall it.  Once done be sure to reset Vista back to normal status as explained in the procedures. If the problem occurs in clean mode then just restore the system to normal status and reboot - this solution is not going to work.

 

 

You may be infected with malware. Try to run anti-malware programs (in safe mode with networking ifnecessary). To fix this problem (if it is a problem) download, install, and run the following two programs:http://www.malwarebytes.org/mbam.php andhttp://www.safer-networking.org/en/index.html.  You may also want to try a free trial of Pandasoft (http://www.pandasecurity.com/usa/homeusers/solutions/global-protection/).  Before downloading pandasoft, uninstall whatever anti-virus program you are currently using (because installing and running two at the same time can cause conflicts, freezes, and all sorts of problems).  Once you've uninstalled your current AV program, download, install, update, and scan using Pandasoft.  I think you might be amazed at how much it finds that the other software missed.  Once complete, uninstall pandasoft and re-install your current AV program (unless you decide to switch which I did when I first tried it about 4 years ago).  You may also want to try the new, free Microsoft Security Essentialshttp://www.softpedia.com/progDownload/Microsoft-Security-Essentials-Download-131683.html (with the same caveat that only ONE AV program can be installed and running on your system at any one time).  You may also want to try the free Avira at:http://www.free-av.com/ and Avast at: http://www.avast.com/index.  Reboot after completing all the scans.  You may also want to try the free OneCare athttp://onecare.live.com/site/en-us/default.htm and let it run all the options (except the registry cleaner) because that’s good maintenance (it will take some time to complete but can be done in the background).

 

 

I hope this helps.  Please keep me posted.

 

Good luck!
Lorien - MCSE/MCSA/Network+/A+ --- If this post helps to resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others find the answer faster.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

the computer reads:

"16 bit MS-DOS Dubsystem

c:\Windows\System32\userinit.exe

The NTVDM CPU has encountered an illegal instruction.

cs:f209IP:/e09 cp:ff ff ff ff ff

Choose 'close' to terminate the application"

how do i fix this malware bug?

pls. help??

laptop was running fine (had this for a few years)-then all of a sudden this- it must be a malware bug -blocking startup loading in harddrive- this computer is dell inspirion 1721 had AMD 64 Athlon x2.

fyi- after rebooting and welcome logo -this msg. (above msg.) reads on my inspirion 1721 dell laptop- (only a few years old) - was originally loaded w/ premium home vista -the screen is black and once i hit ignore- i get nothing.  i have to alt-control-delete to get to the task mgr. to get to the help tab to get on windows support, control panel, and help online (which enables me to get online.  other than that -how can i get/access the start button to get to the system disk cleanup? will system restore do anything?

i have navigated my way to microsoft website to download malicious removal tool - and have downloaded malwarebytes(free version) - with nothing found. now i haven't run as 64 bit-ran it as 32 bit ( i believe - can't remember)-being that is laptop (actually my friend's laptop) has AMD 64 Athlon X2 sticker (which i just noticed) on it would mean this is a 64 bit laptop...right?

i also got into the control panel to run a windows update (which took forever to install) took like a hour - only to inform me that 1 important update could not be loaded.

went to cnet website to find reference to PC  tools - download free scan - this software found 2 threats w/91 infections between the two but all were LOW threats- wanted $29.00 dollars to supposedly fix and clean.  should i even bother or should i try Prevx.com or is this going to scan for free than ask me for money to fix too?

oh by the way ..thanks MVP and lorien - one

winnyp

 

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

i just checked the system through task manager help to open control panel and highlight system icon-

this is a 32-bit operating system not 64..

with 1918 mb of ram

processor = AMD Athlon(tm)64 X2 dual-core processor TK-55   1.80 Ghz chip

sorry...i should know better.......

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Did you attempt the suggestions Spirit and I gave you?  I  believe if you try mine they may well get rid of this problem (I'm not certain, but they're worth ashot).  If you want our help, you need to do the procedures we recommend or I don't see the point in asking in the first place.  We need your help to be able to help you.

Thank you for the detailed update, but it really doesn't change the procedures we recommended.  Please reply when you have xompleted them and let us know what happened.  If they didn't work, that's important to know because it eliminates some possibilities and helps us refocus on other options.  Please don't just say you did them and they didn't work unless that's the case because then you'll send us off in the completely wrong direction and our recommendations may not be appropriate.

I hope this helps.

Good luck!


Lorien - MCSE/MCSA/Network+/A+ --- If this post helps to resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others find the answer faster.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Please use the methods of checking for malware in my reply above - you can use only the
Free versions as indicated.The free version of Prevx will only detect however it is a good
checking tool to be sure the machine is clean. If Prevx finds something then use the other
tools including the on-line scans and if you still need removal instructions check Google
and/or come back here.

=========================================================

After you have thoroughly checked for malware these should help find and allow you to
remove the error message if it still there.

How to troubleshoot a problem by performing a clean boot in Windows Vista
http://support.microsoft.com/kb/929135

How to Check and Change the Startup Programs in Vista
http://www.vistax64.com/tutorials/79612-startup-programs-enable-disable.html

Autoruns - Free - See what programs are configured to startup automatically when your system
boots and you login. Autoruns also shows you the full list of Registry and file locations where
applications can configure auto-start settings.
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

Hope this helps.


Rob Brown - MS MVP - Windows Desktop Experience : Bicycle - Mark Twain said it right.
Rob Brown - past Microsoft MVP - Windows Insider MVP 2016 - 2021
Microsoft MVP Windows and Devices for IT 2009 - 2020

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

hello all,

i have tried all that was suggested with no luck.

maybe i'm missing a step- who knows.

i still keep getting the same stupid "the NTVDM CPU has encountered an illegal instruction". msg. 

would a restore "back to a specific time and date" help?

what else should i do?

thanks

Winnyp

 

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hi,

Did the error stop when you set for Clean Boot as in my last reply?

You can try a System Restore however that might not help.

Probably need to take to a real computer shop.

 


Rob Brown - MS MVP - Windows Desktop Experience : Bicycle - Mark Twain said it right.
Rob Brown - past Microsoft MVP - Windows Insider MVP 2016 - 2021
Microsoft MVP Windows and Devices for IT 2009 - 2020

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info


Last updated January 6, 2021 Views 6,851 Applies to: