[SouthCountryMom]

Last night as I was playing around with a newly installed program (Paint Shop Pro Photo X2) (on my Vista Home Premium, Toshiba Satellite laptop) McAfee popped up to tell me that ntvdm.exe in the System 32 folder was trying to access and make changes to the Win.ini file.

Since I do not recall ever seeing this notification before I blocked the change from being made but I'm not sure I did the right thing.

Please advise.

Thanks a bunch!

[lunarlander]

According to processlibrary.com, "ntvdm.exe is process that belongs to the Windows 16-bit Virtual Machine. It provides an environment for a 16-bit process to execute on a 32-bit platform." So it is possible that it might modify Win.INI, which is a 16bit windows file.
However, if you are not running any old windows programs, WIN.INI shouldn't have to be touched. Old programs meaning its a win95/98/ME program. I would do an antivirus scan just to be safe.

[rainforest123]

SCM:
Welcome to Tech Guy Forum.

ll makes a good point.
If this is your program http://www.corel.com/servlet/Satelli...0&tabview=tab0 , I don't think it was intended to run in a 16 bit environment.

System Requirements

* Windows Vista® or Windows® XP, with latest service packs installed
* 512 MB RAM (768 MB recommended)
* 768 MB RAM required if using Windows Vista
* 1 GHz processor (2 GHz recommended)
* 1.5 GB hard disk space
* 24-bit color display, 1024x768 resolution
* Microsoft DirectX® 9.0c or higher (included in Windows Vista and XP)
* DVD drive

Was PPPP X2 purchased as shrink wrapped software, as a download from www.corel.com , or some other source.

Sometimes, software sold from web sites other than the author, in this case Corel,
are not legitimate and may be infested with malicious software [ malware ].

RF123