My Ultra (Serv No. 106611410) is getting slower and slower. Two things: (1) I keep getting the following pop up window - HPZipm12.exe Application error - which reads "The instruction at ")x7c910a19" reference memory at "0x00000000." The memory could not be "read." Click OK to terminate the program? (2) I cannot advance to other links or buttons within a website. The computer just sits on the hourglass, and does nothing.

Manual Method:
Kill Process
--------
1. Press CTRL+SHIFT+ESC
2. Windows Task Manager should pop up
3. Go to "Processes" tab
4. Kill "WP345d.exe", "eb.exe", "fix.exe", "ppal.exe" by ending the process. (There may only be one of these listed)
5. A warning prompt will come up, Click Yes to End anyway.
6. To confirm the spyware is no longer running, the icon should dissapear when you hover your mouse over the system tray in the lower right. (The icon is a red brick wall)

Remove Registry Keys
--------
1. Press WIN+R (The WIN key is the key between CTRL and ALT that looks like a Windows logo)
2. In the run box, type "regedit"
3. Windows Registry Editor will pop-up. *Be cautious when editing the registry*
4. Navigate to the following folder on the left-hand pane, and delete the listed items below:

------------------------
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}

HKEY_CLASSES_ROOT\WP345d.DocHostUIHandler

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=201&q={searchTerms}"

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "UID" = "201"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "89770891803"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows PC Defender"

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Windows PC Defender"
------------------------

Registry Locations may vary, If you can not locate a certain item, use Edit > Find and type in the name of the key in quotes, For example:
To find...
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Windows PC Defender"
Search for "Windows PC Defender" without quotes.

4. Delete the Folders

Navigate to the following folders through My Computer, and delete the listed items.

C:\Documents and Settings\All Users\Application Data\
Delete the folder "3ad5ffe"

c:\Documents and Settings\All Users\Application Data\
Delete the folder "345d567" (This is a randomly generated set of numbers/letters)

c:\Documents and Settings\All Users\Application Data\
Delete folder "WPCDSys"

%UserProfile%\Application Data\ (Copy-Paste into Explorer's Address bar)
Delete folder "Windows PC Defender"

5. Reboot the PC and then refer to Step 1 to finish clean-up with MalwareBytes if necessary.

HI,

You can try out these two options one by one to fix it up:

A)
1 Unplug the printer.
2. Uninstall the drivers.
3. Reboot the machine.
4. Go to the lexmark site and download the drivers.
5. Install the new drivers.

B)You will get the "CANNOT RETRIEVE APPLICATION LIST" if your pc blocks the communication from the printer. This can be configured in your personal firewall. This can be Windows Firewall (found in Control Panel, Security Center), Symantec Client Firewall or similar. Depending on the configuration of this firewall you might or might not get pop-up messages from the firewall during installation. These pop-ups will allow you to permanently allow for this incoming communication. But your firewall might be set not to let you decide anything which will typically mean that the calls will be blocked out. This will often be the case if you have a company laptop configured by the company IT dept. You might then have to ask an admin to add exceptions the applications used by Lexmark as the configuration might not be open for you to change.

I think this is the complete list of applications:

Job Status Window Interface: C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxdijswx.exe
Lexmark Communications System: C:\WINDOWS\SYSTEM32\lxdicoms.exe
Lexmark Connect Time Executable: C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxditime.exe
Lexmark Device Monitor: C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe
Lexmark Imaging Studio: C:\Program Files\Lexmark 3500-4500 Series\App4R.exe
Printer Communication System: C:\WINDOWS\SYSTEM32\lxdicfg.exe
Printer Status Window Interface: C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxdipswx.exe

Goodluck,
Please don't forget to rate the solution.

TRY USING A PROGRAM CALLED ERROR REPAIR .IT SHOULD
SOLVE THIS PROBLEM.

You can try to disable this service by following the below steps:
Step 1: Open your computer's Control Panel by selecting "Start" > "Control Panel" from your computer's Start menu.
Step 2: Choose the "System and Maintenance" > "Problem Reports" menu option from the Control Panel menu.
Step 3: Select "Change Settings" > "Advanced Settings" from the Problem Reports program menu and turn off the automatic problem reporting feature in Windows.
Step 4: Exit the Problem Reporting application by selecting "File" > "Exit" from the File menu. Werfault.exe will now only run on your computer in the event of a catastrophic application problem.

If disabling the application does not work, you should keep in mind that many malware programs can show up on your system as seemingly legitimate files by using file names that are very similar to those of legitimate files. Whenever you are in doubt about a particular file, always scan your system for viruses.

You can follow this instruction: http://m0001.gamecopyworld.com/games/pc_brian_lara_international_cricket_2007.shtml


P.S.: If this information was helpful, please rate this solution.

I took this from another web site:
Michael Chiew said:
What did you do before this happened? What were your last deeds on the machine before the pop-up appeared?

I think what you're referring to is NTVDM CPU, not NTDVM CPU. Am I correct?

What do you know about 16-bit and 32-bit applications? Well, 16-bit applications are those that must work within the DOS (Disk Operating System) environment, a real-mode arena. NTVDM stands for NT Virtual Dos Machine.

In Windows XP, as in Windows 2000, or Windows 98, there are 16-bit and 32-bit environments (real mode and protected mode respectively).

Windows XP can only operate in 32-bit mode. All 16-bit applications must work within its own theatre of operation, typically, the first MB of physical memory (ram). Conversely, 32-bit applications must function above the first MB memory line. If either of these applications happens to slip into "alien" territory, you get an error message like "something" has encounter an illegal instruction. In other words, the wayward application is trying to slip by the immigration checkpoint.

In your case, updatemgr.exe (I suspect updatemgr.exe is a 32-bit application) has in all likelihood wondered into the 16-bit arena. Hence, NTVDM CPU issues that warning. 

Why do you continue to get the message. It's because updatemgr.exe incessantly misbehaves itself on start-up, always trying to load itself into a particular memory address where it is not welcome. Why the persistence? Updatemgr.exe has gone bonkers. It is either corrupted or damaged.

On the other hand, one cannot discount the possibility that NTVDM (NTVDM.EXE) is corrupted or damaged. So your problem lies with either updatemgr.exe or NTVDM.EXE, or both.

There are 2 things you could do.

First, establish who owns updatemgr.exe, Microsoft or some third-party owner. Second, rename updatemgr.exe and see whether the message goes away.

To establish ownership (and the function of updatemgr.exe), do a search for the file. 

Click START, select FIND. In the FIND dialog box, type: updatemgr.exe. See the directory in which the file has lodged. In Windows Explorer, get to the file, right-click on it, select PROPERTIES. Who owns it? Is there an indication of its function.

Next, rename the file. Right-click it, select RENAME and rename it to, say, updatemgr.old. RESTART your computer. Do you still get the error message. Not likely.

To clean things up a bit, perhaps it is a good idea for you to replace the current NTVDM.EXE with a new copy. Find out where NTVDM.EXE is. Then, click START, select RUN. Type in the RUN dialog box SFC to run the System File Checker. Insert your OS CD, follow the prompts, extract a copy of NTVDM.EXE and send it to its place of residence. Of course, you should also replace a copy of updatemgr.exe.

That should eliminate your problem for good.

This is a spyware/virus. Run your anti virus. then then if it keeps popping up when you restart, you have to do the following. This involves getting into the registry. Do so if you know how. If not get someone who knows how to do it.
Ok, do the following step and get rid of it.
Open Run , type regedit and press enter
Go to

HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon

and check for the key Shell, the value of this must be Explorer.exe . if you can see some other after that like Explorer.exe C:\PROGRA~1\MYWEBS~1\bar\2.bin... , then remove the second file from the value, means it must only Explorer.exe

Ok, then check for the key Userinit. the value must be C:\WINDOWS\system32\userinit.exe, (including the comma) . If after that some thing is there , then delete it.
Ok thats all. restart your system .
If I could be of further assistance, let me know. If this helps or solves the issue, please rate it.
Thanks, Joe


I’m happy to assist further over the phone at https://www.6ya.com/expert/joe_8b8c2cd6ce148309

Boot the system in safe mode
1.) restart the system
2.) pump the F8 Key until a screen comes up with different options
3.) select safe mode,

Try right clicking there and see what happens,, I,m guessing here this is a result of damages done by a previoulsy removed virus (GUESSING) it is possible that the same one could have been shard by all 3,,

I'd advise you'd uninstall norton and use the new avg free
www.free.grisoft.com
Let me know what hgappens and we can tgake this a bit further

Adobe Photoshop Elements are one of the raster graphics editors for entry-level photographer, image editor, and hobbyists. Using this software, users can create magic with photos. Pictures can be edited, organized and share images by accessing its unique and salient features.
Our support service is toll-free, there are available expert technicians who ready for your support if the customer contact with the problem then expert immediate pick up the call and taking action on the technical issue. They can also be connected with online through the remote system, our toll-free number is 1833 283 8333 dials any time and anywhere. If the customer wants to more service with our expert technicians visit our service website and get instant solution.

https://servicenumber.org/adobe.html

First uninstall your present printer driver and reinstall it and it will solver your problem.