Indeed, what Daniel said is right. Only it is the process NTVDM.EXE which needs to be killed, not the vtvdm.exe. If you kill ntvdm.exe, the process wowexec.exe will be killed automatically. It is not a question of the attribute read only, but the ...