(OT) Need urgent answer from HT or Pyro

[bloom25]

That's the thing, I don't use this computer except on weekends and holiday breaks.  I've ran 4 scan disks now, no errors found.  (1 was a through scandisk too, which took 3 hours to do.)

The ATMSYS.DRV is just extra fonts that abobe programs use.

The other I don't know about.



------------------
bloom25
THUNDERBIRDS

[Dinger]

Weird crap happens.  Two weeks ago, all my .exe files (MIME: applications/x-msdownload) got assigned to RealPlayer. I tried to fix it before reset and managed to get things screwed even worse.  I came damn close to giving the registry an enema.
While when weird stuff like this happens, we want to blame a virus, and hence a run of the latest virus program is justified, often it's just an error in the wrong sector of the hard disk, or any number of bizarre nonspecific software bugs that cause it to happen.  What you're looking at is when two (or more) programs collide, and as Aristotle put it, of the accidental there can be no science.
Sacrifice a virgin, reinstall windows and get on with your life.

[Spatula]

I'd have to agree with Vulcan about the Trojan thang. Get a good virus scanner and get the latest virus definition file and give it a good scan.

[bloom25]

I've done 2 complete Norton Antivirus 5.0 scans with new def files.  No viruses found.

Here's what I do know:

There are two "patches" listed in Dr Watson.  One is ATMSYS.drv and is a valid abobe font thing.  The other says only module type GDI, and <unknown>.

While typing a response earlier I got 2 errors.  Here is the Dr. Watson logs in case anyone can figure them out:

BSD Socket API for Windows attempted to read from memory that does not exist.  It may be using an uninitialized variable, or it may be attempting to access memory after having freed it.

Module Name: WSOCK32.DLL
Description: BSD Socket API for Windows
Version: 4.10.1998
Product: Microsoft(R) Windows(R) Operating System
Manufacturer: Microsoft Corporation

Application Name: Rnaapp.exe
Description: Dial-Up Networking Application
Version: 4.10.1998
Product: Microsoft(R) Windows(R) Operating System
Manufacturer: Microsoft Corporation

--------------------
Adobe Type Manager has altered Windows system files.

Module Name: ATMSYS.DRV
Description: Adobe Type Manager
Version: R v4.00-32S058G06NN
Product: Adobe Type Manager
Manufacturer: Adobe Systems Incorporated

--------------------
<unknown> has altered Windows system files.

Module Name: <unknown>


Error 2:

Win32 Kernel core component attempted to use a null data pointer variable.

Module Name: KERNEL32.DLL
Description: Win32 Kernel core component
Version: 4.10.1998
Product: Microsoft(R) Windows(R) Operating System
Manufacturer: Microsoft Corporation

Application Name: Iexplore.exe
Description: Microsoft Internet Explorer
Version: 5.00.2314.1000
Product: Microsoft(R) Windows (R) 2000 Operating System
Manufacturer: Microsoft Corporation

--------------------
Adobe Type Manager has altered Windows system files.

Module Name: ATMSYS.DRV
Description: Adobe Type Manager
Version: R v4.00-32S058G06NN
Product: Adobe Type Manager
Manufacturer: Adobe Systems Incorporated

--------------------
<unknown> has altered Windows system files.

Module Name: <unknown>

The first error I believe caused the second.  From my basic C programming classes I think a null pointer exception may be caused because something got dumped from memory, then the program tried to access it via a pointer later.

The fact that AH is using my Windows\system folder as temp space can't be good either.

Something on this system is messed up, but I can't reformat and reinstall until the 8th of January at the earliest.  



------------------
bloom25
THUNDERBIRDS

[bloom25]

Ok, I have 3 clues in the great mystery.  A.  Dr. Watson logs show what may be a virus of some type.  2 NAV scans come back negative though...

B.  Possible bad stick of RAM.  All the invalid page faults always point to the same address.  Anybody know of a utility to check RAM?  (I might pick up a stick of ram at work Friday.)

C.  I did the following as suggested in bug reports thread I posted related to the AH problem:  control panel > network > tcp/ip properties.  I just clicked ok twice and windows had to rebuild a driver info database...  Does this happen to the rest of you?

Thanks for all the help guys, this is great.  



------------------
bloom25
THUNDERBIRDS

[gatt]

I knew it was RAM's fault again  
Jokes apart, sometimes Windows needs a complete format c: and reinstall. Good luck Bloom.

[bloom25]

SUCCESS!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!            

It's FIXED!

I'll post a new thread, make sure everyone reads it.  The problem was a BRAND new trojan horse.  



------------------
bloom25
THUNDERBIRDS