Sorry can't seem to insert a link.
Dell Dimension DIM4600, Intel Pentium 4CPU 2.8 GHz, 2.5 GB Ram. C drive is pretty full. Its an 74GB hd and there is about 18.4GB free. Windows XP sp3.
Chkdsk appears to run clean.
When I attempt a normal logon now this is the series of events:
- "Winlogon application error, The instruction at "0x00182581" referenced memory at "0x012e0000". The memory could not be read. Select ok to terminate, cancel to debug". [same error happens when i start up in safe mode but the referenced memory changes to "0x00dd0000"]
- if i try either ok or cancel a blue screen appears that says "stop: c000021a (fatal system error) with a status of 0xC0000005"
so i was able to download the blue screen view but it appears not to see any .dmp files. i attempted a search for them on my computer but only found two, one from 2004 and another from 2009 and both weren't in the c:\minidump (i can't find a minidump folder even when i turn on see hidden files/folders). checked my comp properties and confirmed %root sector%\minidump is where they should go. so when i open up blue screen view there is nothing located in either window.
If I leave the winlogon error up on the screen during a normal startup i then also receive:
-Generic Host Process for Win 32 services encountered a prob and needs to close
-Windows Explorer has encountered a problem and needs to close
-winlogon encountered a problem......
and all three offer up the option to send the report to microsoft
later, attempted a normal bootup and before selecting the user got:
- "svchost application error, The instruction at "0x001a3b57" referenced memory at "0x00000000". The memory could not be read.
In my McAFee quarantine folder it has been finding a trojan detected as "New Malware.j" DAT version 6066.0000 Engine Version 5400.1158 located File \\?\c:\windows\temp\svchost.exe (5 previous versions all the same with just smaller DAT versions that seem to correspond to date)
AdAware is running as we speak and it has found 3 things. I have run it a bunch throughout this process, it always seems to find something.
I was able to run DDS and have attached the attach file. I stopped at doing the GMER portion since the advisor from other forum only mentioned the DDS.
Thanks in advance for your help!
apologies for the reply but since the last topic was unfinished when I wrote it I needed to add a bit more info: as I mentioned adaware was running and took over 5 hours, so did mcaffee. mcaffee found nothing. adaware found 4 viruses and 10 cookies. the 4 trojans were: c:\extensions.exe\extensions.exe, c:\windows\system32\winlogon.exe,
c:\windows\system32\winlogon.exe, c:\documents and settings\char\..\ngs\temp\tmp1d060708\test1.exe. it recommended a restart to ensure the 4 that were quarantined would be cleared out. upon restarting got the same blue screen fatal error described above. now when we attempt all versions of safe mode or last known good config the same fatal error appears. it appears i may be in "boot from a disk" land (and of course i'm on travel and troubleshooting with my wife over the phone and email
Posts merged ~BP
Edited by Budapest, 09 August 2010 - 04:27 PM.