Hello, I have installed a Windows game using Wine. ("Ritter Rost", basically a simple point and click adventure for children, see http://www.terzio.de/produkte/677/Ritter_Rost_Geisterjagd_Wasserpost.html) When starting the game, I receive a message that some drivers are being installed. (That's okay, I receive the same message when running the game for the first time on Windows.) The next message asks me to reboot the systems. I am selecting "winboot" from the Gnome menu. After starting the game again, I receive the message that there are pending installation issues and I have to reboot the system. Finally, after actually rebooting Linux, I receive the original message, back to start. Any ideas what I might do? Thanks, Jochen -- I have always wished for my computer to be as easy to use as my telephone; my wish has come true because I can no longer figure out how to use my telephone. -- (Bjarne Stroustrup, http://www.research.att.com/~bs/bs_faq.html#really-say-that My guess: Nokia E50)
Jochen Wiedmann wrote:> When starting the game, I receive a message that some drivers are > being installed. (That's okay, I receive the same message when running > the game for the first time on Windows.)Congrats you playing some game full of mallware! Most likely with rootkit as well.
I may be able to provide a little bit more information. After a complete reboot, I receive the error message below. -- I have always wished for my computer to be as easy to use as my telephone; my wish has come true because I can no longer figure out how to use my telephone. -- (Bjarne Stroustrup, http://www.research.att.com/~bs/bs_faq.html#really-say-that My guess: Nokia E50) [jwi at mcjwi ~]$ env WINEPREFIX="/home/jwi/.wine" wine "C:\Terzio\Ritter_Rost_Burg\Ritter.exe" Installing lowerfilters...wine: Unhandled page fault on write access to 0x00454000 at address 0x6e86e6e1 (thread 0022), starting debugger... Unhandled exception: page fault on write access to 0x00454000 in 32-bit code (0x6e86e6e1). Register dump: CS:0073 SS:007b DS:007b ES:007b FS:0033 GS:003b EIP:6e86e6e1 ESP:7eced680 EBP:7eced6c8 EFLAGS:00010246( - 00 -RIZP1) EAX:00000ffd EBX:6e8c04c0 ECX:00000000 EDX:00453000 ESI:0045c09a EDI:00050000 Stack dump: 0x7eced680: 0045c068 00450000 7eced6a8 60388f5e 0x7eced690: ffffffff 7eced6b4 7eced6b8 00000040 0x7eced6a0: 7ece0005 0045c068 7eced6c8 60388fca 0x7eced6b0: ffffffff 00453000 00001000 6045710c 0x7eced6c0: 0045c068 00450000 7eced978 60455cab 0x7eced6d0: 00453000 00000016 0045c070 00050000 Backtrace: =>1 0x6e86e6e1 LdrProcessRelocationBlock+0xc1() in ntdll (0x7eced6c8) 2 0x60455cab in winedevice (+0x5cab) (0x7eced978) 3 0x604562d6 in winedevice (+0x62d6) (0x7eced9c8) 4 0x604935eb in advapi32 (+0x335eb) (0x7eceda18) 5 0x6e89728e call_thread_entry_point+0xe() in ntdll (0x7eceda28) 6 0x6e8988f2 in ntdll (+0x588f2) (0x7ecedac8) 7 0x6e898aed in ntdll (+0x58aed) (0x7ecee3b8) 8 0x6016051f (0x7ecee4b8) 0x6e86e6e1 LdrProcessRelocationBlock+0xc1 in ntdll: addl %edi,0x0(%edx,%eax,1) Modules: Module Address Debug info Name (28 modules) PE 450000- 4e1000 Deferred acedrv10.sys ELF 798000- 7bb000 Deferred ld-linux.so.2 ELF 7bd000- 931000 Deferred libc.so.6 ELF 933000- 95c000 Deferred libm.so.6 ELF 95e000- 963000 Deferred libdl.so.2 ELF 965000- 97f000 Deferred libpthread.so.0 ELF c74000- c8b000 Deferred libresolv.so.2 ELF 60023000-6015a000 Deferred libwine.so.1 ELF 602ed000-60437000 Deferred kernel32<elf> \-PE 60310000-60437000 \ kernel32 ELF 60437000-60444000 Deferred libnss_files.so.2 ELF 60444000-60458000 Export winedevice<elf> \-PE 60450000-60458000 \ winedevice ELF 60458000-604b1000 Export advapi32<elf> \-PE 60460000-604b1000 \ advapi32 ELF 604b1000-604ea000 Deferred ntoskrnl<elf> \-PE 604c0000-604ea000 \ ntoskrnl ELF 604ea000-60555000 Deferred rpcrt4<elf> \-PE 60500000-60555000 \ rpcrt4 ELF 6056c000-605dd000 Deferred msvcrt<elf> \-PE 60580000-605dd000 \ msvcrt ELF 63e10000-63e30000 Deferred iphlpapi<elf> \-PE 63e20000-63e30000 \ iphlpapi ELF 6e82a000-6e8dc000 Export ntdll<elf> \-PE 6e840000-6e8dc000 \ ntdll ELF 75619000-7562e000 Deferred hal<elf> \-PE 75620000-7562e000 \ hal ELF 7bf00000-7bf03000 Deferred <wine-loader> Threads: process tid prio (all id:s are in hex) 0000000c 00000023 0 00000021 0 0000001d 0 00000014 0 00000013 0 00000012 0 0000000e 0 0000000d 0 0000000f 00000016 0 00000015 0 00000011 0 00000010 0 00000017 00000018 0 00000019 0000001a 0 0000001b 0000001c 0 0000001e (D) C:\windows\system32\winedevice.exe 00000022 0 <= 00000020 0 0000001f 0 Backtrace: =>1 0x6e86e6e1 LdrProcessRelocationBlock+0xc1() in ntdll (0x7eced6c8) 2 0x60455cab in winedevice (+0x5cab) (0x7eced978) 3 0x604562d6 in winedevice (+0x62d6) (0x7eced9c8) 4 0x604935eb in advapi32 (+0x335eb) (0x7eceda18) 5 0x6e89728e call_thread_entry_point+0xe() in ntdll (0x7eceda28) 6 0x6e8988f2 in ntdll (+0x588f2) (0x7ecedac8) 7 0x6e898aed in ntdll (+0x58aed) (0x7ecee3b8) 8 0x6016051f (0x7ecee4b8)
vitamin wrote:> > Congrats you playing some game full of mallware! Most likely with rootkit as well.xD @Jochen Wiedmann: see Wikipedia for "malware" please My guess: Nokia E50 - I dont think so...
Jochen Wiedmann wrote:> PE 450000- 4e1000 Deferred acedrv10.sysOk not malware but some protection system driver. If you say you program is working, then remove ~/.wine directory and reinstall it. It could be a leftover from something else you installed.