Hello,
I have installed a Windows game using Wine. ("Ritter Rost", basically
a simple point and click adventure for children, see
http://www.terzio.de/produkte/677/Ritter_Rost_Geisterjagd_Wasserpost.html)
When starting the game, I receive a message that some drivers are
being installed. (That's okay, I receive the same message when running
the game for the first time on Windows.) The next message asks me to
reboot the systems. I am selecting "winboot" from the Gnome menu.
After starting the game again, I receive the message that there are
pending installation issues and I have to reboot the system. Finally,
after actually rebooting Linux, I receive the original message, back
to start.
Any ideas what I might do?
Thanks,
Jochen
--
I have always wished for my computer to be as easy to use as my
telephone; my wish has come true because I can no longer figure out
how to use my telephone.
-- (Bjarne Stroustrup,
http://www.research.att.com/~bs/bs_faq.html#really-say-that
My guess: Nokia E50)
Jochen Wiedmann wrote:> When starting the game, I receive a message that some drivers are > being installed. (That's okay, I receive the same message when running > the game for the first time on Windows.)Congrats you playing some game full of mallware! Most likely with rootkit as well.
I may be able to provide a little bit more information. After a
complete reboot, I receive the error message below.
--
I have always wished for my computer to be as easy to use as my
telephone; my wish has come true because I can no longer figure out
how to use my telephone.
-- (Bjarne Stroustrup,
http://www.research.att.com/~bs/bs_faq.html#really-say-that
My guess: Nokia E50)
[jwi at mcjwi ~]$ env WINEPREFIX="/home/jwi/.wine" wine
"C:\Terzio\Ritter_Rost_Burg\Ritter.exe"
Installing lowerfilters...wine: Unhandled page fault on write access
to 0x00454000 at address 0x6e86e6e1 (thread 0022), starting
debugger...
Unhandled exception: page fault on write access to 0x00454000 in
32-bit code (0x6e86e6e1).
Register dump:
CS:0073 SS:007b DS:007b ES:007b FS:0033 GS:003b
EIP:6e86e6e1 ESP:7eced680 EBP:7eced6c8 EFLAGS:00010246( - 00 -RIZP1)
EAX:00000ffd EBX:6e8c04c0 ECX:00000000 EDX:00453000
ESI:0045c09a EDI:00050000
Stack dump:
0x7eced680: 0045c068 00450000 7eced6a8 60388f5e
0x7eced690: ffffffff 7eced6b4 7eced6b8 00000040
0x7eced6a0: 7ece0005 0045c068 7eced6c8 60388fca
0x7eced6b0: ffffffff 00453000 00001000 6045710c
0x7eced6c0: 0045c068 00450000 7eced978 60455cab
0x7eced6d0: 00453000 00000016 0045c070 00050000
Backtrace:
=>1 0x6e86e6e1 LdrProcessRelocationBlock+0xc1() in ntdll (0x7eced6c8)
2 0x60455cab in winedevice (+0x5cab) (0x7eced978)
3 0x604562d6 in winedevice (+0x62d6) (0x7eced9c8)
4 0x604935eb in advapi32 (+0x335eb) (0x7eceda18)
5 0x6e89728e call_thread_entry_point+0xe() in ntdll (0x7eceda28)
6 0x6e8988f2 in ntdll (+0x588f2) (0x7ecedac8)
7 0x6e898aed in ntdll (+0x58aed) (0x7ecee3b8)
8 0x6016051f (0x7ecee4b8)
0x6e86e6e1 LdrProcessRelocationBlock+0xc1 in ntdll: addl %edi,0x0(%edx,%eax,1)
Modules:
Module Address Debug info Name (28 modules)
PE 450000- 4e1000 Deferred acedrv10.sys
ELF 798000- 7bb000 Deferred ld-linux.so.2
ELF 7bd000- 931000 Deferred libc.so.6
ELF 933000- 95c000 Deferred libm.so.6
ELF 95e000- 963000 Deferred libdl.so.2
ELF 965000- 97f000 Deferred libpthread.so.0
ELF c74000- c8b000 Deferred libresolv.so.2
ELF 60023000-6015a000 Deferred libwine.so.1
ELF 602ed000-60437000 Deferred kernel32<elf>
\-PE 60310000-60437000 \ kernel32
ELF 60437000-60444000 Deferred libnss_files.so.2
ELF 60444000-60458000 Export winedevice<elf>
\-PE 60450000-60458000 \ winedevice
ELF 60458000-604b1000 Export advapi32<elf>
\-PE 60460000-604b1000 \ advapi32
ELF 604b1000-604ea000 Deferred ntoskrnl<elf>
\-PE 604c0000-604ea000 \ ntoskrnl
ELF 604ea000-60555000 Deferred rpcrt4<elf>
\-PE 60500000-60555000 \ rpcrt4
ELF 6056c000-605dd000 Deferred msvcrt<elf>
\-PE 60580000-605dd000 \ msvcrt
ELF 63e10000-63e30000 Deferred iphlpapi<elf>
\-PE 63e20000-63e30000 \ iphlpapi
ELF 6e82a000-6e8dc000 Export ntdll<elf>
\-PE 6e840000-6e8dc000 \ ntdll
ELF 75619000-7562e000 Deferred hal<elf>
\-PE 75620000-7562e000 \ hal
ELF 7bf00000-7bf03000 Deferred <wine-loader>
Threads:
process tid prio (all id:s are in hex)
0000000c
00000023 0
00000021 0
0000001d 0
00000014 0
00000013 0
00000012 0
0000000e 0
0000000d 0
0000000f
00000016 0
00000015 0
00000011 0
00000010 0
00000017
00000018 0
00000019
0000001a 0
0000001b
0000001c 0
0000001e (D) C:\windows\system32\winedevice.exe
00000022 0 <= 00000020 0
0000001f 0
Backtrace:
=>1 0x6e86e6e1 LdrProcessRelocationBlock+0xc1() in ntdll (0x7eced6c8)
2 0x60455cab in winedevice (+0x5cab) (0x7eced978)
3 0x604562d6 in winedevice (+0x62d6) (0x7eced9c8)
4 0x604935eb in advapi32 (+0x335eb) (0x7eceda18)
5 0x6e89728e call_thread_entry_point+0xe() in ntdll (0x7eceda28)
6 0x6e8988f2 in ntdll (+0x588f2) (0x7ecedac8)
7 0x6e898aed in ntdll (+0x58aed) (0x7ecee3b8)
8 0x6016051f (0x7ecee4b8)
vitamin wrote:> > Congrats you playing some game full of mallware! Most likely with rootkit as well.xD @Jochen Wiedmann: see Wikipedia for "malware" please My guess: Nokia E50 - I dont think so...
Jochen Wiedmann wrote:> PE 450000- 4e1000 Deferred acedrv10.sysOk not malware but some protection system driver. If you say you program is working, then remove ~/.wine directory and reinstall it. It could be a leftover from something else you installed.