"Memory could not be read" Errors

[arcticzero]

Lately I keep getting weird errors when opening certain applications.

"The instruction at "0x03ecd784" referenced memory at "0x3d726968". The
memory could not be "written""

Right now it's happening when I open Half-Life and Gunbound every
single time I run them...but sometimes it happens to other
applications, but not nearly as often. Here's a HijackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 11:28:35 AM, on 1/1/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Apache Group\Apache2\bin\Apache.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Apache Group\Apache2\bin\Apache.exe
C:\Program Files\MySQL\MySQL Server 4.1\bin\mysqld-nt.exe
C:\Program Files\No-IP\DUC20.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Common Files\Stardock\SDMCP.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Common Files\stardock\TrayServer.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\HighCriteria\TotalRecorder\TotRecSched.exe
C:\Program Files\NetLimiter\NetLimiter.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\MICROS~3\GAMECO~1\common\swtrayv4.exe
C:\Program Files\PeerGuardian2\pg2.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\CursorXP\CursorXP.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Apache Group\Apache2\bin\ApacheMonitor.exe
C:\Program Files\Pixoria\Konfabulator\Konfabulator.exe
C:\Program Files\No-IP\DUC20.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Azureus\Azureus.exe
C:\Program Files\Java\jre1.5.0_04\bin\javaw.exe
C:\WINDOWS\EXPLORER.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Trillian\trillian.exe
C:\Program Files\DAP\DAP.EXE
C:\PROGRA~1\WINZIP\winzip32.exe
C:\tmp\HijackThis.exe
C:\WINDOWS\system32\mmc.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://cgi.gamefaqs.com/boards/gentopic.asp?board=2000015
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://cgi.gamefaqs.com/boards/gentopic.asp?board=2000015
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title =
Microsoft Internet Explorer provided by Arctic
F2 - REG:system.ini: Shell=C:\WINDOWS\EXPLORER.EXE
O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} -
C:\Program Files\DAP\DAPBHO.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
- C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -
C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} -
C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A}
- C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no
file)
O4 - HKLM\..\Run: [1A:Stardock TrayMonitor] "C:\Program Files\Common
Files\stardock\TrayServer.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft
AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [Zone Labs Client]
C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [TotalRecorderScheduler] "C:\Program
Files\HighCriteria\TotalRecorder\TotRecSched.exe"
O4 - HKLM\..\Run: [NetLimiter] C:\Program
Files\NetLimiter\NetLimiter.exe /s
O4 - HKLM\..\Run: [LogonStudio] "C:\Program
Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKLM\..\Run: [PtiuPbmd] Rundll32.exe ptipbm.dll,SetWriteBack
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program
Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program
Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SideWinderTrayV4]
C:\PROGRA~1\MICROS~3\GAMECO~1\common\swtrayv4.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKCU\..\Run: [PeerGuardian] C:\Program Files\PeerGuardian2\pg2.exe
O4 - HKCU\..\Run: [Creative Detector] C:\Program
Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [CursorXP] C:\Program Files\CursorXP\CursorXP.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE
C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [Yz Shadow] -
O4 - HKCU\..\Run: [WinRoll] -
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Konfabulator.lnk = C:\Program
Files\Pixoria\Konfabulator\Konfabulator.exe
O4 - Startup: No-IP DUC.lnk = C:\Program Files\No-IP\DUC20.exe
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program
Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Monitor Apache Servers.lnk = C:\Program
Files\Apache Group\Apache2\bin\ApacheMonitor.exe
O8 - Extra context menu item: &Download with &DAP - C:\Program
Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program
Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\PROGRA~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} -
C:\Program Files\AIM\aim.exe
O14 - IERESET.INF:
START_PAGE_URL=http://cgi.gamefaqs.com/boards/gentopic.asp?board=2000015
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class)
- C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class)
-
http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1128521299938
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -
http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -
"C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: MCPClient - C:\Program Files\Common
Files\Stardock\mcpstub.dll
O20 - Winlogon Notify: WB -
C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program
Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apache2 - Unknown owner - C:\Program Files\Apache
Group\Apache2\bin\Apache.exe" -k runservice (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner
- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program
Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program
Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program
Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: C-DillaSrv - C-Dilla Ltd -
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology
Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - C:\Program Files\Common
Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IIS Admin (IISADMIN) - Unknown owner -
C:\WINDOWS\System32\inetsrv\inetinfo.exe (file missing)
O23 - Service: InCD File System Service (InCDsrv) - Unknown owner -
C:\Program Files\Ahead\InCD\InCDsrv.exe (file missing)
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program
Files\iPod\bin\iPodService.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: NetLimiter (nlsvc) - Unknown owner - C:\Program
Files\NetLimiter 2\nlsvc.exe (file missing)
O23 - Service: NoIPDUCService - Vitalwerks LLC - C:\Program
Files\No-IP\DUC20.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Unknown
owner - C:\Program Files\Norton SystemWorks\Norton
Utilities\NPROTECT.EXE (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA
Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH -
C:\WINDOWS\system32\oodag.exe
O23 - Service: Simple Mail Transfer Protocol (SMTP) (SMTPSVC) - Unknown
owner - C:\WINDOWS\System32\inetsrv\inetinfo.exe (file missing)
O23 - Service: Speed Disk service - Unknown owner -
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe (file missing)
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) -
TuneUp Software GmbH - C:\Program Files\TuneUp Utilities
2006\WinStylerThemeSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. -
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: World Wide Web Publishing (W3SVC) - Unknown owner -
C:\WINDOWS\System32\inetsrv\inetinfo.exe (file missing)

Please, any help on this would be appreciated. I'm completely stuck on
this issue...

 

[Rock]

Lately I keep getting weird errors when opening certain applications.

"The instruction at "0x03ecd784" referenced memory at "0x3d726968". The
memory could not be "written""

Right now it's happening when I open Half-Life and Gunbound every
single time I run them...but sometimes it happens to other
applications, but not nearly as often. Here's a HijackThis log:

<snip>

Please don't post HijackThis logs here. There are specialty forums for
that purpose. Here is a list of some:

Forums to Interpret HijackThis Logs:
http://www.spywareinfo.com/forums/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/

 

[Rock]

Lately I keep getting weird errors when opening certain applications.

"The instruction at "0x03ecd784" referenced memory at "0x3d726968". The
memory could not be "written""

Right now it's happening when I open Half-Life and Gunbound every
single time I run them...but sometimes it happens to other
applications, but not nearly as often. Here's a HijackThis log:

Also what kind of anti-malware scans have you been doing? Are you using
a combination of updated programs run in safe mode?

THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm

Richard Harper’s Guide to Cleaning Pests
http://rgharper.mvps.org/cleanit.htm

 

[cquirke (MVP Windows shell/user)]

Lately I keep getting weird errors when opening certain applications.

"The instruction at "0x03ecd784" referenced memory at "0x3d726968". The
memory could not be "written""

Google("The memory could not be written")

Odd causes, such as bad codecs, and bad printer name...

http://support.microsoft.com/default.aspx?scid=kb;en-us;839121

....and the common theme seems to be: Bad software.

Right now it's happening when I open Half-Life and Gunbound every
single time I run them...but sometimes it happens to other
applications, but not nearly as often. Here's a HijackThis log:

Someone's sure to beef about your posting a HJT log here, but it
doesn't bother me. I'll snip what I don't care about...

Platform: Windows XP SP2 (WinNT 5.01.2600)

Cool. Did this problem start directly after adding SP2? If so, look
for a thread on SP2 issues elsewhere; DEP, sware, etc. In any case, I
might try disabling DEP, although right now is a bad time to do that
as it's one of the few mitigations for the unpatched WMF vulnerability

Running processes:
C:\Program Files\Apache Group\Apache2\bin\Apache.exe

Are you running that underfoot?

C:\Program Files\Alwil Software\Avast4\ashServ.exe
DEP-OK?

C:\WINDOWS\system32\oodag.exe

Wazzat? You have a LOT of underfootware running :-(

C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe

You'd want to uninstall that and install Sun's JRE 1.5.0.06

O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} -
C:\Program Files\DAP\DAPBHO.dll

Do a scan to find and kill commercial malware, starting with Download
Accelerator Pus - use AdAware, Spybot, MSAS Beta, etc.

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program
Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

Oxygen thief, that one...

O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) -
TuneUp Software GmbH - C:\Program Files\TuneUp Utilities
2006\WinStylerThemeSvc.exe

....and that looks like a destabalizer...

Please, any help on this would be appreciated. I'm completely stuck on
this issue...

You have a pile of crud running underfoot, so I'd start by using
MSConfig to suppress these, and add them back one by one on a
test-to-break basis.

---------- ----- ---- --- -- - - - -

Don't pay malware vendors - boycott Sony

 

[Me2Ewe]

There is always going to be someone to bitch, but then again there will also
be someone who knows the answer [and they aren't the same persopn usually]..
I have the same thing ebvery time I shutdown
Aspnet_state.exe-Application Error
The instruction at "0x6a2a2fec" referenced memory at "0x00000000".
The memory could not be "read".
Click on OK to terminate the program.
Click on CANCEL to debug the program.

iTouch.exe - Application Error
The instruction at "0x008c286b" referenced memory at "0x0006442a".
The memory could not be "read".
Click on OK to terminate the program.
Click on CANCEL to debug the program.

iTouch.exe - Application Error
The instruction at "0x77c2ba4e" referenced memory at "0x000641bc".
The memory could not be "written".
Click on OK to terminate the program.
Thanks for any help you can give me

Sorry for butting into your post

 

[Unk]

There is always going to be someone to bitch, but then again there will also
be someone who knows the answer [and they aren't the same persopn usually]..
I have the same thing ebvery time I shutdown
Aspnet_state.exe-Application Error
The instruction at "0x6a2a2fec" referenced memory at "0x00000000".
The memory could not be "read".
Click on OK to terminate the program.
Click on CANCEL to debug the program.

iTouch.exe - Application Error
The instruction at "0x008c286b" referenced memory at "0x0006442a".
The memory could not be "read".
Click on OK to terminate the program.
Click on CANCEL to debug the program.

iTouch.exe - Application Error
The instruction at "0x77c2ba4e" referenced memory at "0x000641bc".
The memory could not be "written".
Click on OK to terminate the program.
Thanks for any help you can give me

Several things you could try:

Have you played with the Windows Virtual Memory settings?
If so, undo your settings and let Windows handle it on it's own.

Right-click "My Computer", "Properties", "Advanced" tab. Under Performance section, click the
"Settings" button, "Advanced" tab, under the Virtual memory section, click the "Change" button,
and check the option, "System managed size". Click the "Set" button, click "OK", "Apply", and
"OK" your way out.

Virtual Memory in Windows XP http://aumha.org/win5/a/xpvm.htm

---------------------------------

Clean out the cache files. C:\Windows\Temporary Internet Files. Click Start, Settings,
Control Panel, Internet Options, "General" tab Look under "Temporary Internet Files", Click
"Delete Files", check box, "Delete all offline content", "OK", "Delete Cookies" button.

---------------------------------

Error Message: Memory Could Not Be Read...
http://support.microsoft.com/?kbid=262490

In the root directory of C:\, modify or create the config.sys file. Add the following:

files=65
buffers=40
stacks=64,512

If the error persists, try adding this line to your System.ini file:
Scroll down to the [386Enh] Section and One space down. Hit the
Enter Key one time to create a blank line just below the [386Enh].
In the blank line, type the following:

MinSPs=6

Click Edit, Save, Edit, exit. Shut down and restart for the changes to take effect.
(The default is 2. If required, increase increments by 2.)