NTVDM blue screen errors on NT4SP6

[rko9911]

I have several NT4SP6 machines on a network. It originally had an NT4 Server as the PDC (no BDC - very small network) and it crashed. Now have 2 Win2K servers. Rebuilt the userlist from scratch. Had the clients unjoin and rejoin the domain to square the SIDs away. Copied over some profile info.

Now I'm getting the following BSOD on every computer, about once a week.

STOP C0000221 - Bad Image Checksum
The image ntvdm.exe is possibly corrupt, the header checksum does not match the computed checksum.

The solution is simple. I go into DOS, copy ntvdm.exe from a floppy onto the corrupted file in /winnt/system32. And reboot into NT4. (found no other differences with a parallel install).

When ntvdm.exe corrupts, it changes size from 399K to 527K. And it also corrupts others I hid, such as a good ntvdm.exe renamed ntvdm.ok on a new directory.

We do not use any DOS programs, and most of our apps (if not all) are 32-bit. So I don't even know how ntvdm is even being called.

I'm sick of this error. Any one have any ideas?

 

[Mike555]

I had this happen some years ago, and I found the answer here:

http://www.jsiinc.com/SUBD/tip1700/rh1799.htm

 

[rko9911]

I did follow these directions on 3 computers, however, about 1 or 2 weeks later, the exact same thing happened. I'm afraid this might simply be masking a bigger problem.

 

[Mike555]

Hmmm...Are your servers and your clients having this error?

It could possibly be your RAM configuration. If you can, try installing new RAM in one new computer and see if this solves the problem for that computer.

 

[wolluf]

virus scan?

 

[rko9911]

Sorry for the late reply. I was away for a week.

You are right, wolluf. A virus was discovered on the computers where this error was found. Specifically, it was the pinfi virus. We have taken steps to correct this situation and to avoid it in the future.

Thank you and Mike555 for your help.