netapi32.dll repeatedly crashes

[quaxo]

A bit of a long story, so bear with me here.

Ok, we had a problem with one computer. It's quite old. The computer served as a file-sharing/printer hub on the network here.

P4 2.0 Ghz
ECS P4VMM2 Motherboard
Windows XP, SP3
256 MB RAM
40GB HDD
S3 ProSavageDDR video card
AC'97 on-board sound
VIA VT6102 on-board network

The computer contained a shared folder for people to store files on the network, and it also had a Canon Pixma iP3300 printer which was shared over the network. About once an hour, Windows would pop up with this error:

Code: [Select]

Faulting application svchost.exe, version 5.1.2600.2180, faulting module netapi32.dll, version 5.1.2600.2180, fault address 0x000187ad.
What I tried:
Replacing netapi32.dll from the CD.
Reinstalling Windows XP from the CD.
Reinstalling Windows XP from a different CD.
Replacing the end of the network cable.
Using a different cable to a different port on the router.

After all of that, we finally decided to change the computer to another one with identical specs. All was well for 2 days, then Saturday the same error came up. Virus scans (with Avast) have turned up nothing. A bit at a loss here. Any suggestions?

[Spoiler]

Can you go into your event log and post the full error message?

[quaxo]

That's where that came from, and it is the whole error message.

Actually, it's weird. Another computer in another room did the exact same thing this morning. I also found out their server might quite possibly be infected with a virus.

Since their server is in a secure room, I'm not allowed to service it, so I'm done with this case. They only want to half-cooperate, so there's nothing I can do for them unless I can get to the source of the problem.

[Broni]

Can you at least post HJT log from both computers?
Did you search computers for netapi32.dll to see, if it's only location is System32 folder?

[quaxo]

I'm not handling this anymore. They don't want those computers unplugged from the network, yet that's the source of the virus. The virus is coming from their server, and like I said, they won't let anyone but their own techs near it. Of course, if their own techs could handle the problem, they wouldn't have called me out. Oh well, if they want to be stubborn like that, there's nothing I can do about it.

I managed to get all three of the affected computers cleaned, but as long as they're connected to that network and the server is still infected there's no point in me doing anything for them. I won't be returning to the site again, so I won't be getting any logs or anything. I'm done dealing with them unless they decide to let me at the server so I can fix it as well.

[Broni]

Let them rot...LOL

[quaxo]

Ha, I knew they be back. They called me this weekend and want me to come back out tomorrow and take a look again. I think they're actually going to let me at the server this time as well. What logs would you want to see?

[Broni]

Charge them more...LOL
You have to...
Read here: http://www.computerhope.com/forum/index.php/topic,46313.0.html
Start new topic here: http://www.computerhope.com/forum/index.php/board,7.0.html
I don't do logs anymore on this board.

[quaxo]

Will do Broni. I might go there tomorrow or Tuesday.

[Broni]

I want 10% of whatever you charge them more

[quaxo]

With the exchange rate, that'll be like $20. So your cut is $2. 

[Broni]

*censored*!

[killerb255]

Wow quaxo...you work for cheap.

[Broni]

I think, it's for a look at a server only. On a top of other charges.

[quaxo]

Actually, I'm the most expensive tech I know in Thailand at $20 per hour for corporate work like this. My non-corporate jobs are actually done much cheaper and usually charged by the job, not by the hour. I don't advertise. My work mostly comes from word-of-mouth. If I don't know a solution, I can quickly find someone who does (hence, my rare questions I post on here).

Most larger companies have their own in-house technicians, but they won't make more than $700/month (heck, that's pushing it). Entry level positions will nab maybe $350/month. (Thai minimum wage is about $1/hour or something like $7.50/day).

With all I do (graphics, music, English language work, and tech work) working 8 hours a day, 5 days a week, I make at a bit over 3 times what most of my Thai counterparts in the computer industry do (4 times if I work Saturdays too, like most of them do).

So anyway, I don't intend to spend more than an hour working on this tomorrow when I go out there. That's why Broni's cut is only $2 (10%). I've already made a check out in his name.  haha