this is an extract of my WIN.INI: ---begin--- [Pscript TrueType Substitutions] Arial=Helvetica Arial Narrow=Helvetica-Narrow Book Antiqua=Palatino Bookman Old Style=Bookman Century Gothic=AvantGarde Century Schoolbook=NewCenturySchlbk Courier New=Courier Monotype Corsiva=ZapfChancery Monotype Sorts=ZapfDingbats Symbol=Symbol Times New Roman=Times ‚l‚r –¾’©=ƒŠƒ…ƒEƒ~ƒ“L-KL @‚l‚r –¾’©=@ƒŠƒ…ƒEƒ~ƒ“L-KL ‚l‚r ƒSƒVƒbƒN=’†ƒSƒVƒbƒNBBB @‚l‚r ƒSƒVƒbƒN=@’†ƒSƒVƒbƒNBBB ±¼¸²=HYµÕ±Ù°íµñM @±¼¸²=@HYµÕ±Ù°íµñM ±¼¸²Ã¼=HYµÕ±Ù°íµñM (°íÁ¤Æø) @±¼¸²Ã¼=@HYµÕ±Ù°íµñM (°íÁ¤Æø) ±Ã¼­=HY±Ã¼­B @±Ã¼­=@HY±Ã¼­B ±Ã¼­Ã¼=HY±Ã¼­B (°íÁ¤Æø) @±Ã¼­Ã¼=@HY±Ã¼­B (°íÁ¤Æø) µ¸¿ò=HYÁß°íµñ @µ¸¿ò=@HYÁß°íµñ µ¸¿òü=HYÁß°íµñ (°íÁ¤Æø) @µ¸¿òü=@HYÁß°íµñ (°íÁ¤Æø) ¹ÙÅÁ=HY½Å¸íÁ¶ @¹ÙÅÁ=@HY½Å¸íÁ¶ ¹ÙÅÁü=HY½Å¸íÁ¶ (°íÁ¤Æø) @¹ÙÅÁü=@HY½Å¸íÁ¶ (°íÁ¤Æø) ·ÂËÎ_GB2312=»ªÎÄ·ÂËÎ @·ÂËÎ_GB2312=@»ªÎÄ·ÂËÎ ¿¬Ìå_GB2312=»ªÎÄ¿¬Ìå @¿¬Ìå_GB2312=@»ªÎÄ¿¬Ìå [PostScript,C:\WINDOWS\All Users\Desktop\*.pdf] ATM=placeholder ---end--- those strange signs? what's wrong with them?

hi mitko, i checked with my win.ini in postscript and i don't have anything like this after times new roman=times. I can only surmise that everything after that is either a trojan, virus, or worm that has been written to your win.ini file, you should scan with a very good anti-trojan, anti-virus, and possibly download Worm Guard from TDS and scan your files. if its anything major any of the scanners will pick it up and delete this. good anti-trojans are Trojan Hunter, Tauscan, TDS, and BOClean. you may also want to try online anti-virii programs like house call, panda online, or download your latest anti-virus defs and scan your machine. hope someone reading this post can shed some light. hope this helps, murve