Can't access windows xp Stop C000021a{Fatal system error}

[nospam]

Have a little bit of a problem:
Found out I was infected with the wowfx.dll and "My web search" malware
I downloaded and ran combofix in safe mode, after rebooting I still received
popups for each program being run in start up with "bad image".

After several tries with Combo-fix, I then did a scan with DDiag.EXE
it left a log at c:\resultat.txt
I then ran Sdfix as I was told it would help remove any other worms/trojans
I might Have
as I see several connections attempts using the Network Service, as well as
being unable
to see the control panel, or edit the registry. It ran through and then
rebooted the computer.

Which is where I am right now, for the last 20 or so tries, I get a blue
screen, be it normal mode, safe
mode, safe mode with networking, safe mode with vca, before logging in
saying:

: Stop C000021a{Fatal system error} The windowa logon process system process
terminated unexpectedly with a status of 0x00000080(0x00000000 0x00000000).
The system has been shut down.

I am at logger heads at what to do now, it used to be a windows me comp
which was upgraded to winxp pro build 2600.

I do not have a floppy drive on the comp only two cdr drives, but so far I
can't even get into safe mode even with dos.

Any help other than reinstalling will be greatly appreciated.

[Gerry]

Background information on Stop Error code:
http://msdn2.microsoft.com/en-us/library/ms797159.aspx

This occurs when Windows switches into kernel mode and a user-mode
subsystem, such as Winlogon or the Client Server Runtime Subsystem
(CSRSS), is compromised. Security can no longer be guaranteed. Because
Win XP can't run without Winlogon or CSRSS, this is one of the few
situations where the failure of a user-mode service can cause the system
to stop responding. This Stop message also can occur as a result of
malware infestation or when the computer is restarted after a system
administrator has modified permissions so that the SYSTEM account no
longer has adequate permissions to access system files and folders.
http://aumha.org/a/stop.htm

Without an XP system CD you are in some difficulty.

Have you tried Last Known Good Configuration?
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/kb/315222/en-us


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
nospam wrote:
> Have a little bit of a problem:
> Found out I was infected with the wowfx.dll and "My web search"
> malware I downloaded and ran combofix in safe mode, after rebooting I
> still
> received popups for each program being run in start up with "bad
> image".
> After several tries with Combo-fix, I then did a scan with DDiag.EXE
> it left a log at c:\resultat.txt
> I then ran Sdfix as I was told it would help remove any other
> worms/trojans I might Have
> as I see several connections attempts using the Network Service, as
> well as being unable
> to see the control panel, or edit the registry. It ran through and
> then rebooted the computer.
>
> Which is where I am right now, for the last 20 or so tries, I get a
> blue screen, be it normal mode, safe
> mode, safe mode with networking, safe mode with vca, before logging in
> saying:
>
>> Stop C000021a{Fatal system error} The windowa logon process system
>> process
> terminated unexpectedly with a status of 0x00000080(0x00000000
> 0x00000000). The system has been shut down.
>
> I am at logger heads at what to do now, it used to be a windows me
> comp which was upgraded to winxp pro build 2600.
>
> I do not have a floppy drive on the comp only two cdr drives, but so
> far I can't even get into safe mode even with dos.
>
> Any help other than reinstalling will be greatly appreciated.

[jen]

"nospam" <nospam@nospam.com> wrote in message
news:754lk.12431$Lw1.6432@newsfe29.ams2...
> Have a little bit of a problem:
> Found out I was infected with the wowfx.dll and "My web search"
> malware
> I downloaded and ran combofix in safe mode, after rebooting I still
> received
> popups for each program being run in start up with "bad image".
> After several tries with Combo-fix, I then did a scan with DDiag.EXE
> it left a log at c:\resultat.txt
> I then ran Sdfix as I was told it would help remove any other
> worms/trojans I might Have
> as I see several connections attempts using the Network Service, as
> well as being unable
> to see the control panel, or edit the registry. It ran through and
> then rebooted the computer.
> Which is where I am right now, for the last 20 or so tries, I get a
> blue screen, be it normal mode, safe
> mode, safe mode with networking, safe mode with vca, before logging in
> saying:
> : Stop C000021a{Fatal system error} The windowa logon process system
> process terminated unexpectedly with a status of 0x00000080(0x00000000
> 0x00000000).
> The system has been shut down.
> I am at logger heads at what to do now, it used to be a windows me
> comp which was upgraded to winxp pro build 2600.
> I do not have a floppy drive on the comp only two cdr drives, but so
> far I can't even get into safe mode even with dos.
> Any help other than reinstalling will be greatly appreciated.

How to troubleshoot a "STOP 0xC000021A" error:
http://support.microsoft.com/default...b;en-us;156669

You should have followed my advice in my previous response to you, i.e.
to get *expert* help from a forum of your choice:
http://groups.google.com/group/alt.p...969443bd0e09d9

It looks like you have tried to "clean" malware with *malware* i.e. "I
then did a scan with DDiag.EXE"

-jen

[nospam]

"jen" <jen@example.com> wrote in message
news:h6mlk.3917$kh2.1235@bignews3.bellsouth.net...
> "nospam" <nospam@nospam.com> wrote in message
> news:754lk.12431$Lw1.6432@newsfe29.ams2...
>> Have a little bit of a problem:
>> Found out I was infected with the wowfx.dll and "My web search" malware
>> I downloaded and ran combofix in safe mode, after rebooting I still
>> received
>> popups for each program being run in start up with "bad image".
>> After several tries with Combo-fix, I then did a scan with DDiag.EXE
>> it left a log at c:\resultat.txt
>> I then ran Sdfix as I was told it would help remove any other
>> worms/trojans I might Have
>> as I see several connections attempts using the Network Service, as well
>> as being unable
>> to see the control panel, or edit the registry. It ran through and then
>> rebooted the computer.
>> Which is where I am right now, for the last 20 or so tries, I get a blue
>> screen, be it normal mode, safe
>> mode, safe mode with networking, safe mode with vca, before logging in
>> saying:
>> : Stop C000021a{Fatal system error} The windowa logon process system
>> process terminated unexpectedly with a status of 0x00000080(0x00000000
>> 0x00000000).
>> The system has been shut down.
>> I am at logger heads at what to do now, it used to be a windows me comp
>> which was upgraded to winxp pro build 2600.
>> I do not have a floppy drive on the comp only two cdr drives, but so far
>> I can't even get into safe mode even with dos.
>> Any help other than reinstalling will be greatly appreciated.
>
> How to troubleshoot a "STOP 0xC000021A" error:
> http://support.microsoft.com/default...b;en-us;156669
>
> You should have followed my advice in my previous response to you, i.e. to
> get *expert* help from a forum of your choice:
>

I posted but no one has yet replied, I ran Daighelp not Ddiag.exe,
specifically ran go.cmd in safe mode, I don't think that is the problem as
it left a log (c:\resultats.txt) as it was supposed to.

I managed to replace msgina.dll, csrss.exe, winlogon.exe , rstrui.exe, and
MSVCRT.dll from the system32/dllcache into the system32 directory
in dos mode, as the Microsoft support article suggests, but still getting
the same problem.

[bjosh]

Hey any update on this .. as i did a complete formatting of the drive
where the OS was installed even then after installing AVG free
Antivirus and restarting the computer again it came up with the same
BSOD..

I have re-installed the OS again as it is not cured by repairing it..
This time i m not installing the AVG 7.5 antivirus, instead of that i
will do an online scan and check if there is any malware present in
the other partitions of the system.

Please do update if any solution is found..


On Aug 4, 3:52*pm, "nospam" <nos...@nospam.com> wrote:
> "jen" <j...@example.com> wrote in message
>
> news:h6mlk.3917$kh2.1235@bignews3.bellsouth.net...
>
>
>
>
>
> > "nospam" <nos...@nospam.com> wrote in message
> >news:754lk.12431$Lw1.6432@newsfe29.ams2...
> >> Have a little bit of a problem:
> >> Found out I was infected with the wowfx.dll and "My web search" malware
> >> I downloaded and ran combofix in safe mode, after rebooting I still
> >> received
> >> popups for each program being run in start up with "bad image".
> >> After several tries with Combo-fix, I then did a scan with DDiag.EXE
> >> it left a log at c:\resultat.txt
> >> I then ran Sdfix as I was told it would help remove any other
> >> worms/trojans I might Have
> >> as I see several connections attempts using the Network Service, as well
> >> as being unable
> >> to see the control panel, or edit the registry. *It ran through and then
> >> rebooted the computer.
> >> Which is where I am right now, for the last 20 or so tries, I get a blue
> >> screen, be it normal mode, safe
> >> mode, safe mode with networking, safe mode with vca, before logging in
> >> saying:
> >> : Stop C000021a{Fatal system error} The windowa logon process system
> >> process terminated unexpectedly with a status of 0x00000080(0x00000000
> >> 0x00000000).
> >> The system has been shut down.
> >> I am at logger heads at what to do now, it used to be a windows me comp
> >> which was upgraded to winxp pro build 2600.
> >> I do not have a floppy drive on the comp only two cdr drives, but so far
> >> I can't even get into safe mode even with dos.
> >> Any help other than reinstalling will be greatly appreciated.
>
> > How to troubleshoot a "STOP 0xC000021A" error:
> >http://support.microsoft.com/default...b;en-us;156669
>
> > You should have followed my advice in my previous response to you, i.e.to
> > get *expert* help from a forum of your choice:
>
> I posted but no one has yet replied, I ran Daighelp not Ddiag.exe,
> specifically ran go.cmd in safe mode, I don't think that is the problem as
> it left a log (c:\resultats.txt) as it was supposed to.
>
> I managed to replace msgina.dll, csrss.exe, winlogon.exe , rstrui.exe, and
> MSVCRT.dll from the system32/dllcache into the system32 directory
> in dos mode, as the Microsoft support article suggests, but still getting
> the same problem.- Hide quoted text -
>
> - Show quoted text -

[bjosh]

Hey all..

The reason for me getting that error was installing the AVG 7.5 free
antivirus and later updating it's latest virus definitions. That might
have have caused some issues with the winlogon registry key.. as
mentioned in that above micorosft article.

I hope this is helpful to anybody..


On Aug 31, 4:34*pm, bjosh <joshi.ba...@gmail.com> wrote:
> Hey any update on this .. as i did a complete formatting of the drive
> where the OS was installed even then after installing AVG free
> Antivirus and restarting the computer again it came up with the same
> BSOD..
>
> I have re-installed the OS again as it is not cured by repairing it..
> This time i m not installing the AVG 7.5 antivirus, instead of that i
> will do an online scan and check if there is any malware present in
> the other partitions of the system.
>
> Please do update if any solution is found..
>
> On Aug 4, 3:52*pm, "nospam" <nos...@nospam.com> wrote:
>
>
>
> > "jen" <j...@example.com> wrote in message
>
> >news:h6mlk.3917$kh2.1235@bignews3.bellsouth.net.. .
>
> > > "nospam" <nos...@nospam.com> wrote in message
> > >news:754lk.12431$Lw1.6432@newsfe29.ams2...
> > >> Have a little bit of a problem:
> > >> Found out I was infected with the wowfx.dll and "My web search" malware
> > >> I downloaded and ran combofix in safe mode, after rebooting I still
> > >> received
> > >> popups for each program being run in start up with "bad image".
> > >> After several tries with Combo-fix, I then did a scan with DDiag.EXE
> > >> it left a log at c:\resultat.txt
> > >> I then ran Sdfix as I was told it would help remove any other
> > >> worms/trojans I might Have
> > >> as I see several connections attempts using the Network Service, as well
> > >> as being unable
> > >> to see the control panel, or edit the registry. *It ran through and then
> > >> rebooted the computer.
> > >> Which is where I am right now, for the last 20 or so tries, I get a blue
> > >> screen, be it normal mode, safe
> > >> mode, safe mode with networking, safe mode with vca, before logging in
> > >> saying:
> > >> : Stop C000021a{Fatal system error} The windowa logon process system
> > >> process terminated unexpectedly with a status of 0x00000080(0x00000000
> > >> 0x00000000).
> > >> The system has been shut down.
> > >> I am at logger heads at what to do now, it used to be a windows me comp
> > >> which was upgraded to winxp pro build 2600.
> > >> I do not have a floppy drive on the comp only two cdr drives, but sofar
> > >> I can't even get into safe mode even with dos.
> > >> Any help other than reinstalling will be greatly appreciated.
>
> > > How to troubleshoot a "STOP 0xC000021A" error:
> > >http://support.microsoft.com/default...b;en-us;156669
>
> > > You should have followed my advice in my previous response to you, i.e. to
> > > get *expert* help from a forum of your choice:
>
> > I posted but no one has yet replied, I ran Daighelp not Ddiag.exe,
> > specifically ran go.cmd in safe mode, I don't think that is the problemas
> > it left a log (c:\resultats.txt) as it was supposed to.
>
> > I managed to replace msgina.dll, csrss.exe, winlogon.exe , rstrui.exe, and
> > MSVCRT.dll from the system32/dllcache into the system32 directory
> > in dos mode, as the Microsoft support article suggests, but still getting
> > the same problem.- Hide quoted text -
>
> > - Show quoted text -- Hide quoted text -
>
> - Show quoted text -