Hi, my friend has a pc with windows xp, she said this problem started about 2 weeks ago. Anyways the computer keeps restarting at the xp splash screen. The good thing is i can log into safe mode. I tried system restore and disabling some programs in msconfig startup but both didnt work. Any ideas whats causing this and how to fix it?
i got some more info on the blue screen. it says "stop:c000021a {fatal system error} the windows logon process system process terminated unexpectedly with a status of 0x000000080 the system has been shut down".
Welll heres the weird part, there are 2 xp installations on this computers, You know when you frist start the computer is aske u which xp you want to start, well the main one(the first one) is the one that keeps rebooting so i took out 1 of the ram sticks, and it starts now, But the 2nd installation starts with both ram sticks in. So is it the ram? and plus it starts up in safe mode too so would a bad ram stick cause it to keep rebooting on one xp installation and not the other?
hi, thanks i tested both stick and they both appear to be good so i installed and ran avg free and i got 1 virus called "trojan horse generic.xfb, file name-11533842.exe". So i deleted it and the computer starts up now. But i will keep you informed just incase it starts messing up again.
There's two options run a hijack this log and post the results and get some feed back just incase there's a file that any of the scanners don't pick up,the second option is has the comp been reformatted in the past year if not do it (a reformatt after a year of use is good maintenance),then when all updated etc create a 2nd limited account so no installing can be done unless logged in as admin. If there is no install cd of a microsoft OS,look in "my computer" ,there should be another hdd drive (a partition perhaps called D)that will be the recovery console,it's just a mater of knowing which F button to push on start up (if there's no ifo when the dos screen comes up) to start the file recovery or a more destructive recovery = reformatt regardless of what you do,she needs to be more aware of how to stay safe online get her to go to cnet,techrepublic and hp they have articles and subscriber emails on how to stay safe online as well as other good stuff on maintainence etc
Logfile of HijackThis v1.99.1 Scan saved at 12:34:34 PM, on 3/3/2007 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS3\System32\smss.exe C:\WINDOWS3\system32\winlogon.exe C:\WINDOWS3\system32\services.exe C:\WINDOWS3\system32\lsass.exe C:\WINDOWS3\system32\svchost.exe C:\WINDOWS3\System32\svchost.exe C:\WINDOWS3\Explorer.EXE C:\WINDOWS3\system32\spoolsv.exe C:\WINDOWS3\System32\hkcmd.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe C:\WINDOWS3\system32\drivers\KodakCCS.exe C:\WINDOWS3\System32\NMSSvc.exe C:\WINDOWS3\System32\svchost.exe C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe C:\Program Files\HijackThis\HijackThis.exe R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm O3 - Toolbar: Burn4Free Toolbar - {70DE7956-479D-4eb7-8641-2B45774C350E} - C:\Program Files\Burn4Free Toolbar\v2.0.0.2\Burn4Free_Toolbar.dll (file missing) O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS3\system32\msdxm.ocx O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS3\System32\hkcmd.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS3\System32\Shdocvw.dll O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll (file missing) O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab O16 - DPF: {33331111-1111-1111-1111-611111193423} - O16 - DPF: {33331111-1111-1111-1111-611111193429} - O16 - DPF: {33331111-1111-1111-1111-615111193427} - O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1027757859827 O16 - DPF: {64311111-1111-1121-1111-111191113457} - file://c:\eied_s7.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1027757848014 O16 - DPF: {DAB941D8-BC94-4819-AB4D-5598C65FA3FE} - http://gpstool.globaladserver.com/v30/gpstool.cab O20 - Winlogon Notify: igfxcui - C:\WINDOWS3\SYSTEM32\igfxsrvc.dll O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\\aolserv.exe (file missing) O23 - Service: Automatic LiveUpdate Scheduler - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS3\system32\drivers\KodakCCS.exe O23 - Service: LiveUpdate - Unknown owner - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE (file missing) O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS3\System32\NMSSvc.exe