Hi Gang,

Got lottsa' problems - woe is me ...

I powered up my computer yesterday, with Windows 2000 Professional,
and it got through the boot process to the point that it put up my
wallpaper and placed my icons on the desktop.

Then, it spontaneously rebooted.

I went through the boot process again, got to the same point,
and it spontaneously rebooted again. I went ‘round and ‘round
a few more times before I decided to perform disaster recovery.

So, I placed a new hard drive in the machine, partitioned and
formatted it (Partition Magic - I highly recommend it),
performed disaster recovery to hard drive #2 (the other hard drive
is still as it was yesterday), rebooted (cold), and, after the
Windows 2000 Pro logo, and before I got to the login window
(where it asks for my password), I got the following error:

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
LSASS.EXE - Application Error

X The application failed to initialize properly (0xc000007b).
Click on OK to terminate the application.

OK
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

So I click on "OK", and I get another display:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
The system process c:\WINNT\system32\LSASS.EXE terminated
unexpectedly with status code 128. The system is shutting down.
This shutdown was initiated by \.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

... and, after a 60-second countdown, it shuts down.

Well, this is a fine mess ...

I've managed to get online with an old computer to post this.

So ...

#1: Any idea as to why hard drive #1 is spontaneously rebooting?
I can slip it into another computer and access it as a secondary
data drive (all of my hard drives are in removable cartridges).
I can install Windows 2000 Pro on hard drive #2, and it doesn't do
this. I can boot hard drive #1 in safe mode, but I don't know what
to do with it once I do. It would seem that one of the applications
on startup is causing the problem, but I don't know how to access
those apps - how to disable them.

(BTW: does anyone know of any good books on how to troubleshoot
Windows 2000? ... With references to whatever tools that might
be useful?)

#2: Any idea as to why the app LSASS.EXE is not getting initialized
properly? ... and what I need to do to get it to do so? I don't
understand why I'm having this problem - the system was working fine
when I made the backup.

#3: Do you think I should just give up, go hang myself and call it a life?
It would put an end to a lot of my miseries.


My system board is an Albatron KX400-8XV, with an
AMD Athlon 2200, 512MB RAM, with an 80GB Maxtor.


Thanks,

Solitary Soul
=======================

Since you can reboot in Safe Mode, it's one of your
drivers that causes the damage. Remove all non-essential
adapters (sound, network), then try again. If this does not
work then you have selectively disable non-essential
services until you find the culprit.


"Solitary Soul" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi Gang,
>
> Got lottsa' problems - woe is me ...
>
> I powered up my computer yesterday, with Windows 2000 Professional,
> and it got through the boot process to the point that it put up my
> wallpaper and placed my icons on the desktop.
>
> Then, it spontaneously rebooted.
>
> I went through the boot process again, got to the same point,
> and it spontaneously rebooted again. I went 'round and 'round
> a few more times before I decided to perform disaster recovery.
>
> So, I placed a new hard drive in the machine, partitioned and
> formatted it (Partition Magic - I highly recommend it),
> performed disaster recovery to hard drive #2 (the other hard drive
> is still as it was yesterday), rebooted (cold), and, after the
> Windows 2000 Pro logo, and before I got to the login window
> (where it asks for my password), I got the following error:
>
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> LSASS.EXE - Application Error
>
> X The application failed to initialize properly (0xc000007b).
> Click on OK to terminate the application.
>
> OK
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
>
> So I click on "OK", and I get another display:
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> The system process c:\WINNT\system32\LSASS.EXE terminated
> unexpectedly with status code 128. The system is shutting down.
> This shutdown was initiated by \.
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
>
> ... and, after a 60-second countdown, it shuts down.
>
> Well, this is a fine mess ...
>
> I've managed to get online with an old computer to post this.
>
> So ...
>
> #1: Any idea as to why hard drive #1 is spontaneously rebooting?
> I can slip it into another computer and access it as a secondary
> data drive (all of my hard drives are in removable cartridges).
> I can install Windows 2000 Pro on hard drive #2, and it doesn't do
> this. I can boot hard drive #1 in safe mode, but I don't know what
> to do with it once I do. It would seem that one of the applications
> on startup is causing the problem, but I don't know how to access
> those apps - how to disable them.
>
> (BTW: does anyone know of any good books on how to troubleshoot
> Windows 2000? ... With references to whatever tools that might
> be useful?)
>
> #2: Any idea as to why the app LSASS.EXE is not getting initialized
> properly? ... and what I need to do to get it to do so? I don't
> understand why I'm having this problem - the system was working fine
> when I made the backup.
>
> #3: Do you think I should just give up, go hang myself and call it a life?
> It would put an end to a lot of my miseries.
>
>
> My system board is an Albatron KX400-8XV, with an
> AMD Athlon 2200, 512MB RAM, with an 80GB Maxtor.
>
>
> Thanks,
>
> Solitary Soul
> =======================

On Thu, 25 Dec 2003 08:01:08 +1100, "Pegasus \(MVP\)" <(E-Mail Removed)> wrote:

>Since you can reboot in Safe Mode, it's one of your
>drivers that causes the damage. Remove all non-essential
>adapters (sound, network), then try again. If this does not
>work then you have selectively disable non-essential
>services until you find the culprit.

Thanks for the response.

What's the best way to proceed in order to do this?


Solitary Soul
=======================

"Solitary Soul" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> On Thu, 25 Dec 2003 08:01:08 +1100, "Pegasus \(MVP\)" <(E-Mail Removed)>
wrote:
>
> >Since you can reboot in Safe Mode, it's one of your
> >drivers that causes the damage. Remove all non-essential
> >adapters (sound, network), then try again. If this does not
> >work then you have selectively disable non-essential
> >services until you find the culprit.
>
> Thanks for the response.
>
> What's the best way to proceed in order to do this?
>
>
> Solitary Soul
> =======================

Open your machine and pull out those adapters that are
not essential to your PC' operation, then reboot the
machine and see what happens.

On Thu, 25 Dec 2003 14:25:01 +1100, "Pegasus \(MVP\)" <(E-Mail Removed)> wrote:

>
>"Solitary Soul" <(E-Mail Removed)> wrote in message
>news:(E-Mail Removed)...
>> On Thu, 25 Dec 2003 08:01:08 +1100, "Pegasus \(MVP\)" <(E-Mail Removed)>
>wrote:
>>
>> >Since you can reboot in Safe Mode, it's one of your
>> >drivers that causes the damage. Remove all non-essential
>> >adapters (sound, network), then try again. If this does not
>> >work then you have selectively disable non-essential
>> >services until you find the culprit.
>>
>> Thanks for the response.
>>
>> What's the best way to proceed in order to do this?
>>
>>
>> Solitary Soul
>> =======================
>
>Open your machine and pull out those adapters that are
>not essential to your PC' operation, then reboot the
>machine and see what happens.

OK - did and done - but I got the same result.

I had an ethernet network adapter card (that wasn't plugged in to anything)
and a 4-port USB extender card (that I unplugged from the system board).
Everything else is USB (which I had already unplugged before my OP).

One more piece of information ...

I waited at the login display (where it asks for a password), did nothing,
and it rebooted after about 10-12 seconds. Something is being loaded at that
point that is causing the screw-up (it would seem). How do I deactivate
that "stuff", and how do I tell which ones are essential and which ones are not?


Solitary Soul
=======================

Classic symptom of the Blaster worm. Obviously you can get on the internet,
so download a "Blaster Removal Tool" and run it in safe mode. You'll also
want to download and install the patch from Microsoft that prevents the
Blaster worm from doing its thing.

Merry Christmas.

Oh, by the way, hanging yourself won't do a thing toward removing the
blaster worm. You might wanna postpone this action.

"Solitary Soul" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi Gang,
>
> Got lottsa' problems - woe is me ...
>
> I powered up my computer yesterday, with Windows 2000 Professional,
> and it got through the boot process to the point that it put up my
> wallpaper and placed my icons on the desktop.
>
> Then, it spontaneously rebooted.
>
> I went through the boot process again, got to the same point,
> and it spontaneously rebooted again. I went 'round and 'round
> a few more times before I decided to perform disaster recovery.
>
> So, I placed a new hard drive in the machine, partitioned and
> formatted it (Partition Magic - I highly recommend it),
> performed disaster recovery to hard drive #2 (the other hard drive
> is still as it was yesterday), rebooted (cold), and, after the
> Windows 2000 Pro logo, and before I got to the login window
> (where it asks for my password), I got the following error:
>
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> LSASS.EXE - Application Error
>
> X The application failed to initialize properly (0xc000007b).
> Click on OK to terminate the application.
>
> OK
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
>
> So I click on "OK", and I get another display:
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> The system process c:\WINNT\system32\LSASS.EXE terminated
> unexpectedly with status code 128. The system is shutting down.
> This shutdown was initiated by \.
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
>
> ... and, after a 60-second countdown, it shuts down.
>
> Well, this is a fine mess ...
>
> I've managed to get online with an old computer to post this.
>
> So ...
>
> #1: Any idea as to why hard drive #1 is spontaneously rebooting?
> I can slip it into another computer and access it as a secondary
> data drive (all of my hard drives are in removable cartridges).
> I can install Windows 2000 Pro on hard drive #2, and it doesn't do
> this. I can boot hard drive #1 in safe mode, but I don't know what
> to do with it once I do. It would seem that one of the applications
> on startup is causing the problem, but I don't know how to access
> those apps - how to disable them.
>
> (BTW: does anyone know of any good books on how to troubleshoot
> Windows 2000? ... With references to whatever tools that might
> be useful?)
>
> #2: Any idea as to why the app LSASS.EXE is not getting initialized
> properly? ... and what I need to do to get it to do so? I don't
> understand why I'm having this problem - the system was working fine
> when I made the backup.
>
> #3: Do you think I should just give up, go hang myself and call it a life?
> It would put an end to a lot of my miseries.
>
>
> My system board is an Albatron KX400-8XV, with an
> AMD Athlon 2200, 512MB RAM, with an 80GB Maxtor.
>
>
> Thanks,
>
> Solitary Soul
> =======================

Someone on the Ziff-Davis forum is hinting that LSASS might be the culprit.

That could be ...


What follows is a dump of my system log for the last 10 days:


Type Date Time Source Category Event User Computer
Error 12/25/2003 10:45:27 AMDCOMNone10010SYSTEMCOMPUTER-1A
Error 12/25/2003 10:42:53 AM
Service Control Manager None 7001 N/A COMPUTER-1A
Error 12/25/2003 10:42:37 AM Service Control Manager None 7026
N/A COMPUTER-1A
Error 12/25/2003 10:42:37 AM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/25/2003 10:42:35 AM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/25/2003 10:42:35 AM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/25/2003 10:42:35 AM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/25/2003 10:42:33 AM Save Dump None 1001
N/A COMPUTER-1A
Error 12/25/2003 10:42:31 AM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/25/2003 10:42:31 AM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/25/2003 10:42:31 AM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/25/2003 10:42:31 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/25/2003 10:42:31 AM eventlog None 6009
N/A COMPUTER-1A
Error 12/25/2003 10:42:31 AM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/25/2003 9:18:37 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/25/2003 9:18:37 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/25/2003 9:18:38 AM Save Dump None 1001
N/A COMPUTER-1A
Information 12/25/2003 9:17:02 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/25/2003 9:17:02 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/25/2003 9:17:03 AM Save Dump None 1001
N/A COMPUTER-1A
Information 12/24/2003 9:29:41 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/24/2003 9:29:41 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/24/2003 9:29:41 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/24/2003 9:27:36 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/24/2003 9:27:36 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/24/2003 9:27:36 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/24/2003 9:25:35 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/24/2003 9:25:35 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/24/2003 9:25:35 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/24/2003 9:23:44 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/24/2003 9:23:44 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/24/2003 9:12:46 PM eventlog None 6006
N/A COMPUTER-1A
Error 12/24/2003 9:12:45 PM DCOM None 10010 SYSTEM
COMPUTER-1A
Error 12/24/2003 8:44:42 PM DCOM None 10010 SYSTEM
COMPUTER-1A
Error 12/24/2003 8:42:36 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/24/2003 8:42:16 PM Service Control Manager None 7026
N/A COMPUTER-1A
Error 12/24/2003 8:42:15 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/24/2003 8:42:13 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/24/2003 8:42:13 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/24/2003 8:42:13 PM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/24/2003 8:42:06 PM Save Dump None 1001
N/A COMPUTER-1A
Error 12/24/2003 8:42:05 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/24/2003 8:42:05 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/24/2003 8:42:05 PM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/24/2003 8:42:05 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/24/2003 8:42:05 PM eventlog None 6009
N/A COMPUTER-1A
Error 12/24/2003 8:42:05 PM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/24/2003 8:39:14 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/24/2003 8:39:14 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/24/2003 8:39:15 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:44:23 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:44:23 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:44:23 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:42:16 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:42:16 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:42:17 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:40:25 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:40:25 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:39:18 PM eventlog None 6006
N/A COMPUTER-1A
Error 12/22/2003 2:38:18 PM DCOM None 10010 SYSTEM
COMPUTER-1A
Error 12/22/2003 2:38:04 PM DCOM None 10010 Administrator
COMPUTER-1A
Error 12/22/2003 2:37:34 PM DCOM None 10010 Administrator
COMPUTER-1A
Error 12/22/2003 2:37:04 PM DCOM None 10010 Administrator
COMPUTER-1A
Error 12/22/2003 2:36:34 PM DCOM None 10010 Administrator
COMPUTER-1A
Error 12/22/2003 2:36:04 PM DCOM None 10010 SYSTEM
COMPUTER-1A
Error 12/22/2003 2:33:46 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/22/2003 2:33:31 PM Service Control Manager None 7026
N/A COMPUTER-1A
Error 12/22/2003 2:33:31 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/22/2003 2:33:30 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/22/2003 2:33:30 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/22/2003 2:33:30 PM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/22/2003 2:33:26 PM Save Dump None 1001
N/A COMPUTER-1A
Error 12/22/2003 2:33:26 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/22/2003 2:33:26 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/22/2003 2:33:26 PM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/22/2003 2:33:26 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:33:26 PM eventlog None 6009
N/A COMPUTER-1A
Error 12/22/2003 2:33:26 PM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/22/2003 2:31:07 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:31:07 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:31:07 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:28:20 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:28:20 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:28:20 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:26:22 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:26:22 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:26:23 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:24:18 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:24:18 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:24:18 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:22:05 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:22:05 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:22:05 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:19:54 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:19:54 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:19:54 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:17:44 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:17:44 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:17:44 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:15:35 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:15:35 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:15:35 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:13:15 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:13:15 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:13:16 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:11:03 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:11:03 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:11:03 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:08:55 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:08:55 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:08:55 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:06:49 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:06:49 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 1:50:33 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/22/2003 1:50:08 PM Application Popup None
26 N/A COMPUTER-1A
Warning 12/22/2003 1:49:46 PM disk None 50 N/A
COMPUTER-1A
Information 12/22/2003 1:49:45 PM Application Popup None
26 N/A COMPUTER-1A
Warning 12/22/2003 1:49:45 PM disk None 50 N/A
COMPUTER-1A
Warning 12/22/2003 1:49:45 PM disk None 51 N/A
COMPUTER-1A
Warning 12/22/2003 1:49:45 PM disk None 51 N/A
COMPUTER-1A
Information 12/22/2003 1:49:00 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/22/2003 12:37:25 PM Removable Storage Service
None 134 N/A COMPUTER-1A
Warning 12/22/2003 12:32:35 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/22/2003 12:30:13 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/22/2003 12:27:31 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 12:27:31 PM eventlog None 6009
N/A COMPUTER-1A
Information 1221/2003 11:58:35 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/21/2003 9:04:36 PM RemoteAccess None 20159
N/A COMPUTER-1A
Warning 12/21/2003 4:32:50 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/21/2003 4:30:49 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/21/2003 4:27:46 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/21/2003 4:27:46 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/21/2003 11:29:30 AM eventlog None 6006
N/A COMPUTER-1A
Information 12/21/2003 11:29:18 AM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/21/2003 8:54:00 AM RemoteAccess None 20158
N/A COMPUTER-1A
Warning 12/21/2003 8:36:27 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/21/2003 8:31:23 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/21/2003 8:31:23 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/20/2003 10:28:08 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/20/2003 10:27:48 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/20/2003 3:47:32 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/20/2003 1:03:05 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/20/2003 9:25:15 AM RemoteAccess None 20158
N/A COMPUTER-1A
Warning 12/20/2003 8:40:51 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/20/2003 8:35:47 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/20/2003 8:35:47 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/19/2003 10:52:23 AM eventlog None 6006
N/A COMPUTER-1A
Information 12/19/2003 10:52:04 AM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/19/2003 9:34:21 AM RemoteAccess None 20158
N/A COMPUTER-1A
Warning 12/19/2003 9:28:00 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/19/2003 9:22:57 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/19/2003 9:22:57 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/18/2003 11:48:32 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/18/2003 11:48:19 PM RemoteAccess None 20159
N/A COMPUTER-1A
Warning 12/18/2003 9:59:25 AM disk None 52 N/A
COMPUTER-1A
Information 12/18/2003 9:29:10 AM Removable Storage Service
None 134 N/A COMPUTER-1A
Information 12/18/2003 9:07:21 AM RemoteAccess None 20158
N/A COMPUTER-1A
Warning 12/18/2003 9:05:15 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/18/2003 9:00:12 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/18/2003 9:00:12 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/18/2003 1:22:31 AM eventlog None 6006
N/A COMPUTER-1A
Information 12/18/2003 1:22:15 AM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/18/2003 1:06:22 AM Removable Storage Service
None 134 N/A COMPUTER-1A
Error 12/17/2003 11:16:04 PM disk None 7 N/A
COMPUTER-1A
Information 12/17/2003 10:26:28 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/17/2003 9:44:31 PM RemoteAccess None 20159
N/A COMPUTER-1A
Warning 12/17/2003 9:32:53 PM disk None 52 N/A
COMPUTER-1A
Error 12/17/2003 9:12:02 PM disk None 7 N/A
COMPUTER-1A
Information 12/17/2003 9:07:44 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/17/2003 8:46:30 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/17/2003 7:00:51 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/17/2003 4:10:26 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/17/2003 4:08:18 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/17/2003 4:04:40 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/17/2003 3:43:01 PM RemoteAccess None 20158
N/A COMPUTER-1A
Warning 12/17/2003 3:38:41 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/17/2003 3:33:37 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/17/2003 3:33:37 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/17/2003 3:31:55 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/17/2003 3:31:54 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/17/2003 1:15:17 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/17/2003 1:01:11 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/17/2003 11:06:56 AM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/17/2003 10:56:16 AM RemoteAccess None 20159
N/A COMPUTER-1A
Warning 12/17/2003 9:47:43 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/17/2003 9:45:25 AM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/17/2003 9:42:39 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/17/2003 9:42:39 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/17/2003 1:51:52 AM eventlog None 6006
N/A COMPUTER-1A
Information 12/17/2003 1:51:34 AM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/17/2003 12:37:39 AM RemoteAccess None 20158
N/A COMPUTER-1A
Error 12/17/2003 12:10:55 AM disk None 7 N/A
COMPUTER-1A
Error 12/17/2003 12:10:52 AM disk None 7 N/A
COMPUTER-1A
Error 12/17/2003 12:10:48 AM disk None 7 N/A
COMPUTER-1A
Error 12/17/2003 12:10:45 AM disk None 7 N/A
COMPUTER-1A
Error 12/17/2003 12:10:41 AM disk None 7 N/A
COMPUTER-1A
Error 12/17/2003 12:10:38 AM disk None 7 N/A
COMPUTER-1A
Warning 12/16/2003 11:56:07 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 11:51:04 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 11:51:04 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 11:49:30 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/16/2003 11:33:50 PM RemoteAccess None 20159
N/A COMPUTER-1A
Warning 12/16/2003 10:58:52 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 10:56:48 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/16/2003 10:53:49 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 10:53:49 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 10:52:10 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/16/2003 10:52:07 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/16/2003 10:33:59 PM RemoteAccess None 20158
N/A COMPUTER-1A
Error 12/16/2003 10:10:03 PM disk None 7 N/A
COMPUTER-1A
Error 12/16/2003 10:09:59 PM disk None 7 N/A
COMPUTER-1A
Error 12/16/2003 10:09:56 PM disk None 7 N/A
COMPUTER-1A
Error 12/16/2003 10:09:52 PM disk None 7 N/A
COMPUTER-1A
Error 12/16/2003 10:09:48 PM disk None 7 N/A
COMPUTER-1A
Error 12/16/2003 10:09:45 PM disk None 7 N/A
COMPUTER-1A
Warning 12/16/2003 9:58:57 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 9:53:55 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 9:53:55 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 9:52:21 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/16/2003 9:49:56 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 9:49:56 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 9:48:10 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/16/2003 9:48:10 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/16/2003 8:28:17 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/16/2003 7:30:07 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/16/2003 6:44:07 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/16/2003 6:04:57 PM RemoteAccess None 20159
N/A COMPUTER-1A
Warning 12/16/2003 4:27:38 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 4:27:06 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/16/2003 4:22:35 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 4:22:35 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 3:57:07 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/16/2003 3:56:54 PM RemoteAccess None 20159
N/A COMPUTER-1A
Warning 12/16/2003 12:34:45 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 12:33:10 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/16/2003 12:29:42 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 12:29:42 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 12:28:02 PM eventlog None 6006
N/A COMPUTER-1A
Warning 12/16/2003 12:20:56 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 12:15:53 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 12:15:53 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 12:14:13 PM eventlog None 6006
N/A COMPUTER-1A
Warning 12/16/2003 11:56:31 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 11:51:28 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 11:51:28 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 11:49:49 AM eventlog None 6006
N/A COMPUTER-1A
Warning 12/16/2003 10:51:41 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 10:46:39 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 10:46:39 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 1:38:10 AM eventlog None 6006
N/A COMPUTER-1A
Information 12/16/2003 1:37:59 AM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/15/2003 9:46:15 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/15/2003 2:22:50 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/15/2003 11:54:57 AM RemoteAccess None 20158
N/A COMPUTER-1A
Warning 12/15/2003 11:53:06 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/15/2003 11:48:03 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/15/2003 11:48:03 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/15/2003 12:45:05 AM eventlog None 6006
N/A COMPUTER-1A
Information 12/15/2003 12:28:00 AM RemoteAccess None 20159
N/A COMPUTER-1A



HTH


Solitary Soul
=======================

On Thu, 25 Dec 2003 16:24:16 GMT, "Colon Terminus" <(E-Mail Removed)>
wrote:

>
>Classic symptom of the Blaster worm. Obviously you can get on the internet,
>so download a "Blaster Removal Tool" and run it in safe mode. You'll also
>want to download and install the patch from Microsoft that prevents the
>Blaster worm from doing its thing.
>
>Merry Christmas.
>
>Oh, by the way, hanging yourself won't do a thing toward removing the
>blaster worm. You might wanna postpone this action.

I installed this patch a few months ago.

I downloaded and ran a removal tool again (Symantic) just to be sure
- and it found nothing.

Unless it's some new virus (I installed McAfee several days ago),
this isn't the problem.

I'm having a Hairy Christmas - and a Crappy New Year.

... and hanging myself is looking better all the time. :'-(


Solitary Soul
=======================

"Solitary Soul" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> On Thu, 25 Dec 2003 14:25:01 +1100, "Pegasus \(MVP\)" <(E-Mail Removed)>
wrote:
>
> >
> >"Solitary Soul" <(E-Mail Removed)> wrote in message
> >news:(E-Mail Removed)...
> >> On Thu, 25 Dec 2003 08:01:08 +1100, "Pegasus \(MVP\)" <(E-Mail Removed)>
> >wrote:
> >>
> >> >Since you can reboot in Safe Mode, it's one of your
> >> >drivers that causes the damage. Remove all non-essential
> >> >adapters (sound, network), then try again. If this does not
> >> >work then you have selectively disable non-essential
> >> >services until you find the culprit.
> >>
> >> Thanks for the response.
> >>
> >> What's the best way to proceed in order to do this?
> >>
> >>
> >> Solitary Soul
> >> =======================
> >
> >Open your machine and pull out those adapters that are
> >not essential to your PC' operation, then reboot the
> >machine and see what happens.
>
> OK - did and done - but I got the same result.
>
> I had an ethernet network adapter card (that wasn't plugged in to
anything)
> and a 4-port USB extender card (that I unplugged from the system board).
> Everything else is USB (which I had already unplugged before my OP).
>
> One more piece of information ...
>
> I waited at the login display (where it asks for a password), did nothing,
> and it rebooted after about 10-12 seconds. Something is being loaded at
that
> point that is causing the screw-up (it would seem). How do I deactivate
> that "stuff", and how do I tell which ones are essential and which ones
are not?
>
>
> Solitary Soul
> =======================

Time to start disabling services: Run msconfig.exe for WinXP
(http://www.svrops.com/svrops/dwnldoth.htm), boot
into Safe Mode, then look at what you can disable. Make a
careful not of everything you disable (verbatim!). If you disable
the wrong service then you can re-enable it via the Command
Console.

With respect to your ultimate solution, you need to consider
which takes longer: Creating a good, reliable knot or reloading
your system.

On Fri, 26 Dec 2003 07:16:53 +1100, "Pegasus \(MVP\)" <(E-Mail Removed)> wrote:

>
>"Solitary Soul" <(E-Mail Removed)> wrote in message
>news:(E-Mail Removed)...
>>
>> I waited at the login display (where it asks for a password), did nothing,
>> and it rebooted after about 10-12 seconds. Something is being loaded at that
>> point that is causing the screw-up (it would seem). How do I deactivate
>> that "stuff", and how do I tell which ones are essential and which ones are not?
>>
>>
>> Solitary Soul
>> =======================
>
>Time to start disabling services: Run msconfig.exe for WinXP
>(http://www.svrops.com/svrops/dwnldoth.htm), boot
>into Safe Mode, then look at what you can disable. Make a
>careful not of everything you disable (verbatim!). If you disable
>the wrong service then you can re-enable it via the Command
>Console.
>
>With respect to your ultimate solution, you need to consider
>which takes longer: Creating a good, reliable knot or reloading
>your system.

OK - I disabled everything in "Start Up" - and I got a normal boot!

<WILD CHEERS AND APPLAUSE>

So now I just need to use process of elimination to determine which
app is causing the problem - boot, check, reboot.

Another problem now is that it hangs on shut-down. Any ideas?


As far as "which takes longer" ... it doesn't matter - the process
of trying to figgir this out is edu-ma-cational, so it's worth the
time and effort - and also you can learn stuff on the way that may
be useful in solving future problems.


Solitary Soul
=======================