> I think it is windows xp sp2
Let's find out for sure: Right-click on My Computer | select Properties |
Your full Windows version will be displayed on the resulting General tab.
> ...I did install system mechanic professional...several months ago
Not a good idea! If you think your Registry needs to be "cleaned" or
"repaired," read
http://aumha.net/viewtopic.php?t=28099 and draw your own
conclusions.
> ...I think this happened when some spyware was being removed and I
> had to restart the computer to complete.
Sounds like you have much more work to do.
NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.
2. Run the Windows Live Safety Center's 'Protection' scan (only!) in Safe
Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm
3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.
Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/...moving_Malware
**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachi...php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**
If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
www.banthecheck.com
clem wrote:
> PA Bear,
> I think it is windows xp sp2, I had windows defender and AVG, THis is a
> dell
> dimension 9100 that is about 6 yrs old (not the one I am using now) and i
> don't think norton or mcafee has been installed. I did install system
> mechanic professional but not the anti virus. this was installed several
> months ago. I think this happened when some spyware was being removed and
> I
> had to restart the computer to complete. I did not change the admin.
> info.
> clem
>
> "PA Bear [MS MVP]" wrote:
>> Please state your full Windows version (e.g., WinXP SP3) when posting to
>> this newsgroup.
>>
>> <QP>
>> 0xC000021A: STATUS_SYSTEM_PROCESS_TERMINATED
>> This occurs when Windows switches into kernel mode and a user-mode
>> subsystem, such as Winlogon or the Client Server Runtime Subsystem
>> (CSRSS),
>> is compromised. Security can no longer be guaranteed. Because Win XP can’t
>> run without Winlogon or CSRSS, this is one of the few situations where
>> the
>> failure of a user-mode service can cause the system to stop responding.
>> This Stop message also can occur as a result of malware infestation or
>> when the computer is restarted after a system administrator has modified
>> permissions so that the SYSTEM account no longer has adequate permissions
>> to access system files and folders.
>> </QP>
>> Source: http://aumha.org/a/stop.htm
>>
>> What anti-virus application or security suite is installed and is your
>> subscription current? What anti-spyware applications (other than
>> Defender)? What third-party firewall (if any)?
>>
>> Has a(another) Norton or McAfee application ever been installed on this
>> machine (e.g., a free-trial version that came preinstalled when you
>> bought
>> it)?
>>
>> clem wrote:
>>> i am receiving stop: c00021a fatal system error the windows longon
>>> process
>>> system process terminated upexpectedly with a status 0xc0000135
>>> (0x00000000
>>> 0x00000000) the system has been shut down.
>>>
>>> i tried the f8 safe mode and that did not work. I tried to go back to a
>>> good restart but that did not work. I did see at one time when this all
>>> started a message that said ntfs the volume is dirty. I am not very
>>> computer
>>> savy, can anyone help me?