Bluescreened only at shutdown/reboot - help anyone?

[Tony Meloche]

This happens about 2 times out of three when shutting down or rebooting.
I'm enclosing all teh relevant data I can think of. Here's what you
should know first of all:

The computer boots up and runs perfectly. No problems of any kind with
anything from boot until shutdown or reboot, whether five minutes or
five hours later.

Avast Professional, up to date thorough scan - clean.

Four different well-respected anti-malware tools, all current on
updates, full scans - nada.

Event log, any category: Nothing out of the ordinary.

I AM running UPH clean.

This is the bluescreen I get. On *normal* shutdown or reboot, first the
icons disappear from the desktop, then the "Windows Blue" screens:
Saving your settings, shutting down, etc. On the bluescreen shut down
or reboot, the icons disappear, then the blank desktop pauses for a
moment, then black - the bluescreen comes up with this info"

Fatal Error - LOGIN process system C000021A (note I am *shutting down*
at the time! Login??)



Status of

(0x 00000000 0x00000000)

About a third of the time, it shuts down perfectly normally. I can boot
fine, I can use my computer perfectly normally, but this is a problem -
no bluescreen is good - can anyone help?

Thanks!

Tony

 

[Gerry]

Tony


Background information on Stop Error message
http://msdn2.microsoft.com/en-us/library/ms797159.aspx

0xC000021A: STATUS_SYSTEM_PROCESS_TERMINATED
This occurs when Windows switches into kernel mode and a user-mode
subsystem, such as Winlogon or the Client Server Runtime Subsystem
(CSRSS), is compromised. Security can no longer be guaranteed. Because
Win XP can't run without Winlogon or CSRSS, this is one of the few
situations where the failure of a user-mode service can cause the system
to stop responding. This Stop message also can occur as a result of
malware infestation or when the computer is restarted after a system
administrator has modified permissions so that the SYSTEM account no
longer has adequate permissions to access system files and folders.
Source: http://aumha.org/a/stop.htm

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[JS]

GoBack causes a Stop error C000021a:
http://support.microsoft.com/kb/316503

JS

 

[Tony Meloche]

Tony


Background information on Stop Error message
http://msdn2.microsoft.com/en-us/library/ms797159.aspx

0xC000021A: STATUS_SYSTEM_PROCESS_TERMINATED
This occurs when Windows switches into kernel mode and a user-mode
subsystem, such as Winlogon or the Client Server Runtime Subsystem
(CSRSS), is compromised. Security can no longer be guaranteed. Because
Win XP can't run without Winlogon or CSRSS, this is one of the few
situations where the failure of a user-mode service can cause the system
to stop responding. This Stop message also can occur as a result of
malware infestation or when the computer is restarted after a system
administrator has modified permissions so that the SYSTEM account no
longer has adequate permissions to access system files and folders.
Source: http://aumha.org/a/stop.htm

Thanks, Gerry - I got a lot of info from that site that helped in
understanding the problem, though none of it seemed to apply directly to
my situation. I was able to recover by using System Restore from last
Friday - day before the problem started (I wanted to see if there were
other alternatives first). But I appreciate the info, and have
bookmarked that site.

Tony

 

[Tony Meloche]

GoBack causes a Stop error C000021a:
http://support.microsoft.com/kb/316503

Thanks JS - I deleted and scrubbed "everything Norton" some months ago,
including GoBack. I was able to solve the problem using System Restore,
but I wanted to see if there were other alternatives first, but nothing
I looked up or consulted for here applied directly to my situation.
Frankly, I wondered if SysRestore would fix it, but it did.

Have made no noteworthy changes to my computer since Friday (downloads,
etc.) nor changed settings, so I will just have to wonder what caused
it. But thankfully, all seems well again now.

Tony

 

[JS]

Glad to here all is well.
Most (but not all) of System Restore's capability is putting the registry
back to were it was at the point in time the restore point was created.

For more info see:
http://www.microsoft.com/windowsxp/using/helpandsupport/getstarted/ballew_03may19.mspx

JS