Boot Problems - woe is me ...

  • Thread starter Thread starter Solitary Soul
  • Start date Start date
S

Solitary Soul

Hi Gang,

Got lottsa' problems - woe is me ...

I powered up my computer yesterday, with Windows 2000 Professional,
and it got through the boot process to the point that it put up my
wallpaper and placed my icons on the desktop.

Then, it spontaneously rebooted.

I went through the boot process again, got to the same point,
and it spontaneously rebooted again. I went ‘round and ‘round
a few more times before I decided to perform disaster recovery.

So, I placed a new hard drive in the machine, partitioned and
formatted it (Partition Magic - I highly recommend it),
performed disaster recovery to hard drive #2 (the other hard drive
is still as it was yesterday), rebooted (cold), and, after the
Windows 2000 Pro logo, and before I got to the login window
(where it asks for my password), I got the following error:

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
LSASS.EXE - Application Error

X The application failed to initialize properly (0xc000007b).
Click on OK to terminate the application.

OK
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

So I click on "OK", and I get another display:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
The system process c:\WINNT\system32\LSASS.EXE terminated
unexpectedly with status code 128. The system is shutting down.
This shutdown was initiated by \.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

... and, after a 60-second countdown, it shuts down.

Well, this is a fine mess ...

I've managed to get online with an old computer to post this.

So ...

#1: Any idea as to why hard drive #1 is spontaneously rebooting?
I can slip it into another computer and access it as a secondary
data drive (all of my hard drives are in removable cartridges).
I can install Windows 2000 Pro on hard drive #2, and it doesn't do
this. I can boot hard drive #1 in safe mode, but I don't know what
to do with it once I do. It would seem that one of the applications
on startup is causing the problem, but I don't know how to access
those apps - how to disable them.

(BTW: does anyone know of any good books on how to troubleshoot
Windows 2000? ... With references to whatever tools that might
be useful?)

#2: Any idea as to why the app LSASS.EXE is not getting initialized
properly? ... and what I need to do to get it to do so? I don't
understand why I'm having this problem - the system was working fine
when I made the backup.

#3: Do you think I should just give up, go hang myself and call it a life?
It would put an end to a lot of my miseries.


My system board is an Albatron KX400-8XV, with an
AMD Athlon 2200, 512MB RAM, with an 80GB Maxtor.


Thanks,

Solitary Soul
=======================
 
Since you can reboot in Safe Mode, it's one of your
drivers that causes the damage. Remove all non-essential
adapters (sound, network), then try again. If this does not
work then you have selectively disable non-essential
services until you find the culprit.
 
Since you can reboot in Safe Mode, it's one of your
drivers that causes the damage. Remove all non-essential
adapters (sound, network), then try again. If this does not
work then you have selectively disable non-essential
services until you find the culprit.

Thanks for the response.

What's the best way to proceed in order to do this?


Solitary Soul
=======================
 
Solitary Soul said:
Thanks for the response.

What's the best way to proceed in order to do this?


Solitary Soul
=======================

Open your machine and pull out those adapters that are
not essential to your PC' operation, then reboot the
machine and see what happens.
 
Solitary Soul said:
Open your machine and pull out those adapters that are
not essential to your PC' operation, then reboot the
machine and see what happens.

OK - did and done - but I got the same result.

I had an ethernet network adapter card (that wasn't plugged in to anything)
and a 4-port USB extender card (that I unplugged from the system board).
Everything else is USB (which I had already unplugged before my OP).

One more piece of information ...

I waited at the login display (where it asks for a password), did nothing,
and it rebooted after about 10-12 seconds. Something is being loaded at that
point that is causing the screw-up (it would seem). How do I deactivate
that "stuff", and how do I tell which ones are essential and which ones are not?


Solitary Soul
=======================
 
Classic symptom of the Blaster worm. Obviously you can get on the internet,
so download a "Blaster Removal Tool" and run it in safe mode. You'll also
want to download and install the patch from Microsoft that prevents the
Blaster worm from doing its thing.

Merry Christmas.

Oh, by the way, hanging yourself won't do a thing toward removing the
blaster worm. You might wanna postpone this action.
 
Someone on the Ziff-Davis forum is hinting that LSASS might be the culprit.

That could be ...


What follows is a dump of my system log for the last 10 days:


Type Date Time Source Category Event User Computer
Error 12/25/2003 10:45:27 AMDCOMNone10010SYSTEMCOMPUTER-1A
Error 12/25/2003 10:42:53 AM
Service Control Manager None 7001 N/A COMPUTER-1A
Error 12/25/2003 10:42:37 AM Service Control Manager None 7026
N/A COMPUTER-1A
Error 12/25/2003 10:42:37 AM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/25/2003 10:42:35 AM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/25/2003 10:42:35 AM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/25/2003 10:42:35 AM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/25/2003 10:42:33 AM Save Dump None 1001
N/A COMPUTER-1A
Error 12/25/2003 10:42:31 AM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/25/2003 10:42:31 AM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/25/2003 10:42:31 AM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/25/2003 10:42:31 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/25/2003 10:42:31 AM eventlog None 6009
N/A COMPUTER-1A
Error 12/25/2003 10:42:31 AM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/25/2003 9:18:37 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/25/2003 9:18:37 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/25/2003 9:18:38 AM Save Dump None 1001
N/A COMPUTER-1A
Information 12/25/2003 9:17:02 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/25/2003 9:17:02 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/25/2003 9:17:03 AM Save Dump None 1001
N/A COMPUTER-1A
Information 12/24/2003 9:29:41 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/24/2003 9:29:41 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/24/2003 9:29:41 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/24/2003 9:27:36 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/24/2003 9:27:36 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/24/2003 9:27:36 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/24/2003 9:25:35 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/24/2003 9:25:35 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/24/2003 9:25:35 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/24/2003 9:23:44 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/24/2003 9:23:44 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/24/2003 9:12:46 PM eventlog None 6006
N/A COMPUTER-1A
Error 12/24/2003 9:12:45 PM DCOM None 10010 SYSTEM
COMPUTER-1A
Error 12/24/2003 8:44:42 PM DCOM None 10010 SYSTEM
COMPUTER-1A
Error 12/24/2003 8:42:36 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/24/2003 8:42:16 PM Service Control Manager None 7026
N/A COMPUTER-1A
Error 12/24/2003 8:42:15 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/24/2003 8:42:13 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/24/2003 8:42:13 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/24/2003 8:42:13 PM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/24/2003 8:42:06 PM Save Dump None 1001
N/A COMPUTER-1A
Error 12/24/2003 8:42:05 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/24/2003 8:42:05 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/24/2003 8:42:05 PM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/24/2003 8:42:05 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/24/2003 8:42:05 PM eventlog None 6009
N/A COMPUTER-1A
Error 12/24/2003 8:42:05 PM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/24/2003 8:39:14 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/24/2003 8:39:14 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/24/2003 8:39:15 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:44:23 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:44:23 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:44:23 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:42:16 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:42:16 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:42:17 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:40:25 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:40:25 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:39:18 PM eventlog None 6006
N/A COMPUTER-1A
Error 12/22/2003 2:38:18 PM DCOM None 10010 SYSTEM
COMPUTER-1A
Error 12/22/2003 2:38:04 PM DCOM None 10010 Administrator
COMPUTER-1A
Error 12/22/2003 2:37:34 PM DCOM None 10010 Administrator
COMPUTER-1A
Error 12/22/2003 2:37:04 PM DCOM None 10010 Administrator
COMPUTER-1A
Error 12/22/2003 2:36:34 PM DCOM None 10010 Administrator
COMPUTER-1A
Error 12/22/2003 2:36:04 PM DCOM None 10010 SYSTEM
COMPUTER-1A
Error 12/22/2003 2:33:46 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/22/2003 2:33:31 PM Service Control Manager None 7026
N/A COMPUTER-1A
Error 12/22/2003 2:33:31 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/22/2003 2:33:30 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/22/2003 2:33:30 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/22/2003 2:33:30 PM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/22/2003 2:33:26 PM Save Dump None 1001
N/A COMPUTER-1A
Error 12/22/2003 2:33:26 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/22/2003 2:33:26 PM Service Control Manager None 7001
N/A COMPUTER-1A
Error 12/22/2003 2:33:26 PM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/22/2003 2:33:26 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:33:26 PM eventlog None 6009
N/A COMPUTER-1A
Error 12/22/2003 2:33:26 PM Service Control Manager None 7001
N/A COMPUTER-1A
Information 12/22/2003 2:31:07 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:31:07 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:31:07 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:28:20 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:28:20 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:28:20 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:26:22 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:26:22 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:26:23 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:24:18 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:24:18 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:24:18 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:22:05 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:22:05 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:22:05 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:19:54 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:19:54 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:19:54 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:17:44 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:17:44 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:17:44 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:15:35 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:15:35 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:15:35 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:13:15 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:13:15 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:13:16 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:11:03 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:11:03 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:11:03 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:08:55 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:08:55 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 2:08:55 PM Save Dump None 1001
N/A COMPUTER-1A
Information 12/22/2003 2:06:49 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 2:06:49 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/22/2003 1:50:33 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/22/2003 1:50:08 PM Application Popup None
26 N/A COMPUTER-1A
Warning 12/22/2003 1:49:46 PM disk None 50 N/A
COMPUTER-1A
Information 12/22/2003 1:49:45 PM Application Popup None
26 N/A COMPUTER-1A
Warning 12/22/2003 1:49:45 PM disk None 50 N/A
COMPUTER-1A
Warning 12/22/2003 1:49:45 PM disk None 51 N/A
COMPUTER-1A
Warning 12/22/2003 1:49:45 PM disk None 51 N/A
COMPUTER-1A
Information 12/22/2003 1:49:00 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/22/2003 12:37:25 PM Removable Storage Service
None 134 N/A COMPUTER-1A
Warning 12/22/2003 12:32:35 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/22/2003 12:30:13 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/22/2003 12:27:31 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/22/2003 12:27:31 PM eventlog None 6009
N/A COMPUTER-1A
Information 1221/2003 11:58:35 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/21/2003 9:04:36 PM RemoteAccess None 20159
N/A COMPUTER-1A
Warning 12/21/2003 4:32:50 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/21/2003 4:30:49 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/21/2003 4:27:46 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/21/2003 4:27:46 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/21/2003 11:29:30 AM eventlog None 6006
N/A COMPUTER-1A
Information 12/21/2003 11:29:18 AM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/21/2003 8:54:00 AM RemoteAccess None 20158
N/A COMPUTER-1A
Warning 12/21/2003 8:36:27 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/21/2003 8:31:23 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/21/2003 8:31:23 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/20/2003 10:28:08 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/20/2003 10:27:48 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/20/2003 3:47:32 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/20/2003 1:03:05 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/20/2003 9:25:15 AM RemoteAccess None 20158
N/A COMPUTER-1A
Warning 12/20/2003 8:40:51 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/20/2003 8:35:47 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/20/2003 8:35:47 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/19/2003 10:52:23 AM eventlog None 6006
N/A COMPUTER-1A
Information 12/19/2003 10:52:04 AM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/19/2003 9:34:21 AM RemoteAccess None 20158
N/A COMPUTER-1A
Warning 12/19/2003 9:28:00 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/19/2003 9:22:57 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/19/2003 9:22:57 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/18/2003 11:48:32 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/18/2003 11:48:19 PM RemoteAccess None 20159
N/A COMPUTER-1A
Warning 12/18/2003 9:59:25 AM disk None 52 N/A
COMPUTER-1A
Information 12/18/2003 9:29:10 AM Removable Storage Service
None 134 N/A COMPUTER-1A
Information 12/18/2003 9:07:21 AM RemoteAccess None 20158
N/A COMPUTER-1A
Warning 12/18/2003 9:05:15 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/18/2003 9:00:12 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/18/2003 9:00:12 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/18/2003 1:22:31 AM eventlog None 6006
N/A COMPUTER-1A
Information 12/18/2003 1:22:15 AM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/18/2003 1:06:22 AM Removable Storage Service
None 134 N/A COMPUTER-1A
Error 12/17/2003 11:16:04 PM disk None 7 N/A
COMPUTER-1A
Information 12/17/2003 10:26:28 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/17/2003 9:44:31 PM RemoteAccess None 20159
N/A COMPUTER-1A
Warning 12/17/2003 9:32:53 PM disk None 52 N/A
COMPUTER-1A
Error 12/17/2003 9:12:02 PM disk None 7 N/A
COMPUTER-1A
Information 12/17/2003 9:07:44 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/17/2003 8:46:30 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/17/2003 7:00:51 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/17/2003 4:10:26 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/17/2003 4:08:18 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/17/2003 4:04:40 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/17/2003 3:43:01 PM RemoteAccess None 20158
N/A COMPUTER-1A
Warning 12/17/2003 3:38:41 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/17/2003 3:33:37 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/17/2003 3:33:37 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/17/2003 3:31:55 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/17/2003 3:31:54 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/17/2003 1:15:17 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/17/2003 1:01:11 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/17/2003 11:06:56 AM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/17/2003 10:56:16 AM RemoteAccess None 20159
N/A COMPUTER-1A
Warning 12/17/2003 9:47:43 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/17/2003 9:45:25 AM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/17/2003 9:42:39 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/17/2003 9:42:39 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/17/2003 1:51:52 AM eventlog None 6006
N/A COMPUTER-1A
Information 12/17/2003 1:51:34 AM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/17/2003 12:37:39 AM RemoteAccess None 20158
N/A COMPUTER-1A
Error 12/17/2003 12:10:55 AM disk None 7 N/A
COMPUTER-1A
Error 12/17/2003 12:10:52 AM disk None 7 N/A
COMPUTER-1A
Error 12/17/2003 12:10:48 AM disk None 7 N/A
COMPUTER-1A
Error 12/17/2003 12:10:45 AM disk None 7 N/A
COMPUTER-1A
Error 12/17/2003 12:10:41 AM disk None 7 N/A
COMPUTER-1A
Error 12/17/2003 12:10:38 AM disk None 7 N/A
COMPUTER-1A
Warning 12/16/2003 11:56:07 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 11:51:04 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 11:51:04 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 11:49:30 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/16/2003 11:33:50 PM RemoteAccess None 20159
N/A COMPUTER-1A
Warning 12/16/2003 10:58:52 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 10:56:48 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/16/2003 10:53:49 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 10:53:49 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 10:52:10 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/16/2003 10:52:07 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/16/2003 10:33:59 PM RemoteAccess None 20158
N/A COMPUTER-1A
Error 12/16/2003 10:10:03 PM disk None 7 N/A
COMPUTER-1A
Error 12/16/2003 10:09:59 PM disk None 7 N/A
COMPUTER-1A
Error 12/16/2003 10:09:56 PM disk None 7 N/A
COMPUTER-1A
Error 12/16/2003 10:09:52 PM disk None 7 N/A
COMPUTER-1A
Error 12/16/2003 10:09:48 PM disk None 7 N/A
COMPUTER-1A
Error 12/16/2003 10:09:45 PM disk None 7 N/A
COMPUTER-1A
Warning 12/16/2003 9:58:57 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 9:53:55 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 9:53:55 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 9:52:21 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/16/2003 9:49:56 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 9:49:56 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 9:48:10 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/16/2003 9:48:10 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/16/2003 8:28:17 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/16/2003 7:30:07 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/16/2003 6:44:07 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/16/2003 6:04:57 PM RemoteAccess None 20159
N/A COMPUTER-1A
Warning 12/16/2003 4:27:38 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 4:27:06 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/16/2003 4:22:35 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 4:22:35 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 3:57:07 PM eventlog None 6006
N/A COMPUTER-1A
Information 12/16/2003 3:56:54 PM RemoteAccess None 20159
N/A COMPUTER-1A
Warning 12/16/2003 12:34:45 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 12:33:10 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/16/2003 12:29:42 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 12:29:42 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 12:28:02 PM eventlog None 6006
N/A COMPUTER-1A
Warning 12/16/2003 12:20:56 PM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 12:15:53 PM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 12:15:53 PM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 12:14:13 PM eventlog None 6006
N/A COMPUTER-1A
Warning 12/16/2003 11:56:31 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 11:51:28 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 11:51:28 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 11:49:49 AM eventlog None 6006
N/A COMPUTER-1A
Warning 12/16/2003 10:51:41 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/16/2003 10:46:39 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/16/2003 10:46:39 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/16/2003 1:38:10 AM eventlog None 6006
N/A COMPUTER-1A
Information 12/16/2003 1:37:59 AM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/15/2003 9:46:15 PM RemoteAccess None 20158
N/A COMPUTER-1A
Information 12/15/2003 2:22:50 PM RemoteAccess None 20159
N/A COMPUTER-1A
Information 12/15/2003 11:54:57 AM RemoteAccess None 20158
N/A COMPUTER-1A
Warning 12/15/2003 11:53:06 AM Srv None 2013 N/A
COMPUTER-1A
Information 12/15/2003 11:48:03 AM eventlog None 6005
N/A COMPUTER-1A
Information 12/15/2003 11:48:03 AM eventlog None 6009
N/A COMPUTER-1A
Information 12/15/2003 12:45:05 AM eventlog None 6006
N/A COMPUTER-1A
Information 12/15/2003 12:28:00 AM RemoteAccess None 20159
N/A COMPUTER-1A



HTH


Solitary Soul
=======================
 
Classic symptom of the Blaster worm. Obviously you can get on the internet,
so download a "Blaster Removal Tool" and run it in safe mode. You'll also
want to download and install the patch from Microsoft that prevents the
Blaster worm from doing its thing.

Merry Christmas.

Oh, by the way, hanging yourself won't do a thing toward removing the
blaster worm. You might wanna postpone this action.

I installed this patch a few months ago.

I downloaded and ran a removal tool again (Symantic) just to be sure
- and it found nothing.

Unless it's some new virus (I installed McAfee several days ago),
this isn't the problem.

I'm having a Hairy Christmas - and a Crappy New Year.

... and hanging myself is looking better all the time. :'-(


Solitary Soul
=======================
 
Solitary Soul said:
OK - did and done - but I got the same result.

I had an ethernet network adapter card (that wasn't plugged in to anything)
and a 4-port USB extender card (that I unplugged from the system board).
Everything else is USB (which I had already unplugged before my OP).

One more piece of information ...

I waited at the login display (where it asks for a password), did nothing,
and it rebooted after about 10-12 seconds. Something is being loaded at that
point that is causing the screw-up (it would seem). How do I deactivate
that "stuff", and how do I tell which ones are essential and which ones are not?


Solitary Soul
=======================

Time to start disabling services: Run msconfig.exe for WinXP
(http://www.svrops.com/svrops/dwnldoth.htm), boot
into Safe Mode, then look at what you can disable. Make a
careful not of everything you disable (verbatim!). If you disable
the wrong service then you can re-enable it via the Command
Console.

With respect to your ultimate solution, you need to consider
which takes longer: Creating a good, reliable knot or reloading
your system.
 
Time to start disabling services: Run msconfig.exe for WinXP
(http://www.svrops.com/svrops/dwnldoth.htm), boot
into Safe Mode, then look at what you can disable. Make a
careful not of everything you disable (verbatim!). If you disable
the wrong service then you can re-enable it via the Command
Console.

With respect to your ultimate solution, you need to consider
which takes longer: Creating a good, reliable knot or reloading
your system.

OK - I disabled everything in "Start Up" - and I got a normal boot!

<WILD CHEERS AND APPLAUSE>

So now I just need to use process of elimination to determine which
app is causing the problem - boot, check, reboot.

Another problem now is that it hangs on shut-down. Any ideas?


As far as "which takes longer" ... it doesn't matter - the process
of trying to figgir this out is edu-ma-cational, so it's worth the
time and effort - and also you can learn stuff on the way that may
be useful in solving future problems.


Solitary Soul
=======================
 
Solitary Soul said:
OK - I disabled everything in "Start Up" - and I got a normal boot!

<WILD CHEERS AND APPLAUSE>

So now I just need to use process of elimination to determine which
app is causing the problem - boot, check, reboot.

Another problem now is that it hangs on shut-down. Any ideas?


As far as "which takes longer" ... it doesn't matter - the process
of trying to figgir this out is edu-ma-cational, so it's worth the
time and effort - and also you can learn stuff on the way that may
be useful in solving future problems.


Solitary Soul
=======================

Congratulations!

I would be interested to know what causes your current problem.
Please post again once you have isolated the culprit.

With respect to your shut-down problem: I have no experience in
that area at all. On the other hand, the problem might resolve
itself after you have re-enabled a number of things. If not then
you might have to start another thread in this newsgroup.
 
Solitary Soul said:
Congratulations!

I would be interested to know what causes your current problem.
Please post again once you have isolated the culprit.

With respect to your shut-down problem: I have no experience in
that area at all. On the other hand, the problem might resolve
itself after you have re-enabled a number of things. If not then
you might have to start another thread in this newsgroup.

OK - let's remember that I haven't reconnected any USB devices.
Once I do, and the drivers get reloaded, there is the possibility
that one of them could screw things up again.

Question: WRT msconfig - once I switch from selective startup to normal
startup, will all of the items that I deselected in my startup list
REMAIN deselected? ... or do I have to uninstall them?

BTW: The shutdown problem cleared up after I re-enabled system services,
so you were on target with that.

... and I still have the issue of LSASS.EXE in my disaster recovery
and why THAT didn't reboot (reinitialize).

Maybe I'll hit it with msconfig and perform the same analysis. ;-)


Solitary Soul
=======================
 
[snip]
I'm having a Hairy Christmas - and a Crappy New Year.

... and hanging myself is looking better all the time. :'-(


Solitary Soul
=======================

All well and good if you're a plastic surgeon.
 
Hi gang,

I'm just making a post to let you know how things came out with my problems.

#1: The problem with the hard drive spontaneously rebooting was caused
by one of two things (or perhaps both). For some reason,
InCD (the UDF packet-writing software for my DVD+RW drive) was
being loaded twice on start-up - and I have no idea as to how that
happened. The other thing might have been the presence of McAfee
virus protection software with elements of Norton SystemWorks.
Upon installation, McAfee alerted me to the presence of Norton
Anti-virus, and queried me as to whether or not I wanted to delete it.
I selected the "yes" option, and I thought that McAfee deleted
everything that might have caused a conflict - and maybe it DID,
and it might have been the InCD thing that was causing the problem.

I dunno ...

I've removed the second installation of InCD from the "run" branch
of my registry.

I received the copy of Norton SystemWorks 2004 that I won on eBay
a few days ago, uninstalled McAfee completely, and I am now using
Norton SystemWorks (with Norton Firewall) exclusively.

Tomorrow, I'm going to create a new full backup of my hard drive.

... speaking of backups, that leads us to the second problem:

#2: The problem with LSASS.EXE not being properly initialized was
never really answered. I tried to boot up in safe mode, but this
problem would not allow me to do so.

When I create backups, I always make 2 sets. I performed a
recovery of the second set, and it booted OK - the problem
with LSASS did not manifest itself ... huh ... go figure.

The moral of the story is, when you create backups,
ALWAYS MAKE AT LEAST TWO SETS! From now on, I'm making three!

(BTW: does anyone know of any good books on how to troubleshoot
Windows 2000? ... With references to whatever tools that might
be useful?)

I would like to extend my thanks to Colon Terminus for his input,
and my extreme gratitude to Pegasus for getting me headed in the
right direction - Pegasus definitely IS an MVP as far as I'm concerned.

When Windows gives me hell, I know where to go!


Thanks again,

Solitary Soul
===============================


Hi Gang,

Got lottsa' problems - woe is me ...

I powered up my computer yesterday, with Windows 2000 Professional,
and it got through the boot process to the point that it put up my
wallpaper and placed my icons on the desktop.

Then, it spontaneously rebooted.

I went through the boot process again, got to the same point,
and it spontaneously rebooted again. I went ‘round and ‘round
a few more times before I decided to perform disaster recovery.

So, I placed a new hard drive in the machine, partitioned and
formatted it (Partition Magic - I highly recommend it),
performed disaster recovery to hard drive #2 (the other hard drive
is still as it was yesterday), rebooted (cold), and, after the
Windows 2000 Pro logo, and before I got to the login window
(where it asks for my password), I got the following error:

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
LSASS.EXE - Application Error

X The application failed to initialize properly (0xc000007b).
Click on OK to terminate the application.

OK
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

So I click on "OK", and I get another display:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
The system process c:\WINNT\system32\LSASS.EXE terminated
unexpectedly with status code 128. The system is shutting down.
This shutdown was initiated by \.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

... and, after a 60-second countdown, it shuts down.

Well, this is a fine mess ...

I've managed to get online with an old computer to post this.

So ...

#1: Any idea as to why hard drive #1 is spontaneously rebooting?
I can slip it into another computer and access it as a secondary
data drive (all of my hard drives are in removable cartridges).
I can install Windows 2000 Pro on hard drive #2, and it doesn't do
this. I can boot hard drive #1 in safe mode, but I don't know what
to do with it once I do. It would seem that one of the applications
on startup is causing the problem, but I don't know how to access
those apps - how to disable them.

(BTW: does anyone know of any good books on how to troubleshoot
Windows 2000? ... With references to whatever tools that might
be useful?)

#2: Any idea as to why the app LSASS.EXE is not getting initialized
properly? ... and what I need to do to get it to do so? I don't
understand why I'm having this problem - the system was working fine
when I made the backup.

#3: Do you think I should just give up, go hang myself and call it a life?
It would put an end to a lot of my miseries.


My system board is an Albatron KX400-8XV, with an
AMD Athlon 2200, 512MB RAM, with an 80GB Maxtor.


Thanks,


Solitary Soul -> http://users3.ev1.net/~solitarysoul/
 
Solitary Soul said:
Hi gang,

I'm just making a post to let you know how things came out with my problems.

#1: The problem with the hard drive spontaneously rebooting was caused
by one of two things (or perhaps both). For some reason,
InCD (the UDF packet-writing software for my DVD+RW drive) was
being loaded twice on start-up - and I have no idea as to how that
happened. The other thing might have been the presence of McAfee
virus protection software with elements of Norton SystemWorks.
Upon installation, McAfee alerted me to the presence of Norton
Anti-virus, and queried me as to whether or not I wanted to delete it.
I selected the "yes" option, and I thought that McAfee deleted
everything that might have caused a conflict - and maybe it DID,
and it might have been the InCD thing that was causing the problem.

I dunno ...

I've removed the second installation of InCD from the "run" branch
of my registry.

I received the copy of Norton SystemWorks 2004 that I won on eBay
a few days ago, uninstalled McAfee completely, and I am now using
Norton SystemWorks (with Norton Firewall) exclusively.

Tomorrow, I'm going to create a new full backup of my hard drive.

... speaking of backups, that leads us to the second problem:

#2: The problem with LSASS.EXE not being properly initialized was
never really answered. I tried to boot up in safe mode, but this
problem would not allow me to do so.

When I create backups, I always make 2 sets. I performed a
recovery of the second set, and it booted OK - the problem
with LSASS did not manifest itself ... huh ... go figure.

The moral of the story is, when you create backups,
ALWAYS MAKE AT LEAST TWO SETS! From now on, I'm making three!

(BTW: does anyone know of any good books on how to troubleshoot
Windows 2000? ... With references to whatever tools that might
be useful?)

I would like to extend my thanks to Colon Terminus for his input,
and my extreme gratitude to Pegasus for getting me headed in the
right direction - Pegasus definitely IS an MVP as far as I'm concerned.

When Windows gives me hell, I know where to go!


Thanks again,

Solitary Soul
===============================



Thanks for the feedback.

With respect to your query about a trouble-shooting guide for
Win2000: I don't know any but I suggest you start a new
thread, with an appropriate Subject line, to get advice from
other respondents. The current thread is getting a little stale.

As an alternative, read some of the posts in this forum (and
perhaps consider becoming a contributor). I have learnt an
awful lot in here!
 
Thanks for the feedback.

With respect to your query about a trouble-shooting guide for
Win2000: I don't know any but I suggest you start a new
thread, with an appropriate Subject line, to get advice from
other respondents. The current thread is getting a little stale.

OK - maybe later when I have more time.

As an alternative, read some of the posts in this forum (and
perhaps consider becoming a contributor). I have learnt an
awful lot in here!

I think I will (spend more time in this forum), though I don't
think I have much to contribute - I'm pretty far down on the
totem pole knowledge-wise in *this* NG.

<*slipping back into lurk mode*>


Solitary Soul
=======================
 
Back
Top