System has recovered from a serious error

  goll_y 18:37 18 Jun 2004
Locked

I've started getting the following message every time I try to login to windows- I can't get into windows and the system keeps restarting. I can however get into safe mode (not safe mode with networking) but am not sure what to do to rectify the situation. Tried going to a previous restore point but the problem remains. Need to sort it asap.

The system says (on a blue screen)

STOP: C0000219 (Fatal System Error)
The windows logon process terminated unexpectedly with a status of -

0xc0000005 (0x00000000 0x00000000) The system has shutdown

  VoG II 18:42 18 Jun 2004

Is this Windows XP and are you pressing CTRL+ALT+DEL to get to the login screen? If so click here

  goll_y 18:49 18 Jun 2004

no the problem happens when I turn on the computer from being off.

  goll_y 19:06 18 Jun 2004

I am using XP Professional though

  goll_y 07:44 19 Jun 2004

Does anyone have an idea?

  goll_y 08:21 19 Jun 2004

oops it should be -

c000021a

  goll_y 11:34 21 Jun 2004

Could someone please have a look at this and let me know if I need to do anything

Logfile of HijackThis v1.97.7
Scan saved at 22:02:19, on 19/06/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = click here

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = click here

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = click here

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = click here

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = click here

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = click here

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = click here

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://c:/spad/start.html

  goll_y 11:34 21 Jun 2004

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = click here

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = click here

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = click here

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=click here;ftp=click here

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)

O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O3 - Toolbar: Freeserve - {8B68564D-53FD-4293-B80C-993A9F3988EE} - C:\PROGRA~1\FREESE~1\FSBar\FSBar.dll
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP

O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe

O4 - HKLM\..\Run: [XTNDConnect PC - ErPhn2] C:\PROGRA~1\COMMON~1\XCPCSync\TRANSL~1\ErPhn2\ErTray.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [OmniPage] C:\Program Files\Caere\OmniPagePro90\opware32.exe

O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe

O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O8 - Extra context menu item: Search with Freeserve - res://C:\PROGRA~1\FREESE~1\FSBar\FSBar.dll/VSearch.htm

O9 - Extra button: Microsoft® JavaScript® Console (HKLM)

O9 - Extra 'Tools' menuitem: JavaScript Console (HKLM)

O9 - Extra button: Microsoft® JavaScript® Console (HKCU)

O9 - Extra 'Tools' menuitem: JavaScript Console (HKCU)

O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll

O14 - IERESET.INF: START_PAGE_URL=click here

O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - click here

O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - click here

O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - click here

O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - click here

O16 - DPF: {C606BA60-AB76-48B6-96A7-2C4D5C386F70} (PreQualifier Class) - click here

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - click here

  VoG II 11:46 21 Jun 2004

You should use HJT to remove all entries containing click here and spad click here

  Alexandros 11:53 21 Jun 2004

I've noticed a running process named lsass.exe. This process is a result of the Sasser worm so you should use a remover tool. Sorry I don't know which one will do, maybe someone else does.

Good luck

A.

  Alexandros 11:54 21 Jun 2004

By the way this may be usefull. click here

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

AMD Radeon Adrenalin release date, new features, compatible graphics cards

Inside the iMac Pro - Apple's most powerful Mac yet

iMac Pro release date, UK price & specs

Football : comment regarder la Ligue 1 en direct ?