BSOD on boot, possibly related to worm

Arlonharrison · 12-15-2006, 06:55 PM

I have a relatively new installation of Windows 2000 on my computer. It booted just fine the first time. I downloaded and installing a few applications (ZoneAlarm, IE6, Firefox, Winrar) and rebooted the computer, where it promptly locked up solid at the logon screen. After a second reboot, I got the following stop error (Well, I'm pretty sure this was the error, because every subsequent reboot also gave me an error, and it took me quite some time to figure out how to prevent the system from automatically rebooting so that I could actually *read* it):

STOP: C00021A {Fatal System Error}
The Windows Logon Process system process terminated unexpectedly with a status of 0x00000080 <0x00000000 0x00000000>.

I'm able to get into Safe Mode just fine, which I did. I quickly discovered quite a few programs and "services" that didn't belong, including a winlogon.exe in C:\Winnt\System, and several other phony services (Just my luck, I get hit in the half hour or so it took me to set up the firewall....). I removed them, and removed the entries for them (after performing backups of course), but I'm still having the same problem, and to be frank, am at a complete loss about what to do to fix it. (At this point, and with a pretty new installation, it'd probably be easier just to reinstall Windows, but I didn't recieve a recovery disk with the computer.)

Any suggestions? I'd scan the .exe's I removed for viruses if I could, but I can't get AVG installed under safe mode, and really don't know what anti-virus program I can use that I could do that with.

Arlonharrison · 12-15-2006, 08:09 PM

Someone elsewhere recommended I try Nod32, which identified the virus as a variant of IRC/SdBot trojan.

dai · 12-16-2006, 10:09 AM

http://www.techsupportforum.com/showthread.php?t=15968

Arlonharrison · 12-16-2006, 02:41 PM

Quote:

Originally Posted by dai

http://www.techsupportforum.com/showthread.php?t=15968

I'd already run Hijackthis, which is how I was able to detect the worm that was trying to load itself as a service (even though I failed to identify it until later). In the end, I just gave up. Wiped my hard drive and installed Ubuntu.

dai · 12-16-2006, 11:56 PM

what operating system is loaded 2000 or ubuntu
what disks do you have

Arlonharrison · 12-17-2006, 12:01 AM

Windows 2000 was loaded. After trying pretty much everything to fix it (uninstalling ie6, zonealarm, pretty much everything in the add/remove applet besides the intel drivers) all I had achieved was more system instability. I couldn't even access the add/remove programs applet without the system crashing, so I installed Ubuntu.

Ubuntu is the operating system I am running now. I have disks for Windows 95, Windows 98, and Ubuntu 5.10 (Breezy).

dai · 12-17-2006, 12:20 AM

if you are using ubuntu and have wiped 2000 and don't have the disk to reload it or run system checks
what is the point of the thread,you cannot run any operating system for long without requireing the disk,usually at the most unoppertune moment
contact where you bought it for the disk

Arlonharrison · 12-17-2006, 12:23 AM

This thread no longer has a point. I created it, however, when I was trying to troubleshoot the problem.

I did contact the company that sold the computer, and that has been cleared up as well.

In the end, I pretty much managed to solve the problem myself, although not in the way I would have prefered. Oh well, all's well that ends well.

12-15-2006, 06:55 PM	#1 (permalink)
Arlonharrison Registered User Join Date: Dec 2006 Posts: 5 OS: Windows 2000	BSOD on boot, possibly related to worm I have a relatively new installation of Windows 2000 on my computer. It booted just fine the first time. I downloaded and installing a few applications (ZoneAlarm, IE6, Firefox, Winrar) and rebooted the computer, where it promptly locked up solid at the logon screen. After a second reboot, I got the following stop error (Well, I'm pretty sure this was the error, because every subsequent reboot also gave me an error, and it took me quite some time to figure out how to prevent the system from automatically rebooting so that I could actually read it): STOP: C00021A {Fatal System Error} The Windows Logon Process system process terminated unexpectedly with a status of 0x00000080 <0x00000000 0x00000000>. I'm able to get into Safe Mode just fine, which I did. I quickly discovered quite a few programs and "services" that didn't belong, including a winlogon.exe in C:\Winnt\System, and several other phony services (Just my luck, I get hit in the half hour or so it took me to set up the firewall....). I removed them, and removed the entries for them (after performing backups of course), but I'm still having the same problem, and to be frank, am at a complete loss about what to do to fix it. (At this point, and with a pretty new installation, it'd probably be easier just to reinstall Windows, but I didn't recieve a recovery disk with the computer.) Any suggestions? I'd scan the .exe's I removed for viruses if I could, but I can't get AVG installed under safe mode, and really don't know what anti-virus program I can use that I could do that with.

12-16-2006, 10:09 AM	#3 (permalink)
dai Manager, Hardware Forums Join Date: Jul 2004 Location: west australia Posts: 56,646 OS: win 7 32x 64x rtm	http://www.techsupportforum.com/showthread.php?t=15968 __________________

12-16-2006, 11:56 PM	#5 (permalink)
dai Manager, Hardware Forums Join Date: Jul 2004 Location: west australia Posts: 56,646 OS: win 7 32x 64x rtm	what operating system is loaded 2000 or ubuntu what disks do you have __________________

12-17-2006, 12:20 AM	#7 (permalink)
dai Manager, Hardware Forums Join Date: Jul 2004 Location: west australia Posts: 56,646 OS: win 7 32x 64x rtm	if you are using ubuntu and have wiped 2000 and don't have the disk to reload it or run system checks what is the point of the thread,you cannot run any operating system for long without requireing the disk,usually at the most unoppertune moment contact where you bought it for the disk __________________

12-15-2006, 08:09 PM	#2 (permalink)
Arlonharrison Registered User Join Date: Dec 2006 Posts: 5 OS: Windows 2000	Someone elsewhere recommended I try Nod32, which identified the virus as a variant of IRC/SdBot trojan.

12-17-2006, 12:01 AM	#6 (permalink)
Arlonharrison Registered User Join Date: Dec 2006 Posts: 5 OS: Windows 2000	Windows 2000 was loaded. After trying pretty much everything to fix it (uninstalling ie6, zonealarm, pretty much everything in the add/remove applet besides the intel drivers) all I had achieved was more system instability. I couldn't even access the add/remove programs applet without the system crashing, so I installed Ubuntu. Ubuntu is the operating system I am running now. I have disks for Windows 95, Windows 98, and Ubuntu 5.10 (Breezy).

12-17-2006, 12:23 AM	#8 (permalink)
Arlonharrison Registered User Join Date: Dec 2006 Posts: 5 OS: Windows 2000	This thread no longer has a point. I created it, however, when I was trying to troubleshoot the problem. I did contact the company that sold the computer, and that has been cleared up as well. In the end, I pretty much managed to solve the problem myself, although not in the way I would have prefered. Oh well, all's well that ends well.