XP Pro...Opens in safe mode only. Restarts in other modes

[Skolastix]

Hi All,

Last night I had my comp on all night, and this morning when I came to my computer, it was stuck in a loop. It will restart, go to the XP Screen and then when it is in the middle of changing (black screen) I will hear a soft click from the tower and it will hard restart (no prompt). When I press the F8 key while it's starting up, I can access the computer in safe mode and safe mode with Networking. At that point, I ran all of my virus scan programs (AVG, Avast, Stinger, AdAware, Spybot) and no viruses were found.
When I rebooted, it got stuck in the same shut off loop.

Note that it has been known to shut off by itself for the last 2 years. I will hear the same soft click and it will restart (no prompt).

Any advice? I'm at a loss...

 

[stduc]

You need to find out why it is doing this.

In safe mode, take a look at the even logs. They may give you a clue.

Then you need to stop the PC auto re-booting. Go to My Computer, Properties, (or control panel - system) then advanced - then startup & recovery - settings.

In the system failure section ensure 'write an event....' is ticked and 'automatically restart' is UNticked.

Also just below that set the machine to to a small memory dump.

Restart normally and you should now get a BSOD with some idea of what failed. Write down all the details - the hexadecimal codes and the stop code are important diagnostic aids.

Report back what happens.

 

[Skolastix]

Thanks STduc

OK. did those steps and this is what it shows me when it tried to restart again:

STOP: c000021a {Fatal System Error}
THe Windows Logon Process syetem process terminated unexpectantly with a status of 0xc0000022 (0x00000000 0x00000000).
The system has been shut down.

-------------

Ok.. now I'm a little worried...any clue what happened? Thanks in adavnce!

 

[stduc]

I think you either have a hard disk or RAM problem.

I believe your best option is to follow these steps, in this order.

Boot to safe mode and do a full check of the hard drive. Tick both options.
Alternatively you can use your XP CD and boot to recovery console and type chkdsk c: /r/v/f

Attempt a re-boot - if it works - you are done. Details of what chkdsk found are in the event log.

If that's not solved the problem then download memtest86 (google for it) - build the self booting floppy and run it.

If you get RAM problems reported - then you need to maybe just re-seat the RAM or get new RAM.

If memtest86 come up clean then and only then go for a boot using 'last known good configuration'

If that doesn't work and you can still get to safe mode then you can select another suitable restore point to try.

But remember - a restore point can contain virus's you think you have cleaned - so do a full AVG run after you get back to normal - just to be on the safe side.

 

[Skolastix]

OK I'll try these steps and let you know how it worked out. Just a few questions 1st. I do not understand how to do the steps:

1 - "Boot to safe mode and do a full check of the hard drive. Tick both options."


or

2 - "Alternatively you can use your XP CD and boot to recovery console and type chkdsk c: /r/v/f"

Step 2 seems a little more straight forward as I am assuming that the "boot to recovery console" is a selectable option. But for Step 1 - I am unsure of how to perform a "full check or the hard drive and I don't know what options I'd tick in that case. Can you provide more detailed instructions? Sorry and thanks!

 

[linney]

Try running ChkDsk to check your drive for errors. Right-click your Drive icon/ Properties/ Tools/ Error Checking. Select both boxes.

How to install and use the Recovery Console in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;307654&FR=1&PA=1&SD=HSCH

Then you run ChkDsk /r after you have loaded the Recovery Console




Stop 0xC000021A or STATUS_SYSTEM_PROCESS_TERMINATED

http://www.microsoft.com/resources/...all/reskit/en-us/prmd_stp_mtgk.asp?frame=true

STOP 0xC000021A Computer Hangs When you log on to a Terminal Services Session

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q311804

STOP 0xC000021a (STOP 0x21a) Error Message Occurs If You Download a RIPrep Image

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q308299

STOP 0xC000021a Caused by GoBack

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q316503

156669 - How to troubleshoot a "STOP 0xC000021A" error

http://support.microsoft.com/default.aspx?scid=kb;en-us;156669&FR=1&PA=1&SD=HSCH

 

[stduc]

1

open my computer
right click on drive c
Select properties
Select tools tab
In Error Checking - click check now
tick both boxes
tick start
go to bed (joke) but it probably will take a while. Possibly a long while.

2

Boot to the XP CD
It will say - or press R for recovery console - press the R key.
You will eventually arrive at a black screen in command line mode
type chkdsk c: /r/f/v

 

[Skolastix]

Thanks Guys...

OK.. SO I've run the chkdsk from the XP Cd and it found and corrected SOME errors, but the reset problem is still there. Now I've downloaded the memtest86 floppies, but I am having an issue creating the cd now. I unzipped the files and burned the 4 files to the CD. Then I restarted the comp with the CD in, but the cd did not boot automatically (like I thought it would). What am I doing wrong? The 4 files on the cd are:

memtest.bin
install.bat
rawrite.exe
README.txt

I tried to click and run the .bat and .exe files but no luck.

I also forgot to mention that I tried to use a different restore point b 4 with no luck either.

 

[stduc]

I am afraid I have always used memtest86 as a floppy - which it creates itself. It runs under DOS so I I guess you have to create a bootable DOS ISO?

However - you don't

download the iso from here & burn it

http://www.memtest86.com/

Look down the page

 

[Skolastix]

Thanks for the advice guys. I found out the issue. Itis an issue that developed within my AVG Virus scan program on December 6. It causes AVG to view the winlogon.exe file as a virus and therefore deletes it everytime the computer reboots. The full description of the issue and resolution can be found here:

http://www.adwarereport.com/mt/archives/000325.html

Thanks again for all of your help. This site rocks!