i am receiving stop: c00021a fatal system error the windows longon process
system process terminated upexpectedly with a status 0xc0000135 (0x00000000
0x00000000) the system has been shut down.

i tried the f8 safe mode and that did not work. I tried to go back to a
good restart but that did not work. I did see at one time when this all
started a message that said ntfs the volume is dirty. I am not very computer
savy, can anyone help me?

Please state your full Windows version (e.g., WinXP SP3) when posting to
this newsgroup.

<QP>
0xC000021A: STATUS_SYSTEM_PROCESS_TERMINATED
This occurs when Windows switches into kernel mode and a user-mode
subsystem, such as Winlogon or the Client Server Runtime Subsystem (CSRSS),
is compromised. Security can no longer be guaranteed. Because Win XP can’t
run without Winlogon or CSRSS, this is one of the few situations where the
failure of a user-mode service can cause the system to stop responding. This
Stop message also can occur as a result of malware infestation or when the
computer is restarted after a system administrator has modified permissions
so that the SYSTEM account no longer has adequate permissions to access
system files and folders.
</QP>
Source: http://aumha.org/a/stop.htm

What anti-virus application or security suite is installed and is your
subscription current? What anti-spyware applications (other than Defender)?
What third-party firewall (if any)?

Has a(another) Norton or McAfee application ever been installed on this
machine (e.g., a free-trial version that came preinstalled when you bought
it)?
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
www.banthecheck.com


clem wrote:
> i am receiving stop: c00021a fatal system error the windows longon process
> system process terminated upexpectedly with a status 0xc0000135
> (0x00000000
> 0x00000000) the system has been shut down.
>
> i tried the f8 safe mode and that did not work. I tried to go back to a
> good restart but that did not work. I did see at one time when this all
> started a message that said ntfs the volume is dirty. I am not very
> computer
> savy, can anyone help me?

PA Bear,
I think it is windows xp sp2, I had windows defender and AVG, THis is a dell
dimension 9100 that is about 6 yrs old (not the one I am using now) and i
don't think norton or mcafee has been installed. I did install system
mechanic professional but not the anti virus. this was installed several
months ago. I think this happened when some spyware was being removed and I
had to restart the computer to complete. I did not change the admin. info.
clem

"PA Bear [MS MVP]" wrote:

> Please state your full Windows version (e.g., WinXP SP3) when posting to
> this newsgroup.
>
> <QP>
> 0xC000021A: STATUS_SYSTEM_PROCESS_TERMINATED
> This occurs when Windows switches into kernel mode and a user-mode
> subsystem, such as Winlogon or the Client Server Runtime Subsystem (CSRSS),
> is compromised. Security can no longer be guaranteed. Because Win XP can’t
> run without Winlogon or CSRSS, this is one of the few situations where the
> failure of a user-mode service can cause the system to stop responding. This
> Stop message also can occur as a result of malware infestation or when the
> computer is restarted after a system administrator has modified permissions
> so that the SYSTEM account no longer has adequate permissions to access
> system files and folders.
> </QP>
> Source: http://aumha.org/a/stop.htm
>
> What anti-virus application or security suite is installed and is your
> subscription current? What anti-spyware applications (other than Defender)?
> What third-party firewall (if any)?
>
> Has a(another) Norton or McAfee application ever been installed on this
> machine (e.g., a free-trial version that came preinstalled when you bought
> it)?
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002
> www.banthecheck.com
>
>
> clem wrote:
> > i am receiving stop: c00021a fatal system error the windows longon process
> > system process terminated upexpectedly with a status 0xc0000135
> > (0x00000000
> > 0x00000000) the system has been shut down.
> >
> > i tried the f8 safe mode and that did not work. I tried to go back to a
> > good restart but that did not work. I did see at one time when this all
> > started a message that said ntfs the volume is dirty. I am not very
> > computer
> > savy, can anyone help me?
>
>

> I think it is windows xp sp2

Let's find out for sure: Right-click on My Computer | select Properties |
Your full Windows version will be displayed on the resulting General tab.

> ...I did install system mechanic professional...several months ago

Not a good idea! If you think your Registry needs to be "cleaned" or
"repaired," read http://aumha.net/viewtopic.php?t=28099 and draw your own
conclusions.

> ...I think this happened when some spyware was being removed and I
> had to restart the computer to complete.

Sounds like you have much more work to do.

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. Run the Windows Live Safety Center's 'Protection' scan (only!) in Safe
Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/...moving_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachi...php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
www.banthecheck.com


clem wrote:
> PA Bear,
> I think it is windows xp sp2, I had windows defender and AVG, THis is a
> dell
> dimension 9100 that is about 6 yrs old (not the one I am using now) and i
> don't think norton or mcafee has been installed. I did install system
> mechanic professional but not the anti virus. this was installed several
> months ago. I think this happened when some spyware was being removed and
> I
> had to restart the computer to complete. I did not change the admin.
> info.
> clem
>
> "PA Bear [MS MVP]" wrote:
>> Please state your full Windows version (e.g., WinXP SP3) when posting to
>> this newsgroup.
>>
>> <QP>
>> 0xC000021A: STATUS_SYSTEM_PROCESS_TERMINATED
>> This occurs when Windows switches into kernel mode and a user-mode
>> subsystem, such as Winlogon or the Client Server Runtime Subsystem
>> (CSRSS),
>> is compromised. Security can no longer be guaranteed. Because Win XP can’t
>> run without Winlogon or CSRSS, this is one of the few situations where
>> the
>> failure of a user-mode service can cause the system to stop responding.
>> This Stop message also can occur as a result of malware infestation or
>> when the computer is restarted after a system administrator has modified
>> permissions so that the SYSTEM account no longer has adequate permissions
>> to access system files and folders.
>> </QP>
>> Source: http://aumha.org/a/stop.htm
>>
>> What anti-virus application or security suite is installed and is your
>> subscription current? What anti-spyware applications (other than
>> Defender)? What third-party firewall (if any)?
>>
>> Has a(another) Norton or McAfee application ever been installed on this
>> machine (e.g., a free-trial version that came preinstalled when you
>> bought
>> it)?
>>
>> clem wrote:
>>> i am receiving stop: c00021a fatal system error the windows longon
>>> process
>>> system process terminated upexpectedly with a status 0xc0000135
>>> (0x00000000
>>> 0x00000000) the system has been shut down.
>>>
>>> i tried the f8 safe mode and that did not work. I tried to go back to a
>>> good restart but that did not work. I did see at one time when this all
>>> started a message that said ntfs the volume is dirty. I am not very
>>> computer
>>> savy, can anyone help me?

that is just it, i only have this blue screen with this error on it.
clem

"PA Bear [MS MVP]" wrote:

> > I think it is windows xp sp2
>
> Let's find out for sure: Right-click on My Computer | select Properties |
> Your full Windows version will be displayed on the resulting General tab.
>
> > ...I did install system mechanic professional...several months ago
>
> Not a good idea! If you think your Registry needs to be "cleaned" or
> "repaired," read http://aumha.net/viewtopic.php?t=28099 and draw your own
> conclusions.
>
> > ...I think this happened when some spyware was being removed and I
> > had to restart the computer to complete.
>
> Sounds like you have much more work to do.
>
> NB: If you had no anti-virus application installed or the subscription had
> expired *when the machine first got infected* and/or your subscription has
> since expired and/or the machine's not been kept fully-patched at Windows
> Update, don't waste your time with any of the below: Format & reinstall
> Windows. A Repair Install will NOT help!
>
> 1. See if you can download/run the MSRT manually:
> http://www.microsoft.com/security/ma...e/default.mspx
>
> NB: Run the FULL scan, not the QUICK scan! You may need to download the
> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
> machine and rename it to SCAN.EXE before running it.
>
> 2. Run the Windows Live Safety Center's 'Protection' scan (only!) in Safe
> Mode with Networking, if need be:
> http://onecare.live.com/site/en-us/center/howsafe.htm
>
> 3. Run a /thorough/ check for hijackware, including posting the requested
> logs in an appropriate forum, not here.
>
> Checking for/Help with Hijackware
> http://aumha.net/viewtopic.php?f=30&t=4075
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://www.elephantboycomputers.com/...moving_Malware
>
> **Chances are you will need to seek expert assistance in
> http://spywarehammer.com/simplemachi...php?board=10.0,
> http://www.spywarewarrior.com/viewforum.php?f=5,
> http://www.dslreports.com/forum/cleanup,
> http://www.bluetack.co.uk/forums/index.php,
> http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**
>
> If these procedures look too complex - and there is no shame in admitting
> this isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA) computer repair shop.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002
> www.banthecheck.com
>
>
> clem wrote:
> > PA Bear,
> > I think it is windows xp sp2, I had windows defender and AVG, THis is a
> > dell
> > dimension 9100 that is about 6 yrs old (not the one I am using now) and i
> > don't think norton or mcafee has been installed. I did install system
> > mechanic professional but not the anti virus. this was installed several
> > months ago. I think this happened when some spyware was being removed and
> > I
> > had to restart the computer to complete. I did not change the admin.
> > info.
> > clem
> >
> > "PA Bear [MS MVP]" wrote:
> >> Please state your full Windows version (e.g., WinXP SP3) when posting to
> >> this newsgroup.
> >>
> >> <QP>
> >> 0xC000021A: STATUS_SYSTEM_PROCESS_TERMINATED
> >> This occurs when Windows switches into kernel mode and a user-mode
> >> subsystem, such as Winlogon or the Client Server Runtime Subsystem
> >> (CSRSS),
> >> is compromised. Security can no longer be guaranteed. Because Win XP can’t
> >> run without Winlogon or CSRSS, this is one of the few situations where
> >> the
> >> failure of a user-mode service can cause the system to stop responding.
> >> This Stop message also can occur as a result of malware infestation or
> >> when the computer is restarted after a system administrator has modified
> >> permissions so that the SYSTEM account no longer has adequate permissions
> >> to access system files and folders.
> >> </QP>
> >> Source: http://aumha.org/a/stop.htm
> >>
> >> What anti-virus application or security suite is installed and is your
> >> subscription current? What anti-spyware applications (other than
> >> Defender)? What third-party firewall (if any)?
> >>
> >> Has a(another) Norton or McAfee application ever been installed on this
> >> machine (e.g., a free-trial version that came preinstalled when you
> >> bought
> >> it)?
> >>
> >> clem wrote:
> >>> i am receiving stop: c00021a fatal system error the windows longon
> >>> process
> >>> system process terminated upexpectedly with a status 0xc0000135
> >>> (0x00000000
> >>> 0x00000000) the system has been shut down.
> >>>
> >>> i tried the f8 safe mode and that did not work. I tried to go back to a
> >>> good restart but that did not work. I did see at one time when this all
> >>> started a message that said ntfs the volume is dirty. I am not very
> >>> computer
> >>> savy, can anyone help me?
>
>

I can't restart in safe mode, I only have the blue screen with the error
message on it. I can't click on my computer or download anything. I can't
get pass the blue screen. I did have an up to date AVG anti virus on
computer. help
clem

"clem" wrote:

> i am receiving stop: c00021a fatal system error the windows longon process
> system process terminated upexpectedly with a status 0xc0000135 (0x00000000
> 0x00000000) the system has been shut down.
>
> i tried the f8 safe mode and that did not work. I tried to go back to a
> good restart but that did not work. I did see at one time when this all
> started a message that said ntfs the volume is dirty. I am not very computer
> savy, can anyone help me?

Repost:
>> ...take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA) computer repair shop.


clem wrote:
> that is just it, i only have this blue screen with this error on it.
> clem
>
> "PA Bear [MS MVP]" wrote:
>
>>> I think it is windows xp sp2
>>
>> Let's find out for sure: Right-click on My Computer | select Properties |
>> Your full Windows version will be displayed on the resulting General tab.
>>
>>> ...I did install system mechanic professional...several months ago
>>
>> Not a good idea! If you think your Registry needs to be "cleaned" or
>> "repaired," read http://aumha.net/viewtopic.php?t=28099 and draw your own
>> conclusions.
>>
>>> ...I think this happened when some spyware was being removed and I
>>> had to restart the computer to complete.
>>
>> Sounds like you have much more work to do.
>>
>> NB: If you had no anti-virus application installed or the subscription
>> had
>> expired *when the machine first got infected* and/or your subscription
>> has
>> since expired and/or the machine's not been kept fully-patched at Windows
>> Update, don't waste your time with any of the below: Format & reinstall
>> Windows. A Repair Install will NOT help!
>>
>> 1. See if you can download/run the MSRT manually:
>> http://www.microsoft.com/security/ma...e/default.mspx
>>
>> NB: Run the FULL scan, not the QUICK scan! You may need to download the
>> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
>> machine and rename it to SCAN.EXE before running it.
>>
>> 2. Run the Windows Live Safety Center's 'Protection' scan (only!) in Safe
>> Mode with Networking, if need be:
>> http://onecare.live.com/site/en-us/center/howsafe.htm
>>
>> 3. Run a /thorough/ check for hijackware, including posting the requested
>> logs in an appropriate forum, not here.
>>
>> Checking for/Help with Hijackware
>> http://aumha.net/viewtopic.php?f=30&t=4075
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://www.elephantboycomputers.com/...moving_Malware
>>
>> **Chances are you will need to seek expert assistance in
>> http://spywarehammer.com/simplemachi...php?board=10.0,
>> http://www.spywarewarrior.com/viewforum.php?f=5,
>> http://www.dslreports.com/forum/cleanup,
>> http://www.bluetack.co.uk/forums/index.php,
>> http://aumha.net/viewforum.php?f=30 or other appropriate forums as
>> well.**
>>
>> If these procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Client - since 2002
>> www.banthecheck.com
>>
>>
>> clem wrote:
>>> PA Bear,
>>> I think it is windows xp sp2, I had windows defender and AVG, THis is a
>>> dell
>>> dimension 9100 that is about 6 yrs old (not the one I am using now) and
>>> i
>>> don't think norton or mcafee has been installed. I did install system
>>> mechanic professional but not the anti virus. this was installed
>>> several
>>> months ago. I think this happened when some spyware was being removed
>>> and
>>> I
>>> had to restart the computer to complete. I did not change the admin.
>>> info.
>>> clem
>>>
>>> "PA Bear [MS MVP]" wrote:
>>>> Please state your full Windows version (e.g., WinXP SP3) when posting
>>>> to
>>>> this newsgroup.
>>>>
>>>> <QP>
>>>> 0xC000021A: STATUS_SYSTEM_PROCESS_TERMINATED
>>>> This occurs when Windows switches into kernel mode and a user-mode
>>>> subsystem, such as Winlogon or the Client Server Runtime Subsystem
>>>> (CSRSS),
>>>> is compromised. Security can no longer be guaranteed. Because Win XP
>>>> can’t run without Winlogon or CSRSS, this is one of the few situations
>>>> where the
>>>> failure of a user-mode service can cause the system to stop responding.
>>>> This Stop message also can occur as a result of malware infestation or
>>>> when the computer is restarted after a system administrator has
>>>> modified
>>>> permissions so that the SYSTEM account no longer has adequate
>>>> permissions
>>>> to access system files and folders.
>>>> </QP>
>>>> Source: http://aumha.org/a/stop.htm
>>>>
>>>> What anti-virus application or security suite is installed and is your
>>>> subscription current? What anti-spyware applications (other than
>>>> Defender)? What third-party firewall (if any)?
>>>>
>>>> Has a(another) Norton or McAfee application ever been installed on this
>>>> machine (e.g., a free-trial version that came preinstalled when you
>>>> bought
>>>> it)?
>>>>
>>>> clem wrote:
>>>>> i am receiving stop: c00021a fatal system error the windows longon
>>>>> process
>>>>> system process terminated upexpectedly with a status 0xc0000135
>>>>> (0x00000000
>>>>> 0x00000000) the system has been shut down.
>>>>>
>>>>> i tried the f8 safe mode and that did not work. I tried to go back to
>>>>> a
>>>>> good restart but that did not work. I did see at one time when this
>>>>> all
>>>>> started a message that said ntfs the volume is dirty. I am not very
>>>>> computer
>>>>> savy, can anyone help me?