1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Windows XP keeps restarting

Discussion in 'Windows XP' started by henryvuong, 2009/06/04.

  1. 2009/06/04
    henryvuong

    henryvuong Inactive Thread Starter

    Joined:
    2009/06/04
    Messages:
    5
    Likes Received:
    0
    I am running Windows XP Professional with Service Pack 2. Recently, my windows keeps restarting, sometimes after it has been running for a few hours, sometimes right after I log in. I can log in with Safe Mode and there's no problem.

    I tried to reboot with "Last Known Good Configuration" but the problem still persists. I also tried system restore and went back as far as a month, still no luck.

    My harddrive was split into two: drive C is for system files and drive F for user files. I notice that in drive F, there are several new strange folders which I never created. The folder names are as follows:

    0b259c2d457bf2618d91b9aa
    6cee34e68cd4f0edd687c1c190
    8f195477432b3dbdcb1938ae31b75b95
    9e51c63b1b028a681c58d502b550c4
    39db70ddaf67f1b6dc8e
    12147b847d88cb23e5603d
    97575bd1290d0e6d198a1c7e1c939a50
    a842e3b6ac97c2d1ab
    bbe3d81a4be2fcb27bc55871

    The subfolders of these are similar, for example, the first folder contains the following subfolders:

    1028
    1031
    1033
    1036
    1040
    1041
    1042
    1043
    1046
    1049
    1053
    2052
    3082
    hotfixas
    hotfixdts
    hotfixns
    hotfixrs
    hotfixsql
    hotfixtools

    They look like the Microsoft hot fix files, but I don't know why they are there. I suspect my windows is infected by some kind of virus. I have McAfee Internet Security intalled on this computer and it's scanning my computer at the moment I'm typing this. I'll post the result after the scan is complete.

    Does anyone have any advise? Thanks.
     
    henryvuong,
    #1
  2. 2009/06/04
    henryvuong

    henryvuong Inactive Thread Starter

    Joined:
    2009/06/04
    Messages:
    5
    Likes Received:
    0
    The full system scan shows no virus infection.
     
    henryvuong,
    #2


  3. to hide this advert.

  4. 2009/06/04
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Same problem in Safe Mode?

    Disable "Restart on error" feature...

    1. Right-click My Computer, and then click Properties.
    2. Click the Advanced tab (Vista: click Advanced system settings).
    3. Under Startup and Recovery, click Settings to open the Startup and Recovery dialog box.
    4. Clear the Automatically restart check box, and click OK the necessary number of times.
    5. Restart your computer for the settings to take effect.

    You may see some error message. If so, post back what it says.

    What is drive F?
     
    broni,
    #3
  5. 2009/06/04
    henryvuong

    henryvuong Inactive Thread Starter

    Joined:
    2009/06/04
    Messages:
    5
    Likes Received:
    0
    No I don't have any problem with Safe Mode, Windows runs fine in this mode. Drive F is a partition where I store my personal files.

    I did what you said and after logging in, I got a blue screen with the message:

    "Stop c000021a {fatal system error}
    The windows subsystem process terminated unexpectedly with a status of 0xc000005 (0x7c9101b3 0x010df36c). The system has been shutdown "
     
    henryvuong,
    #4
  6. 2009/06/04
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Navigate to: C:\Windows\Minidump folder.
    If you see any .dmp files, zip all of them, and upload it here: http://www.filedropper.com/. Post download link.
    Vista users You may need to copy .dmp files, paste them into some other folder, or desktop, and zip them there.
     
    broni,
    #5
  7. 2009/06/04
    henryvuong

    henryvuong Inactive Thread Starter

    Joined:
    2009/06/04
    Messages:
    5
    Likes Received:
    0
    henryvuong,
    #6
  8. 2009/06/04
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Well, there were 166 dmp files ranging from 5/22/09-6/4/09, so obviously I can't review them all.
    I took a look at random ones, especially the latest, and every single one is caused by ntkrpamp.exe (WINLOGON_FATAL_ERROR), which makes me believe, you may have some RAM problem.

    If you have more than one RAM stick installed, try starting computer with one stick at a time. See, if it helps.
    Eventually...
    Run memtest: http://www.techspot.com/vb/topic62524.html
     
    broni,
    #7
  9. 2009/06/05
    henryvuong

    henryvuong Inactive Thread Starter

    Joined:
    2009/06/04
    Messages:
    5
    Likes Received:
    0
    I figured it out. It's the Microsoft Sql Server program. Some services were set to run automatically when the computer starts. I turned all of them off except MSSQLSERVER, and everything works fine now.

    For those who have similar problem and you are running SQL Server on your computer, try to turn off some services by clicking Start>Control Panel>Performance and Maintenance>Administrative Tools>Services, scroll down to "SQL Server xxx ", right click, select Properties, set the Startup type to manual or disable. You can do this in Safe Mode, in case you cannot boot Windows in normal mode.

    @broni:
    Yeah I did add more RAM stick to my computer. If it happens again I'll look into it.

    Thanks
     
    henryvuong,
    #8
  10. 2009/06/05
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Ah, nice...thanks for posting back :)
     
    broni,
    #9

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...