Solved BSOD after automatic shutdown due to overheating processor

[gregrocker]

Cannot see the flags on SysReserved. Active? Should also be System after repairs.

I notice you are not unplugging these HD's. You can wait to see if the repairs work otherwise but the best rule of thumb is always to unplug all other HD's during repairs or reinstall.

 

[PaulVdB]

Cannot see the flags on SysReserved. Active? Should also be System after repairs.

I notice you are not unplugging these HD's. You can wait to see if the repairs work otherwise but the best rule of thumb is always to unplug all other HD's during repairs or reinstall.

Yes, Sys reserved IS active.
I'll disconnect all other HD's if 3x repair doesn't work ...
gimme a minute ...

 

[PaulVdB]

After 2nd repair I saw this : Is this promising ???
Getting all excited now ...

 

[gregrocker]

Will it start?

The reboots between repairs should allow WIn7 to start if it will.

 

[PaulVdB]

STOP : c000021a ...
I'll repair one more time and then disconnect HD's ...

 

[gregrocker]

You are receiving this BSOD when it attempts to boot?

Stop 0xc000021a:

This occurs when Windows switches into kernel mode and a user-mode subsystem, such as Winlogon or the Client Server Runtime Subsystem (CSRSS), is compromised. Security can no longer be guaranteed... This Stop message also can occur as a result of malware infestation or when the computer is restarted after a system administrator has modified permissions so that the SYSTEM account no longer has adequate permissions to access system files and folders.

Which is why Troubleshooting Windows 7 Failure to Start begins with disinfection.

 

[PaulVdB]

You are receiving a BSOD when it attempts to boot?

yes ... BSOD : STOP c000021a

 

[gregrocker]

More about the stop error here: Blue Screen Error: c000021a Fatal System Error - Microsoft Community.

There are other steps there but first I'd still stick with the ones I gave you which after disinfection will repair the OS if it can be. I see that VistaKing also helped you try to find a Bugcheck file which is worth checking again since it would allow our BSOD analysts to pinpoint any program causing the issue. Otherwise Startup Repair may bring it around, System restore run from the Repair Options at boot, or SFC /SCANNOW Run in Command Prompt at Boot

 

[PaulVdB]

I didn't change any permissions, and have serious doubts about malware... COmputer crashed while (unattended) rendering and mobo shut down computer because of overriding max CPU temp (75°C)...
anyhow... gonna unplug the power plugs from all HD's (except CD and SSD)...

Nevertheless 1,000,000 x Thanks, Gregrocker ... I'll be back in a a few minutes.
After unplugging shall I run start repair again ? or PW ?

 

[gregrocker]

Run the bootable AV tests anyway, unless you can now get into Safe Mode to run Malwarebytes.

As long as System Reserved is marked Active, run Startup Repairs x3 with reboots to see if it starts in between each.

Do you know how your Active flag got moved to C originally? Were the System boot files moved and written there during repairs or reinstall?

 

[PaulVdB]

I rebooted in Safe mode... here's the relevant screens. The BSOD only showed for a fraction of a second, but after a few attempts, I was lucky to take a pic... Run PW now ?

 

[PaulVdB]

Run the bootable AV tests anyway, unless you can now get into Safe Mode to run Malwarebytes.

As long as System Reserved is marked Active, run Startup Repairs x3 with reboots to see if it starts in between each.

Do you know how your Active flag got moved to C originally? Were the System boot files moved and written there during repairs or reinstall?

I moved the active flag myself, cause it seemed obvious (to me) that the the active partition should be the one with the OS on it... now I know better

Where can I find good bootable AV test ?
Meanwhile I'll check active partition with PW and run startup repair... (I disconnected all HD's except SSD with OS and System Reserved, and CDROM)

 

[Layback Bear]

Did you read post #52. Greg stipulated System Reserve should be active. Did I misunderstand this.

You want System Reserved to remain as the Active boot partition.

 

[PaulVdB]

system reserved is active.

 

[gregrocker]

I moved the active flag myself, cause it seemed obvious (to me) that the the active partition should be the one with the OS on it... now I know better

Where can I find good bootable AV test ?

I gave you the steps you should be following 2 days ago: Troubleshooting Windows 7 Failure to Start. You ignored them and went all over the map while I watched and waited, patiently trying to remind you to focus on the steps needed.

I referred repeatedly here to the absolute necessity to run the AV tests first as they are listed in tutorial, right up until a few posts ago. Now you ask me where to find these AV tests as though its the first time you heard about them.

:shock:

 

[PaulVdB]

I moved the active flag myself, cause it seemed obvious (to me) that the the active partition should be the one with the OS on it... now I know better

Where can I find good bootable AV test ?

I gave you the steps you should be following 2 days ago: Troubleshooting Windows 7 Failure to Start. You ignored them and went all over the map while I watched and waited, patiently trying to remind you to focus on the steps needed.

I referred repeatedly here to the absolute necessity to run the AV tests first as they are listed in tutorial, right up until a few posts ago. Now you ask me where to find these AV tests as though its the first time you heard about them.

:shock:

I'm deeply sorry Gregrocker... but I was (and still am) quite sure about the malware 'cause of the original problem (sudden power down while rendering) But I'll find the AV tests and run 'em rightaway...
I'll owe you TWO if I find nasties (one for the help you already gave me, and one for my bluntness ...)

 

[PaulVdB]

OK, I'll try bitdefender ...

 

[Layback Bear]

From post #72. This is why their is a post #73 by me.

I moved the active flag myself, cause it seemed obvious (to me) that the the active partition should be the one with the OS on it... now I know better

I can assure you PaulVdB if you don't follow Gregs and others instructions and tutorials you will end up in No Mans Land.

Please notice my active flag.
View attachment 269414

 

[VistaKing]

PaulVdB

If you want a Kaspersky Rescue CD ? Get it from the link below

Lets see if we could get a kaspersky rescue disc


Download



Download the ISO file onto your clean pc along with the tool below


Download



On the working PC try these steps

:ar: Run the downloaded file rescue2usb.exe.
:ar: On the Kaspersky USB Rescue Disk Maker window, click Browse... and select the iso image of Kaspersky Rescue Disk 10
:ar: Select the required USB device from the drop-down menu.
:ar: Click START.

Wait until the process is complete.

:ar: Click OK on the open window informing that Kaspersky USB Rescue Disk has been successfully created.

Plug the USB flash drive to the infected PC

Boot your computer from Kaspersky Rescue Disk 10

Press any key to enter the menu.

In the start up wizard window that opens, select the graphic interface language using the cursor moving keys. Press the ENTER key on the keyboard.

Read carefully the license agreement of Kaspersky Rescue Disk. If you agree with all terms, press 1 on the keyboard. To reboot the computer, press 2. To shut down the computer, press 3.

Choose Kaspersky Rescue Disk. Graphic Mode loads the graphic subsystem.
Press [ENTER]

 

[PaulVdB]

Yes, I know Layback Bear... and I deeply regret. Meanwhile I ran bitdefender and yes. It found (and deleted) 1 infected file... see pics

bitdefender pics.. the first one is scan from C: