Error: STOP: c000021a {Fatal System Error} The Windows Logon Process system process terminated unexpectedly with a status of 0xc0000034 (0x00000000 0x0000000) The system has been shutdown.

Hi. My computer shows BSOD with this error message after start up: STOP: c000021a {Fatal System Error} The Windows Logon Process system process terminated unexpectedly with a status of 0xc0000034 (0x00000000 0x0000000) The system has been shutdown. What should i do to rectify it? Sometime I can boot my computer and get into my desktop but it will only last for a couple of minutes before my computer shut down automatically. I saw a Microsoft help page that says boot  Dr. Watson etc but i cannot find this program in my computer. Thanks you.
 

Question Info


Last updated May 19, 2019 Views 4,396 Applies to:

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.



We do need the DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.

If you are overclocking STOP

You may be able to get the DMP files without crashing by booting into safe mode (F8) with networking.

Please follow these instructions to collect data from the crashes and upload them here, to your Skydrive or a file sharing service like Rapidshare.

http://www.sysnative.com/forums/showthread.php/68-Blue-Screen-of-Death-%28BSOD%29-Posting-Instructions-Windows-8-7-amp-Vista?p=303&viewfull=1#post303

http://sysnative.com/0x8/BSOD_Windows7_Vista_v2.64_jcgriff2_.exe


To enable us to assist you with your computer's BSOD symptoms, upload the contents of your "\Windows\Minidump" folder.

The procedure:

* Copy the contents of \Windows\Minidump to another (temporary) location somewhere on your machine.
* Zip up the contents of that folder
Please upload them to skydrive or a file sharing service and put a link to them in your next post.

Please also go to start>search/run>cmd>msinfo32 and include it in the upload



To ensure minidumps are enabled:

* Go to Start, in the Search Box type: sysdm.cpl, press Enter.
* Under the Advanced tab, click on the Startup and Recovery Settings... button.
* Ensure that Automatically restart is unchecked.
* Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb varies).
* Ensure that the Small Dump Directory is listed as %systemroot%\Minidump.
* OK your way out.
* Reboot if changes have been made.


http://www.sysnative.com/forums/showthread.php/325-BSODs-but-no-Dump-Files


http://www.osronline.com/article.cfm?article=545


Please also go to start>run>msinfo32 and save the results.  Upload it with the DMP files, thanks.


Cat herder
Windows Insider MVP
MVP-Windows and Devices for IT
http://www.zigzag3143.com/

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Usually when you see a message like this:

STOP: c000021a {Fatal System Error}
The Windows Logon Process terminated unexpectedly with a status of 0xc0000034 (0x0000000 0x0000000).
The system has been shut down.

Your system will not boot at all...  are you saying that you can boot okay and then you see the message?

My notes say that for that message, the winlogon.exe file is missing and needs to be replaced so the system should not boot at all!

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Sorry for the confusion. What  I mean is sometimes i can boot my computer, sometimes i cannot and it shows the error message above. However, even if i can boot my computer, it will shut down automatically after a couple of minutes.

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

That is curious to me if it boots at all with that error, but if it does boot sometimes, then I reckon you should see if you can get the minidumps to zigzag3143x.

Rotsa ruck!

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Hi zigzag3143x

Thanks for your reply. To my surprise, no DMP files has been created for this problem. I have checked that  under the Write Debugging Information header Small memory dump (256 kB) in the dropdown box is selected and the Small Dump Directory is listed as %systemroot%\Minidump since a very long time ago. The last DMP file i have is an error that occur a few weeks back, i have used BlueScreenView and paste a copy of the DMP file here. However, please note that this is not related to the current problem.

==================================================
Dump File         : Mini081412-01.dmp
Crash Time        : 8/14/2012 11:35:33 PM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0x805f89ea
Parameter 3       : 0xb86eb8e4
Parameter 4       : 0x00000000
Caused By Driver  : psdvdisk.sys
Caused By Address : psdvdisk.sys+4357
File Description  : PSD Virtual Disk Driver
Product Name      :
Company           : HiTRUST
File Version      : 2, 2, 0, 4
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+1219ea
Stack Address 1   : psdvdisk.sys+4357
Stack Address 2   : ntoskrnl.exe+181a9
Stack Address 3   : ntoskrnl.exe+100e60
Computer Name     :
Full Path         : C:\WINDOWS\Minidump\Mini081412-01.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
==================================================



I have copy down the details of my computers and paste a copy here for your reference. For the complete details of my computer, please refer to:
https://skydrive.live.com/?cid=1720D3C5852C5229&id=1720D3C5852C5229!106#cid=1720D3C5852C5229&id=1720D3C5852C5229!112

System Information report written at: 08/27/12 23:39:46
System Name: PSM
[System Summary]

Item    Value   
OS Name    Microsoft Windows XP Professional   
Version    5.1.2600 Service Pack 3 Build 2600   
OS Manufacturer    Microsoft Corporation   
System Name    PSM   
System Manufacturer    Acer   
System Model    ASPIRE E560   
System Type    X86-based PC   
Processor    x86 Family 6 Model 15 Stepping 6 GenuineIntel ~2128 Mhz   
BIOS Version/Date    American Megatrends Inc. R01-A1, 8/16/2006   
SMBIOS Version    2.3   
Windows Directory    C:\WINDOWS   
System Directory    C:\WINDOWS\system32   
Boot Device    \Device\HarddiskVolume1   
Locale    United States   
Hardware Abstraction Layer    Version = "5.1.2600.5512 (xpsp.080413-2111)"   
User Name    PSM\Pang SM   
Time Zone    Malay Peninsula Standard Time   
Total Physical Memory    1,024.00 MB   
Available Physical Memory    578.05 MB   
Total Virtual Memory    2.00 GB   
Available Virtual Memory    1.95 GB   
Page File Space    2.41 GB   
Page File    C:\pagefile.sys   


Is there any way to solve this problem without the DMP files? Thanks you for your help.

Best regards,
Student234

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Hi ElderL

Thanks for your reply. The computer can be boot in safe mode. However, to my surprise, no minidump files have been saved for this problem. I have seen at least 5 such error message today and i am very sure i have configure the computer to save copies of minidumps files. A copy of the previous minidump files is pasted in my previous reply to zigzag3143x. How can i solve this problem? Thanks you for your help.

Regards
Student234

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Those errors like you describe (STOP: c000021a) do not generate BSODs and therefore there will be no dump file.

In fact, STOP errors do not generate dump files at all.

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

I still don't see how it is booting at all, but on systems that will NOT boot with that error, the problem is with the c:\windows\system32\winlogon.exe file.

It would not hurt to do this first:

Download, install, update and do a quick scan with these free malware detection programs (not at the same time):

Malwarebytes (MBAM):  http://www.malwarebytes.org/products/malwarebytes_free
SUPERAntiSpyware: (SAS):  http://www.superantispyware.com/

SAS will probably report a bunch of tracking cookies and you can just let it delete them.

They can be uninstalled later if desired.


Using Explorer, navigate to this folder:

c:\windows\system32

Locate the winlogon.exe file and rename it to something you can remember:

winlogon.xxx

The winlogon.exe file is one of the 3498 files that Windows File Protection looks after and now it is "missing".

If your Windows File Protection is not afflicted, it will quickly and silently replace the missing file with a fresh copy from the dllcache folder and log an event like this in the Event Viewer System log:

Event Type:    Information
Event Source:    Windows File Protection
Event Category:    None
Event ID:    64002
Description:
File replacement was attempted on the protected system file c:\windows\system32\winlogon.exe. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.

If, in a couple seconds, if you don't see the winlogon.exe file reappear, press F5  in Explorer to refresh the display and look for winlogon.exe to be there.

If it still does not show up (give WFP a few seconds), rename the winlogon.xxx back to winlogon.exe so you have one.  If WFP does not replace the missing file, you have some other problems.

Reboot and see how things look.

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Hi zigzag3143x

Thanks for your reply. To my surprise, no DMP files has been created for this problem. I have checked that  under the Write Debugging Information header Small memory dump (256 kB) in the dropdown box is selected and the Small Dump Directory is listed as %systemroot%\Minidump since a very long time ago. The last DMP file i have is an error that occur a few weeks back, i have used BlueScreenView and paste a copy of the DMP file here. However, please note that this is not related to the current problem.

==================================================
Dump File         : Mini081412-01.dmp
Crash Time        : 8/14/2012 11:35:33 PM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0x805f89ea
Parameter 3       : 0xb86eb8e4
Parameter 4       : 0x00000000
Caused By Driver  : psdvdisk.sys
Caused By Address : psdvdisk.sys+4357
File Description  : PSD Virtual Disk Driver
Product Name      :
Company           : HiTRUST
File Version      : 2, 2, 0, 4
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+1219ea
Stack Address 1   : psdvdisk.sys+4357
Stack Address 2   : ntoskrnl.exe+181a9
Stack Address 3   : ntoskrnl.exe+100e60
Computer Name     :
Full Path         : C:\WINDOWS\Minidump\Mini081412-01.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
==================================================



I have copy down the details of my computers and paste a copy here for your reference. For the complete details of my computer, please refer to:
https://skydrive.live.com/?cid=1720D3C5852C5229&id=1720D3C5852C5229!106#cid=1720D3C5852C5229&id=1720D3C5852C5229!112

System Information report written at: 08/27/12 23:39:46
System Name: PSM
[System Summary]

Item    Value   
OS Name    Microsoft Windows XP Professional   
Version    5.1.2600 Service Pack 3 Build 2600   
OS Manufacturer    Microsoft Corporation   
System Name    PSM   
System Manufacturer    Acer   
System Model    ASPIRE E560   
System Type    X86-based PC   
Processor    x86 Family 6 Model 15 Stepping 6 GenuineIntel ~2128 Mhz   
BIOS Version/Date    American Megatrends Inc. R01-A1, 8/16/2006   
SMBIOS Version    2.3   
Windows Directory    C:\WINDOWS   
System Directory    C:\WINDOWS\system32   
Boot Device    \Device\HarddiskVolume1   
Locale    United States   
Hardware Abstraction Layer    Version = "5.1.2600.5512 (xpsp.080413-2111)"   
User Name    PSM\Pang SM   
Time Zone    Malay Peninsula Standard Time   
Total Physical Memory    1,024.00 MB   
Available Physical Memory    578.05 MB   
Total Virtual Memory    2.00 GB   
Available Virtual Memory    1.95 GB   
Page File Space    2.41 GB   
Page File    C:\pagefile.sys   


Is there any way to solve this problem without the DMP files? Thanks you for your help.

Best regards,
Student234



At least this one was Related to PSDVdisk.sys Acer eDataSecurity Management PSD Virtual Disk Driver.  I would update to the newest driver available or remove if not needed (at least to test)

Cat herder
Windows Insider MVP
MVP-Windows and Devices for IT
http://www.zigzag3143.com/

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Hi zigzag3143x

Thanks for your reply. Thanks for helping me solve the problem with psdvdisk.sys. However my problem now is the STOP error message. Can you help me with that problem?

Thanks you.

Best regards
Student234


Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.