winlogon.exe error followed by 0xc0000005 (Ox0's & 0x0's) BSOD
PC is getting the following (repeatedly) - winlogon.exe error followed by 0xc0000005 (Ox0's & 0x0's) BSOD . I have run Virus scans & Malware scans repeatedly - drive is reporting clean. Will not run long enough to update virus def's or malware def's. Any suggestions ?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
winintsoft
Try to copy winlogon.exe from another computer or run Repair installation using the install CD.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Gentlemen -
First & most importantly, I truly appreciate the responses. Been out of the office and returned a little while ago. I had previously booted into "safe mode" and ran all the scans I could - still had the same issue. I have "defrag'ed" and issue remained. Have NOT copied another "winlogon.exe".
When I left this afternoon - I started a fresh scan (Malwarebytes - new defs) in safe mode - WITHOUT any network devices running. When I returned the PC was still running and malwarebytes had finished w/o finding any issues. I can NOT go to IE or any other network share. But, the PC is running.
I have manually updated MS AV defs and have rebooted (without any network devices running). The PC is running and the Process window is showing only 33 processes vice 50+ before. It is running far past the time when it would have rebooted previously. I am going to let the scan complete and then try one wireless device at a time to see if that is the issue.
Barking up the wrong tree????
First & most importantly, I truly appreciate the responses. Been out of the office and returned a little while ago. I had previously booted into "safe mode" and ran all the scans I could - still had the same issue. I have "defrag'ed" and issue remained. Have NOT copied another "winlogon.exe".
When I left this afternoon - I started a fresh scan (Malwarebytes - new defs) in safe mode - WITHOUT any network devices running. When I returned the PC was still running and malwarebytes had finished w/o finding any issues. I can NOT go to IE or any other network share. But, the PC is running.
I have manually updated MS AV defs and have rebooted (without any network devices running). The PC is running and the Process window is showing only 33 processes vice 50+ before. It is running far past the time when it would have rebooted previously. I am going to let the scan complete and then try one wireless device at a time to see if that is the issue.
Barking up the wrong tree????
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I ran the PC for several hours in safe mode w/o issue. I then rebooted (not safe mode) & ran another full scan w/malwarebytes; but, w/o any network devices. No problems. PC ran fine. Inserted a USB wireless NIC and the PC shut down after several minutes. Rebooted and found two entries in the event log referencing "faulting application winlogon.exe; fauling module "hspdar1.dll" Did a search & deleted the file from sys32 directory. Rebooted w/USB NIC and system seems to be running OK. Looked up the key you referenced and found a folder "hspdar1" - deleted it. Running Windows update & PC continues to run fine. But, I am still unsure ............ I am looking up " .ARN " format. Again thanks for the support
ASKER
Oh, btw ... these were the entries w/in the Registry key ......
Shell=explorer.exe
Userinit=c:\windows\system
Shell=explorer.exe
Userinit=c:\windows\system
ASKER
It was a good (but long) night. The PC appears to be running w/o issue now. After numerous scans and reboots through out the evening. It appears that after I discovered & removed the "hspdar1.dll" - the BSOD went away. I have run all windows updates without issue. The PC has been continually running (on the network) since 2am or so. I am thankful to "johnb6767" for pointing out the need to check the registry keys. I found & deleted that "hspdar1" folder w/in the registry key. I do not know why the virus/malware scans did not identify the "hspdar1.dll" issue. Thanks to all who assisted - it is truly appreciated