Solved Errors on Disk Boot - 0xc0000001 and 0xc0000221

B

boweasel

Member
An old HP Pavilion 32 bit Vista A6000 began giving me 'Header checksum does not match the computer checksum' errors. I inserted my 32 bit Vista disk and performed a Startup Repair. All was good.

I ran Windows Update until it was current, ran Malwarebytes, TDSSKiller, Hitman Pro 3, ADWCleaner and JRT, correcting any errors I found. The computer ran beautifully for 5 days, and it was rebooted at least a dozen times over those 5 days. Then I didn't use it for a day...

Today I get the black screen with white lettering pointing to a file in Windows\System32\Drivers\Tcpip.sys with a status code of 0xc0000221, and am prompted to use my Windows disk.

Starting it with the same disk I'd used before, I get the 'press any key to boot from CD', I see it loading files, then I get another black screen pointing me to Windows\System32\Boot\Winload.exe with a staus code of 0xc0000001. Subsequent efforts will sometimes give me the same file, but a status of 0xc0000221 (same status as I'm getting with a normal boot), always telling me to use my install disk. Duhhh... I am using a disk - the same disk that let me fix the checksum problem.

Anyone have any ideas?
 

My Computer

System One

Since I'd also thought that the RAM might be a problem, I took out one stick (1GB) and repowered. I got multiple beeps. I unplugged, and replaced the beeping stick with the other one. I powered on and got just a black screen. I then put back the beeping stick, but in a different slot (this tower has 4 memory slots, and I was only using 2). My Hiren's disc has MemTest86 on it. I ran 2 complete passes and encountered no errors. When I removed the CD and rebooted, the PC started normally. I'm now running a full Security Essentials scan, and have gotten the msg that preliminary scans indicate the existence of malware. It'll probably run all night.

Is there a command I can run to determine exactly how much usable memory I have? The computer properties lists 2GB, and the memtest didn't fail anything, but I didn't see anywhere where it actually showed me the functioning memory.
 

My Computer

System One

I assume you have run sfc /scannow. It might be worthwhile to compare your file details to mine. I give the sizes from Properties, which are more precise than the rounded-up sizes in the folder windows:

tcpip.sys 893 KB (915,392 bytes) modified 4/4/2014
winload.exe 963 KB (986,600 bytes) modified 4/11/2009

You might want to consider an antivirus rescue CD. Bitdefender and Kaspersky CDs are reportedly good, and I think you can burn one for free.
 

My Computer

System One

  • Operating System
    Vista Home Premium x86 SP2
    Manufacturer/Model
    HP Pavilion Elite m9150f
    CPU
    Intel Q6600
    Memory
    3 GB
    Graphics card(s)
    NVIDIA GeForce 8500 GT
Vistaar said:
I assume you have run sfc /scannow.
Click to expand...
I had run sfc /scannow as part of the original cleanup. It detected no integrity violations, and the tower continued to work great for 5 days after that cleanup
Vistaar said:
It might be worthwhile to compare your file details to mine. I give the sizes from Properties, which are more precise than the rounded-up sizes in the folder windows:

tcpip.sys 893 KB (915,392 bytes) modified 4/4/2014
winload.exe 963 KB (986,600 bytes) modified 4/11/2009
Click to expand...
How did you get these figures? I see nothing like this on Properties, which I get from right clicking Computer off the Start menu, then left clicking Properties.
Vistaar said:
You might want to consider an antivirus rescue CD. Bitdefender and Kaspersky CDs are reportedly good, and I think you can burn one for free.
Click to expand...
I do have a bitdefender disk, but since the computer is currently working, I only ran the full scan of MSE. It detected with a Severe rating called Obfuscator, which had gone undetected by Malwarebytes, AdwCleaner, JRT and TDSSKiller. My main area of concern is that after the 0xc0000221 boot error, I could no longer get it to boot using ANY disk, not a 32 bit Dell Vista DVD, not Spotmau's Bootsuite. All I'd really wanted was to get to a command prompt so I could run Fixboot and Fixmbr. Since I got similar 0xc0000221 errors while USING those disks, I was concerned. I'm STILL concerned about what will hapen if I turn this off for more than a few hours.
 

My Computer

System One

Obfuscator is merely a wrapper - it's essentially a file-compression technique that hopes to confuse AVs and infects running processes without actually generating any other files that the AVs can delete. It can be almost any kind of malware, from adware, through Trojan to full-blown rootkit virus.
Glad you managed to root it out - but check the system out with at least two different offline scanners before putting it back online.
 

My Computer

System One

  • Manufacturer/Model
    Acer Aspire 8930G
You must log in or register to reply here.
Back
Top