Does this article sound like your issue?
Quote:
SYMPTOMS
When you restart your computer, you may receive the following error message:
STOP 0x0000001e KMODE_EXCEPTION_NOT_HANDLED in win32k.sys
or
STOP 0xC000021A {Fatal System Error} The Windows Logon Process terminated unexpectedly.
CAUSE
This behavior can occur if you downloaded the Backdoor.NTHack virus from a remote host into your computer. This virus is initiated by the Dl.bat file in the InetPub\Scripts folder.
As a result, both the Firedaemon.exe and Sud.exe files are installed on the computer as well as the Os2srv.exe and Mmtask.exe files, which along with the Sud.exe and Index.exe files are run as services.
|
Microsoft support Page
Google Search That Might Help Too