re: lsass.exe Error
Saturday, May 1, 2004 at 6:24 pm
Windows XP Annoyances Discussion Forum
Posted by Mike
(1 messages posted)
I had a similar problem, but noticed that a file called avserve2.exe was eating up
CPU cycles at the same time. After removing it from the registry at HKLM\Software\Microsoft\Currentversion\run
to prevent it from launching at startup then rebooting, lsass ran fine and no longer
caused me any problems. Even if you don't have the same problem, it's worth checking
out your process list to see if somebody's screwing up lsass rather than running
around in circles trying to get rid of lsass that seems to be a standard Windows
security file.
On Saturday, December 28, 2002 at 12:24 am, Steve wrote:
>
>After leaving my PC to download overnight, i rebooted in the morning only to get
>and error similar to:
>"lsass.exe system error - invalid parameters passed to function or service"
>
>I thought WTF? and after a few reboots i knew it was screwed. My guess is that someone
>has hacked me (for what reason i will never know) or i had been infected with some
>kind of p00fter virus.
>
>Now this got me angry. But most of all i wanted to use my PC again, without having
>to fdisk, format etc.
>
>So i traced the problem back to a few of XP's startup files which are loacted in
>windows\system32\config. Now these files contain information about your software,
>user accounts, and many other things. This is why you are unable to alter or modify
>them from within windows itself.
>
>BUT this is where you have to be tricky. You could either get your hands on another
>Hard Disk with XP, or use something like ntfsdos. Basically you will need something
>that can read your Hard Disk.
>
>Anyway after fooling around for a bit i came across a folder that i had never really
>taken much notice of. Its:
>
>c:\System Volume Information
>
>This is a hidden and protected folder that amazingly enough keeps what are know
as
>system restore points for you. Basically it takes note of nearly everything you
do.
>
>In this folder there will be some wierd looking folders like:
>
>_restore{87BD3667-3246-476B-923F-F86E30B3E7F8}
>
>if you browse through these you will find other files named something like RP01
or
>RP35, etc...
>
>Bascially find the one with the highest number and in it will be another folder
named
>snapshot, and in this folder are the files which you need to recover your system:
>
>_registry_user_.default
>_registry_machine_security
>_registry_machine_software
>_registry_machine_system
>_registry_machine_sam
>
>copy these files to a temp directory and rename them to:
>
>default
>security
>software
>system
>sam
>
>now you will need to delete the offending files in c:\windows\system32\config and
>replace them with the new files.
>
>If you get the same error go back and choose another folder (the RP01 etc) to restore
>from.
>
>After doing so you will be able to boot up and use your PC again.
>
>
>
- Written in response to:
- re: lsass.exe Error (Steve: Saturday, December 28, 2002 at 12:24 am)
Responses to this message:
|
|
All messages in this thread [show all]
 |  |  | re: lsass.exe Error (Mike: Sat, May 1, 2004, 6:24 pm) |
| |
| |
| |
Return to the Windows XP Discussion Forum
|
|
