Tip: Run a free scan for common Windows errors ad

re: lsass.exe Error Saturday, December 28, 2002 at 12:20 am Posted by Adam Bradley (7838 messages posted) Here try looking over this Google Search: lsass.exe Good Luck, Adam Bradley On Friday, December 27, 2002 at 11:58 pm, George wrote: >Today I recieved a lsass.exe application error on start up. I cant get past it. Anyone >got any suggestions other than reloading the OS. [Reply or follow-up to this message] re: lsass.exe Error Saturday, December 28, 2002 at 12:24 am Posted by Steve (1481 messages posted) After leaving my PC to download overnight, i rebooted in the morning only to get and error similar to: "lsass.exe system error - invalid parameters passed to function or service" I thought WTF? and after a few reboots i knew it was screwed. My guess is that someone has hacked me (for what reason i will never know) or i had been infected with some kind of p00fter virus. Now this got me angry. But most of all i wanted to use my PC again, without having to fdisk, format etc. So i traced the problem back to a few of XP's startup files which are loacted in windows\system32\config. Now these files contain information about your software, user accounts, and many other things. This is why you are unable to alter or modify them from within windows itself. BUT this is where you have to be tricky. You could either get your hands on another Hard Disk with XP, or use something like ntfsdos. Basically you will need something that can read your Hard Disk. Anyway after fooling around for a bit i came across a folder that i had never really taken much notice of. Its: c:\System Volume Information This is a hidden and protected folder that amazingly enough keeps what are know as system restore points for you. Basically it takes note of nearly everything you do. In this folder there will be some wierd looking folders like: _restore{87BD3667-3246-476B-923F-F86E30B3E7F8} if you browse through these you will find other files named something like RP01 or RP35, etc... Bascially find the one with the highest number and in it will be another folder named snapshot, and in this folder are the files which you need to recover your system: _registry_user_.default _registry_machine_security _registry_machine_software _registry_machine_system _registry_machine_sam copy these files to a temp directory and rename them to: default security software system sam now you will need to delete the offending files in c:\windows\system32\config and replace them with the new files. If you get the same error go back and choose another folder (the RP01 etc) to restore from. After doing so you will be able to boot up and use your PC again. On Friday, December 27, 2002 at 11:58 pm, George wrote: >Today I recieved a lsass.exe application error on start up. I cant get past it. Anyone >got any suggestions other than reloading the OS. [Reply or follow-up to this message] re: lsass.exe Error Saturday, December 28, 2002 at 12:28 am Posted by Steve (1481 messages posted) just had to post this, i found on another site..LOL..ain't system restore great and how many of us has not found it yet?? On Friday, December 27, 2002 at 11:58 pm, George wrote: >Today I recieved a lsass.exe application error on start up. I cant get past it. Anyone >got any suggestions other than reloading the OS. [Reply or follow-up to this message] re: lsass.exe Error Saturday, December 28, 2002 at 3:53 am Posted by rebootbill (764 messages posted) try system restore under system tools. On Friday, December 27, 2002 at 11:58 pm, George wrote: >Today I recieved a lsass.exe application error on start up. I cant get past it. Anyone >got any suggestions other than reloading the OS. [Reply or follow-up to this message] re: lsass.exe Error Saturday, December 28, 2002 at 10:19 am Posted by George (2 messages posted) Thanks will give it a try... On Saturday, December 28, 2002 at 12:24 am, Steve wrote: >After leaving my PC to download overnight, i rebooted in the morning only to get >and error similar to: >"lsass.exe system error - invalid parameters passed to function or service" > >I thought WTF? and after a few reboots i knew it was screwed. My guess is that someone >has hacked me (for what reason i will never know) or i had been infected with some >kind of p00fter virus. > >Now this got me angry. But most of all i wanted to use my PC again, without having >to fdisk, format etc. > >So i traced the problem back to a few of XP's startup files which are loacted in >windows\system32\config. Now these files contain information about your software, >user accounts, and many other things. This is why you are unable to alter or modify >them from within windows itself. > >BUT this is where you have to be tricky. You could either get your hands on another >Hard Disk with XP, or use something like ntfsdos. Basically you will need something >that can read your Hard Disk. > >Anyway after fooling around for a bit i came across a folder that i had never really >taken much notice of. Its: > >c:\System Volume Information > >This is a hidden and protected folder that amazingly enough keeps what are know as >system restore points for you. Basically it takes note of nearly everything you do. > >In this folder there will be some wierd looking folders like: > >_restore{87BD3667-3246-476B-923F-F86E30B3E7F8} > >if you browse through these you will find other files named something like RP01 or >RP35, etc... > >Bascially find the one with the highest number and in it will be another folder named >snapshot, and in this folder are the files which you need to recover your system: > >_registry_user_.default >_registry_machine_security >_registry_machine_software >_registry_machine_system >_registry_machine_sam > >copy these files to a temp directory and rename them to: > >default >security >software >system >sam > >now you will need to delete the offending files in c:\windows\system32\config and >replace them with the new files. > >If you get the same error go back and choose another folder (the RP01 etc) to restore >from. > >After doing so you will be able to boot up and use your PC again. > > > [Reply or follow-up to this message] re: lsass.exe Error Tuesday, February 18, 2003 at 6:57 pm Posted by Chuck Frantz (1 messages posted) I had the same problem after loading win xp and found the source of the problem to be the BIOS on the motherboard was in need of a update. My motherboard is a Abit KT7E and was purchased approx. 7-02 .My message for all is take a close look at your BIOS revision and be very careful when you flash BIOS. Happy to report that the machine runs perfect now. On Saturday, December 28, 2002 at 3:53 am, rebootbill wrote: >try system restore under system tools. > > [Reply or follow-up to this message] re: lsass.exe Error Thursday, February 20, 2003 at 12:31 am Posted by Lior (1 messages posted) Today at one point I had a cpu usage of 98%-100%...Cause ? lsass.exe who runs 80% of cpu usage. Everything was frozen, on a winxp machine. Anybody knows whats going on ? On Friday, December 27, 2002 at 11:58 pm, George wrote: >Today I recieved a lsass.exe application error on start up. I cant get past it. Anyone >got any suggestions other than reloading the OS. [Reply or follow-up to this message] re: lsass.exe Error Thursday, February 20, 2003 at 5:41 am Posted by Joe (1 messages posted) I received this error, followed by the endless rebooting cycle immediately after adding RAM to my PC. It turns out my new RAM was PC133, while existing RAM was PC100. I removed the new RAM module, booted up, and everything was peachy again. Hope this helps someone. On Friday, December 27, 2002 at 11:58 pm, George wrote: >Today I recieved a lsass.exe application error on start up. I cant get past it. Anyone >got any suggestions other than reloading the OS. [Reply or follow-up to this message] re: lsass.exe Error Thursday, February 20, 2003 at 4:19 pm Posted by nooen (1 messages posted) Ihad a similar Prob. My mychine crashed after rebooting it told me it was not able to initialize te lsass.exe #i disconnenctecd the network cable booted normally and then uninstalled my network device reinstalled it and let the network assistant run over it! Works fine! On Friday, December 27, 2002 at 11:58 pm, George wrote: >Today I recieved a lsass.exe application error on start up. I cant get past it. Anyone >got any suggestions other than reloading the OS. [Reply or follow-up to this message] re: lsass.exe Error Friday, February 21, 2003 at 5:37 am Posted by orlando robbio (1 messages posted) guys you might want to check out support.microsoft.com knowledge base query to give you a better handle on the lssas.exe . i have sort of the same problem on a 2000 server my page file climes to 2 gigs then dies .. some solutionts but it involves registry settings so i have to take my timedoing it ... if you have a home pc i suggest uninstalling any network services if you dont have one in order to eliminate your lssas problems... [Reply or follow-up to this message] re: lsass.exe Error Tuesday, February 25, 2003 at 5:16 pm Posted by Bob Is Right (18 messages posted) I solved this problem by, right after the win xp splash screen goes away I pressed "space - tab - space" It somehow worked so, its somthing to try, good luck.... Me On Saturday, December 28, 2002 at 12:20 am, Adam Bradley wrote: >Here try looking over this Google >Search: lsass.exe Good Luck, Adam Bradley > [Reply or follow-up to this message] re: lsass.exe Error Thursday, February 27, 2003 at 9:14 pm Posted by Jason (1 messages posted) Steve, You are a genius and a savior... I was having a very similar error on an XP machine where I was getting: Lsass.exe system error This return status indicates that the value provided as the current password is not correct. I hooked up the drive that was having the problem to another box and copied the old config files and everything booted up fine. Thanks for the indirect help, Jason [Reply or follow-up to this message] re: lsass.exe Error Wednesday, January 28, 2004 at 3:52 pm Posted by mike jameson (1 messages posted) Thank You . your advice worked perfect On Thursday, February 27, 2003 at 9:14 pm, Jason wrote: >Steve, > You are a genius and a savior... I was having a very similar error on an XP machine >where I was getting: > >Lsass.exe system error >This return status indicates that the value provided as the current password is not >correct. > >I hooked up the drive that was having the problem to another box and copied the old >config files and everything booted up fine. > >Thanks for the indirect help, >Jason [Reply or follow-up to this message] re: lsass.exe Error Saturday, May 1, 2004 at 4:46 pm Posted by atay (2 messages posted) I have a lsass.exe problem. when i connect to internet.I got this message: lsass.exe application error the instruction at "0x00900090" referenced memory at "0x00900090".The memory could not be "read" Click on OK to terminate the program click on cancel to debug the program whichever i choose my computer shut down and restart PLSSSSSS HELPP MEEEE On Saturday, December 28, 2002 at 10:19 am, George wrote: >Thanks will give it a try... > > [Reply or follow-up to this message] re: lsass.exe Error Saturday, May 1, 2004 at 6:24 pm Posted by Mike (1 messages posted) I had a similar problem, but noticed that a file called avserve2.exe was eating up CPU cycles at the same time. After removing it from the registry at HKLM\Software\Microsoft\Currentversion\run to prevent it from launching at startup then rebooting, lsass ran fine and no longer caused me any problems. Even if you don't have the same problem, it's worth checking out your process list to see if somebody's screwing up lsass rather than running around in circles trying to get rid of lsass that seems to be a standard Windows security file. On Saturday, December 28, 2002 at 12:24 am, Steve wrote: > >After leaving my PC to download overnight, i rebooted in the morning only to get >and error similar to: >"lsass.exe system error - invalid parameters passed to function or service" > >I thought WTF? and after a few reboots i knew it was screwed. My guess is that someone >has hacked me (for what reason i will never know) or i had been infected with some >kind of p00fter virus. > >Now this got me angry. But most of all i wanted to use my PC again, without having >to fdisk, format etc. > >So i traced the problem back to a few of XP's startup files which are loacted in >windows\system32\config. Now these files contain information about your software, >user accounts, and many other things. This is why you are unable to alter or modify >them from within windows itself. > >BUT this is where you have to be tricky. You could either get your hands on another >Hard Disk with XP, or use something like ntfsdos. Basically you will need something >that can read your Hard Disk. > >Anyway after fooling around for a bit i came across a folder that i had never really >taken much notice of. Its: > >c:\System Volume Information > >This is a hidden and protected folder that amazingly enough keeps what are know as >system restore points for you. Basically it takes note of nearly everything you do. > >In this folder there will be some wierd looking folders like: > >_restore{87BD3667-3246-476B-923F-F86E30B3E7F8} > >if you browse through these you will find other files named something like RP01 or >RP35, etc... > >Bascially find the one with the highest number and in it will be another folder named >snapshot, and in this folder are the files which you need to recover your system: > >_registry_user_.default >_registry_machine_security >_registry_machine_software >_registry_machine_system >_registry_machine_sam > >copy these files to a temp directory and rename them to: > >default >security >software >system >sam > >now you will need to delete the offending files in c:\windows\system32\config and >replace them with the new files. > >If you get the same error go back and choose another folder (the RP01 etc) to restore >from. > >After doing so you will be able to boot up and use your PC again. > > > [Reply or follow-up to this message] re: lsass.exe Error Saturday, May 1, 2004 at 7:43 pm Posted by robert (1 messages posted) I'm getting a similar problem to atay, but my computer gives me a countdown to save data before itshuts down when I try to log onto the internet. HEEEELLLPPPPP!!! On Saturday, May 1, 2004 at 4:46 pm, atay wrote: > >I have a lsass.exe problem. >when i connect to internet.I got this message: > >lsass.exe application error > >the instruction at "0x00900090" referenced memory at "0x00900090".The memory could >not be "read" > >Click on OK to terminate the program >click on cancel to debug the program > >whichever i choose my computer shut down and restart >PLSSSSSS HELPP MEEEE > > > [Reply or follow-up to this message] re: lsass.exe Error Saturday, May 1, 2004 at 11:03 pm Posted by patrick (38 messages posted) me too.! guys, have you downloaded the yahoo messenger BETA? 'cause for me, it happened right after i downloaded and installed that program. Help anyone. I'm also gettin' that countdown timer then it shuts to black screen. On Saturday, May 1, 2004 at 7:43 pm, robert wrote: >I'm getting a similar problem to atay, but my computer gives me a countdown to save >data before itshuts down when I try to log onto the internet. > >HEEEELLLPPPPP!!! > > > > [Reply or follow-up to this message] re: lsass.exe Error Saturday, May 1, 2004 at 11:10 pm Posted by patrick (38 messages posted) My cause is a bit different. It just happened just last night after i downloaded that Yahoo messenger BETA, does that have something to do w/it? anyway, after connecting to the internet for about 10-20minutes, that LSA (shell) blah blah thing comes up! and worse gives me that countdown timer of one minute before shutdown. is it safe to just delete that from the system32 folder after ending the process in the task manager? no idea... any fix? suggestions? thanks On Saturday, May 1, 2004 at 6:24 pm, Mike wrote: >I had a similar problem, but noticed that a file called avserve2.exe was eating up >CPU cycles at the same time. After removing it from the registry at HKLM\Software\Microsoft\Currentversion\run >to prevent it from launching at startup then rebooting, lsass ran fine and no longer >caused me any problems. Even if you don't have the same problem, it's worth checking >out your process list to see if somebody's screwing up lsass rather than running >around in circles trying to get rid of lsass that seems to be a standard Windows >security file. > > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, May 2, 2004 at 4:41 am Posted by John (1 messages posted) I read about a new self-executing worm that attacks a vulnerability in lsass. (released April 15, 2004) I'm wondering if this newest batch of lsass problems might be related. I got the worm (or this error), coincidentally - days after I took down my physical firewall (had to send it in for repairs). You can find virus cleaning stuff on symantic - and security updates if you do a search for Sasser Worm - or FxSasser... On Saturday, May 1, 2004 at 11:10 pm, patrick wrote: >My cause is a bit different. It just happened just last night after i downloaded >that Yahoo messenger BETA, does that have something to do w/it? anyway, after connecting >to the internet for about 10-20minutes, that LSA (shell) blah blah thing comes up! >and worse gives me that countdown timer of one minute before shutdown. is it safe >to just delete that from the system32 folder after ending the process in the task >manager? no idea... any fix? suggestions? thanks > > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, May 2, 2004 at 5:24 am Posted by atay (2 messages posted) Yes, I downloaded yahoo messenger,but not beta, on Friday and this error occured yesterday.But, it occurs not right after i downloaded the messenger. On Saturday, May 1, 2004 at 11:03 pm, patrick wrote: >me too.! guys, have you downloaded the yahoo messenger BETA? 'cause for me, it happened >right after i downloaded and installed that program. Help anyone. I'm also gettin' >that countdown timer then it shuts to black screen. > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, May 2, 2004 at 6:33 am Posted by Craig (4 messages posted) I have the same problem that my system says began about 5:00pm yesterday EST. I HAVE NOT downloaded Yahoo! messenger service. I thought the problem had been possibly caused by a Norton system scan that finished about the same time and I did some aouto repairs of the registry. It is possible that we have been hacked but more likely there is some other issue under the hood since this seems to have happened to us at about the same time. I also need help from anyone who understands this problem. On Sunday, May 2, 2004 at 5:24 am, atay wrote: >Yes, I downloaded yahoo messenger,but not beta, on Friday and this error occured >yesterday.But, it occurs not right after i downloaded the messenger. > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, May 2, 2004 at 6:41 am Posted by Craig (4 messages posted) John: Thanks for this. Could you please give more info such as links, etc, regarding this worm? My Norton is up to date and I had just completed a system check when my problems occurred. No indication was given to me that something was residing on my system, just an autofix of two registry problems. I am up-to-date on all virus/worm parameters. On Sunday, May 2, 2004 at 4:41 am, John wrote: >I read about a new self-executing worm that attacks a vulnerability in lsass. (released >April 15, 2004) > >I'm wondering if this newest batch of lsass problems might be related. I got the >worm (or this error), coincidentally - days after I took down my physical firewall >(had to send it in for repairs). You can find virus cleaning stuff on symantic - >and security updates if you do a search for Sasser Worm - or FxSasser... > > > > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, May 2, 2004 at 6:52 am Posted by Craig (4 messages posted) It is the W.32.Sasser.B.Worm. There are removal tools at Norton and presumably other services. There are updates for this worm dated yesterday. Good luck (to me too). On Saturday, May 1, 2004 at 4:46 pm, atay wrote: > >I have a lsass.exe problem. >when i connect to internet.I got this message: > >lsass.exe application error > >the instruction at "0x00900090" referenced memory at "0x00900090".The memory could >not be "read" > >Click on OK to terminate the program >click on cancel to debug the program > >whichever i choose my computer shut down and restart >PLSSSSSS HELPP MEEEE > > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, May 2, 2004 at 7:16 am Posted by obla4ko (3 messages posted) So about this lsass.exe error. I've been trying to deal with it for about 48 hours now (though i DID get some sleep). It all started off in the exact same way as the orignator of this string (left comp on overnight, woke up to find it shutting down due to some illegal lsass error etc.). Though i'm running xp professional. This is what i've done so far: 1.System restore didnt help. (to several different points in time) 2.Found some info in microsoft website that its a MS issue--installed Service pack 1 update (no change) 3. Knowledge base on microsoft or some such similar also recommended an IE security update--went and installed several of those -- no change. 4. Downloaded the newest Symantec virus definitions (current as of May 1st) -- scanned drive, no change, no viruses found 5. Noticed that it all sounds like this worm that people have already mentioned--got the wormfix file 'fxsasser.exe', ran it -- no worm found. Now i'm really kinda out of options--any ideas? Anyone? On Sunday, May 2, 2004 at 6:41 am, Craig wrote: >John: Thanks for this. Could you please give more info such as links, etc, regarding >this worm? > >My Norton is up to date and I had just completed a system check when my problems >occurred. No indication was given to me that something was residing on my system, >just an autofix of two registry problems. I am up-to-date on all virus/worm parameters. > > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, May 2, 2004 at 7:44 am Posted by Craig (4 messages posted) Good news and bad news. Good news. New update today (May 2) at Symantec with updated virus definitions. Download today and you will find W32.Sasser.B.Worm and your computer. There is a worm removal tool updated today to version 1.01. Download it, execute it (turn off system restore first), and the worm is removed. Very easy. Bad news: On reboot and after confirming that the worm is gone, I still get an LSA Shell send error message from the system. So far, no shutdown but still getting the message. Looking for that fix still. Put up a firewall. I don't have one up because of some problems I used to have talking to my office system through Citrix but those days are gone anyway. Firewall going up today. Goodluck. On Sunday, May 2, 2004 at 7:16 am, obla4ko wrote: >So about this lsass.exe error. I've been trying to deal with it for about 48 hours >now (though i DID get some sleep). It all started off in the exact same way as the >orignator of this string (left comp on overnight, woke up to find it shutting down >due to some illegal lsass error etc.). Though i'm running xp professional. >This is what i've done so far: >1.System restore didnt help. (to several different points in time) >2.Found some info in microsoft website that its a MS issue--installed Service pack >1 update (no change) >3. Knowledge base on microsoft or some such similar also recommended an IE security >update--went and installed several of those -- no change. >4. Downloaded the newest Symantec virus definitions (current as of May 1st) -- scanned >drive, no change, no viruses found >5. Noticed that it all sounds like this worm that people have already mentioned--got >the wormfix file 'fxsasser.exe', ran it -- no worm found. > >Now i'm really kinda out of options--any ideas? Anyone? > > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, May 2, 2004 at 8:14 am Posted by obla4ko (3 messages posted) FIXED !!!!!! This only applies to those who actually have a security issue, not the virus that's going around. If you're not sure, then do both--the virus cleaning and my advice. This also is only in reference to Windows XP Professional edition: simply download and install the patch from this link: http://support.microsoft.com/?kbid=824146 make sure to do this before the lsass error shows up, otherwise it won't allow you to have admin rights to your own machine :-/ so you may have to dl it first, and then reboot and install it quick before it shuts down. good luck. On Sunday, May 2, 2004 at 7:44 am, Craig wrote: >Good news and bad news. > >Good news. New update today (May 2) at Symantec with updated virus definitions. > Download today and you will find W32.Sasser.B.Worm and your computer. There is >a worm removal tool updated today to version 1.01. Download it, execute it (turn >off system restore first), and the worm is removed. Very easy. > >Bad news: On reboot and after confirming that the worm is gone, I still get an LSA >Shell send error message from the system. So far, no shutdown but still getting >the message. Looking for that fix still. > >Put up a firewall. I don't have one up because of some problems I used to have talking >to my office system through Citrix but those days are gone anyway. Firewall going >up today. > >Goodluck. > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, May 2, 2004 at 9:22 am Posted by patrick (38 messages posted) ok, now we're talkin! immediately after i liveupdated my norton, that pop virus alert appeared about the W32.Sasser.B.Worm. im in the process of downloading that microsoft thing & the removal tool. Off to do them right after download. Strange 'cause, is this a coincidence? That some of us just had this problem at almost the same time.. hmmm... il get back on you guys after i solved mine. On Sunday, May 2, 2004 at 8:14 am, obla4ko wrote: >FIXED !!!!!! >This only applies to those who actually have a security issue, not the virus that's >going around. If you're not sure, then do both--the virus cleaning and my advice. >This also is only in reference to Windows XP Professional edition: > >simply download and install the patch from this link: >http://support.microsoft.com/?kbid=824146 >make sure to do this before the lsass error shows up, otherwise it won't allow you >to have admin rights to your own machine :-/ so you may have to dl it first, and >then reboot and install it quick before it shuts down. good luck. > > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, May 2, 2004 at 9:53 am Posted by obla4ko (3 messages posted) OK, so it appears I spoke too soon--about an hour after perfect function (during which time I excitedly reported the fix to the forum) the error krept up again. *sigh* i dont know if i can do this anymore. In anycase, after thorough searching, there is another microsoft update specifically geared to this issue-its pretty new, and it refers to the same 'security issue' press release that the virus seems to target according to symantec (talk about a catch-22). in any case, i downloaded and installed the below patch, and am now running over 60 minutes without that shutdown garbage creeping up. in other words--no harm done, and possibly fixed it, but now i'm afraid to speak too soon! :-X follow the below link to the patch: http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx There's also another patch after this one (meaning a newer one in sequence) but it doesnt seem to apply to this issue. I could write this up in more technical terms....but why. Hopefully it won't fool me again. On Sunday, May 2, 2004 at 9:22 am, patrick wrote: >ok, now we're talkin! immediately after i liveupdated my norton, that pop virus alert >appeared about the W32.Sasser.B.Worm. im in the process of downloading that microsoft >thing & the removal tool. Off to do them right after download. > >Strange 'cause, is this a coincidence? That some of us just had this problem at almost >the same time.. hmmm... il get back on you guys after i solved mine. > > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, May 2, 2004 at 7:08 pm Posted by LADY (7 messages posted) Thanks a bunch...I was getting really upset thinking I had done another stupid thing..I don't feel so stupid now. But just in case, i had a few viruses and was deleting them with symantec, but one was really hard to do ....bloodhound packed..... had to delete some files problems with lsass.exe started aferwards On Sunday, May 2, 2004 at 9:53 am, obla4ko wrote: >OK, so it appears I spoke too soon--about an hour after perfect function (during >which time I excitedly reported the fix to the forum) the error krept up again. *sigh* >i dont know if i can do this anymore. In anycase, after thorough searching, there >is another microsoft update specifically geared to this issue-its pretty new, and >it refers to the same 'security issue' press release that the virus seems to target >according to symantec (talk about a catch-22). in any case, i downloaded and installed >the below patch, and am now running over 60 minutes without that shutdown garbage >creeping up. in other words--no harm done, and possibly fixed it, but now i'm afraid >to speak too soon! :-X follow the below link to the patch: >http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx >There's also another patch after this one (meaning a newer one in sequence) but it >doesnt seem to apply to this issue. I could write this up in more technical terms....but >why. Hopefully it won't fool me again. > > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, May 2, 2004 at 7:43 pm Posted by LADY (7 messages posted) ok...deleted lsass.exe from registry ..no luck...can't download update in norton because there is no way I can connect to the internet in my laptop (is the one with the problem) any ideas?? On Sunday, May 2, 2004 at 7:08 pm, LADY wrote: >Thanks a bunch...I was getting really upset thinking I had done another stupid thing..I >don't feel so stupid now. But just in case, i had a few viruses and was deleting >them with symantec, but one was really hard to do ....bloodhound packed..... had >to delete some files problems with lsass.exe started aferwards > > [Reply or follow-up to this message] re: lsass.exe Error Monday, May 3, 2004 at 6:28 pm Posted by patrick (38 messages posted) the norton & the security issue somehow worked for me.. I'm not really sure what really fixed the problem but i'm glad it is. But i'm also having probs. my norton, at start-up, dont start with autoprotect enabled. this first happened after i got that lsass error. i'l still wait for that error message to come out again. hey, there is a way to connect to the internet w/ that virus on, i think. Im not sure if it's only for worm viruses but check out for any worm fix at symantec. Try W32.blaster.worm, Look up on the manual deletion of the virus. as far as i can remember, there is an instruction on how to connect back to the internet w/o that shutdown pop-up. good luck! On Sunday, May 2, 2004 at 7:43 pm, LADY wrote: >ok...deleted lsass.exe from registry ..no luck...can't download update in norton >because there is no way I can connect to the internet in my laptop (is the one with >the problem) any ideas?? > > > [Reply or follow-up to this message] re: lsass.exe Error Tuesday, May 4, 2004 at 5:22 pm Posted by Irritated101 (1 messages posted) Alrighty, I have this worm on my computer? I found out about it belatedly after a few restores and frustration mounting. Yes I get all the "go here and click on that it will fix it" advice BUT my computer is stuck in a rebooting loop, and what's worse is it isnt "seeing" my keyboard so I can not go into safemode or into setup to boot with the disc. Anything I could possibly do besides take it in? On Monday, May 3, 2004 at 6:28 pm, patrick wrote: >the norton & the security issue somehow worked for me.. I'm not really sure what >really fixed the problem but i'm glad it is. But i'm also having probs. my norton, >at start-up, dont start with autoprotect enabled. this first happened after i got >that lsass error. i'l still wait for that error message to come out again. > >hey, there is a way to connect to the internet w/ that virus on, i think. Im not >sure if it's only for worm viruses but check out for any worm fix at symantec. Try >W32.blaster.worm, Look up on the manual deletion of the virus. as far as i can remember, >there is an instruction on how to connect back to the internet w/o that shutdown >pop-up. good luck! > > > [Reply or follow-up to this message] re: lsass.exe Error Tuesday, May 4, 2004 at 7:55 pm Posted by Glenn (1 messages posted) This Lsass.exe error is from the Sasser virus recently unleashed. MSN has a link to the virus removal tool. I suggest getting it then goto windows update and download your critical updates on your computer. On Monday, May 3, 2004 at 6:28 pm, patrick wrote: >the norton & the security issue somehow worked for me.. I'm not really sure what >really fixed the problem but i'm glad it is. But i'm also having probs. my norton, >at start-up, dont start with autoprotect enabled. this first happened after i got >that lsass error. i'l still wait for that error message to come out again. > >hey, there is a way to connect to the internet w/ that virus on, i think. Im not >sure if it's only for worm viruses but check out for any worm fix at symantec. Try >W32.blaster.worm, Look up on the manual deletion of the virus. as far as i can remember, >there is an instruction on how to connect back to the internet w/o that shutdown >pop-up. good luck! > > > [Reply or follow-up to this message] re: lsass.exe Error Thursday, May 6, 2004 at 11:09 am Posted by angel (1 messages posted) Did you ever get a response on this message? I have the same problem on a computer I just acquired and need to get rid of this problem. Let me know. Thanks! On Sunday, May 2, 2004 at 6:52 am, Craig wrote: >It is the W.32.Sasser.B.Worm. There are removal tools at Norton and presumably other >services. There are updates for this worm dated yesterday. Good luck (to me too). > > > [Reply or follow-up to this message] re: lsass.exe Error Friday, May 7, 2004 at 8:50 pm Posted by sutIL (1 messages posted) pls help me too.. i have this lsass.exe prob... :(( what should i dooooo??? [Reply or follow-up to this message] re: lsass.exe Error Saturday, May 8, 2004 at 12:35 am Posted by Greg (2 messages posted) Just in case you are not aware, the avserve & avsere2.exe files spiking you out are part of the Sasser virus. I updated Virus Scan, removed Sasser, & no more avser2.exe. I had been doing the same thing for about 3 days, closing the process after waiting 20 minutes for Windows to start. I still get lsass.exe error in my evenlog on bootup, but it is not due to the virus at this point, & Windows doesn't freeze. However, the initial boot takes about 5 minutes. Hope this helps On Saturday, May 1, 2004 at 6:24 pm, Mike wrote: >I had a similar problem, but noticed that a file called avserve2.exe was eating up >CPU cycles at the same time. After removing it from the registry at HKLM\Software\Microsoft\Currentversion\run >to prevent it from launching at startup then rebooting, lsass ran fine and no longer >caused me any problems. Even if you don't have the same problem, it's worth checking >out your process list to see if somebody's screwing up lsass rather than running >around in circles trying to get rid of lsass that seems to be a standard Windows >security file. > > > [Reply or follow-up to this message] re: lsass.exe Error Saturday, May 8, 2004 at 8:58 am Posted by patrick (38 messages posted) download the latest norton virus definitions and the removal tool for sasser worm... On Friday, May 7, 2004 at 8:50 pm, sutIL wrote: >pls help me too.. i have this lsass.exe prob... :(( >what should i dooooo??? [Reply or follow-up to this message] re: lsass.exe Error Monday, May 10, 2004 at 1:33 pm Posted by Camilo (2 messages posted) I am having problems connecting to the internet on my home computer. When it connects, it disconnects within a minute and attributes the problem to lsass. I'm hoping someone here knows what is causing this problem. [Reply or follow-up to this message] re: lsass.exe Error Tuesday, May 11, 2004 at 3:48 am Posted by patrick (38 messages posted) i answered that question before. but im not sure if that worked. again, @ securityresponce.symantec.com and search for w32.sasser.worm, check the manual removal... On Monday, May 10, 2004 at 1:33 pm, Camilo wrote: >I am having problems connecting to the internet on my home computer. When it connects, >it disconnects within a minute and attributes the problem to lsass. I'm hoping someone >here knows what is causing this problem. [Reply or follow-up to this message] re: lsass.exe Error Thursday, May 13, 2004 at 3:41 pm Posted by beft (1 messages posted) google sucks. you should try a search engine instead. On Saturday, December 28, 2002 at 12:20 am, Adam Bradley wrote: >Here try looking over this Google >Search: lsass.exe Good Luck, Adam Bradley > [Reply or follow-up to this message] re: lsass.exe Error Friday, May 14, 2004 at 7:47 am Posted by miamikoolguy (1 messages posted) To all of you still having problems with LSASS.EXE, even after removing the worm, you might want to check this site: http://www.jsifaq.com/SUBK/tip5400/rh5456.htm The problem seems to be with a corrupted Winsock caused by this worm and is solved by deleting some keys in the Windows Registry. Make sure to backup your registry before making any changes! Hope this helps! :) [Reply or follow-up to this message] re: lsass.exe Error Friday, May 14, 2004 at 7:18 pm Posted by Dan (1 messages posted) Did you try reading the above information/posts???? Hello, if I had to read it, you should too, don't just expect someone to hold your hand. Like I tell my students, don't ask until you've read. . . On Monday, May 10, 2004 at 1:33 pm, Camilo wrote: >I am having problems connecting to the internet on my home computer. When it connects, >it disconnects within a minute and attributes the problem to lsass. I'm hoping someone >here knows what is causing this problem. [Reply or follow-up to this message] re: lsass.exe Error Friday, May 14, 2004 at 7:46 pm Posted by Camilo (2 messages posted) Yes, I did read the above information, as a biochemist I'm required to read a great deal. I also followed the steps listed, but seeing as how they did not work I wanted to see if anyone else was facing the same dilemma. Seeing as how you were able to deal with your problem does not mean that it was the cure all for everybody else, nor does it grant you liberty to be such an elitist. On Friday, May 14, 2004 at 7:18 pm, Dan wrote: >Did you try reading the above information/posts???? Hello, if I had to read it, >you should too, don't just expect someone to hold your hand. Like I tell my students, >don't ask until you've read. . . > > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, May 16, 2004 at 5:39 pm Posted by Linda (1 messages posted) It is the sasser (pronounced sars) virus go to microsoft.com look at the lower right of the screen get the security update and the removal [Reply or follow-up to this message] re: lsass.exe Error Monday, May 17, 2004 at 8:51 am Posted by Dan (1 messages posted) Listen guys. It easy what the problem is! u guys have a sasser worm. Just get the worm scanner and everything will be O.K. Works for me!! LOL [Reply or follow-up to this message] lsass.exe Error, with a twist Friday, May 21, 2004 at 4:50 pm Posted by Frankenroc (2 messages posted) I'm having a similar problem. I know the common diagnosis is the Sasser worm. I'm not discounting that as a possibility, however there are a few variants to my situation: The comp rebooted earlier in the day with no problems upon reboot. However, it did do an error report if that makes a difference. Then I installed XP Pro (upgrade from XP Home) and on the first boot after the installation this started happening I'm reading articles about how to stop XP from rebooting by going into a command line and doing stuff there to expand the time it takes for XP to reboot, however, it reboots before I even have a chance to do this. This still happens in safe mode. Since I had just installed XP Pro, I figured something happened while I did. So I unplugged the Ethernet cable (and tried everything above again), and reinstalled XP Pro. The problem still persists. Is there something else I can do? [Reply or follow-up to this message] re: lsass.exe Error, with a twist Sunday, May 23, 2004 at 12:56 pm Posted by Psylencer (1 messages posted) When the shutdown message occurs, click the start menu, then try typing "shutdown -a", should keep your computer running long enough to fix the problem. Psy [Reply or follow-up to this message] re: lsass.exe Error, with a twist Sunday, May 23, 2004 at 2:26 pm Posted by Frankenroc (2 messages posted) I probably should have also mentioned that the start menu never appears (and pressing the Windows key doesn't bring it up either). However, since I have most of my data on a separate partition, I just reformatted the C partition and reinstalled XP, and now it works fine. Thanks for trying to help though. On Sunday, May 23, 2004 at 12:56 pm, Psylencer wrote: >When the shutdown message occurs, click the start menu, then try typing "shutdown >-a", should keep your computer running long enough to fix the problem. > >Psy [Reply or follow-up to this message] re: lsass.exe Error, Wednesday, May 26, 2004 at 8:30 pm Posted by Dieverse (1 messages posted) well Im glad Im not alone w/ this isssue,... Im having the shutdown problem similar to the W32.Blaster worm,.. since that worm Ive noticed ( or may be something else jsut noticed it then & now ) I can not access Symantec website,....or any other Anti virus home page? I can surf the web fine, w/ no problems,... I use to be able to go to Symantec no problem,... Anyone can help? cuz I dont know where id be w/ out their removal tools.. On Sunday, May 23, 2004 at 2:26 pm, Frankenroc wrote: >I probably should have also mentioned that the start menu never appears (and pressing >the Windows key doesn't bring it up either). However, since I have most of my data >on a separate partition, I just reformatted the C partition and reinstalled XP, and >now it works fine. Thanks for trying to help though. > > > [Reply or follow-up to this message] re: lsass.exe Error Wednesday, June 2, 2004 at 10:36 am Posted by Britt (2 messages posted) Yes, I downloaded the Yahoo! Beta Messenger, and so did my friend. Niether of us had any problems. But now I have a problem. I just recently got a message from Norton Anti-virus saying it detected a virus on my computer by the name of Bloodhound Packed. Does anybody know anything about it? Like, what does it do, how do you get rid of it, where does it come from, etc......Please help!! On Saturday, May 1, 2004 at 11:03 pm, patrick wrote: >me too.! guys, have you downloaded the yahoo messenger BETA? 'cause for me, it happened >right after i downloaded and installed that program. Help anyone. I'm also gettin' >that countdown timer then it shuts to black screen. > > [Reply or follow-up to this message] re: lsass.exe Error Wednesday, June 2, 2004 at 10:54 am Posted by Britt (2 messages posted) I actually had a friend whose computer was soing the whole 'shutdown after 1 minute' thing bout a year ago. she never found out what it was, but it could have been from the website "comet cursor" (which is actually a spywear threat, so delete it if you have it.....) or from (surprisingly) installing a new printer....probably not the second 1, but hey.....so, she got Norton, and it didn't work, but if you call the maker of the computer's help line, tell them the problem, they should be able to help. Good Luck! On Monday, May 10, 2004 at 1:33 pm, Camilo wrote: >I am having problems connecting to the internet on my home computer. When it connects, >it disconnects within a minute and attributes the problem to lsass. I'm hoping someone >here knows what is causing this problem. [Reply or follow-up to this message] re: lsass.exe Error Sunday, June 6, 2004 at 6:14 am Posted by Tim (1 messages posted) Don't know if anyone has this problem or not, but lsass error with shutdown timer and/or error message is indication of infection by sasser. Get the removal tool. I'm having to fix my third one brought in this week. Hope this helps. Tim [Reply or follow-up to this message] re: lsass.exe Error Sunday, June 6, 2004 at 11:18 am Posted by dave (1 messages posted) i have used two tools to remove the sasser virus and the tools are reporting that they do not locate a virus. any other thoughts please advise. i used symantec and mcafee stinger. On Sunday, June 6, 2004 at 6:14 am, Tim wrote: >Don't know if anyone has this problem or not, but lsass error with shutdown timer >and/or error message is indication of infection by sasser. Get the removal tool. > I'm having to fix my third one brought in this week. > >Hope this helps. > >Tim [Reply or follow-up to this message] re: lsass.exe Error Tuesday, June 8, 2004 at 8:42 am Posted by andreas agrapidis (1 messages posted) one month now when i'm connected to internet with windows xp an error at lsass.exe and the system is suting down [Reply or follow-up to this message] re: lsass.exe Error Thursday, June 10, 2004 at 9:22 pm Posted by Lis (1 messages posted) Hey Dan, Obviously not all of us are as computer literate as you seem to be. I read EVERY SINGLE post before coming across yours, I still don't know how to fix the problem. And my hair stood on end when I read your reply. Some of us need to have our hands held. It scares me that you have students. On Friday, May 14, 2004 at 7:18 pm, Dan wrote: >Did you try reading the above information/posts???? Hello, if I had to read it, >you should too, don't just expect someone to hold your hand. Like I tell my students, >don't ask until you've read. . . > > > [Reply or follow-up to this message] re: lsass.exe Error Thursday, June 10, 2004 at 9:24 pm Posted by Alejandro (1 messages posted) well... there is much more to fixing the lsass error but for starts you can stop thw shutting down procedure by going to start menu --> run and type "shutdown /a" this will give you more time to read the actual solutions =) good luck! On Tuesday, June 8, 2004 at 8:42 am, andreas agrapidis wrote: >one month now when i'm connected to internet with windows xp an error at lsass.exe >and the system is suting down [Reply or follow-up to this message] re: lsass.exe Error Monday, June 14, 2004 at 6:52 am Posted by Ryan (1 messages posted) Gentlemen, can we use the forum for helping resolve issues and not just flaming each other. You can't post to "Annoyances.org" and not expect some actual annoyances. That said, I have this same issue and it will not go away. I ended up reformating my entire HD and reloaded Windows XP. Once completed, I setup my dialup connection and did the first connection to the Internet via the "WindowsUpdate" icon on my start menu. About 2-3 minutes after going online for the first time, I got the same lsass.exe error that shuts down the PC. How can I be infected with a virus not 3 minutes after going online and not going to any site other than MS Update and not reading any email. It makes no sense. If you're just going to flame me, then don't bother. I realize I am an idiot for asking the question, even though this question has been asked already, so let me save you the trouble and call myself worthless. However, if you have something productive to add, I would be very insterested. Thank you for all your patience.... On Thursday, June 10, 2004 at 9:22 pm, Lis wrote: >Hey Dan, > >Obviously not all of us are as computer literate as you seem to be. >I read EVERY SINGLE post before coming across yours, I still don't know how to fix >the problem. And my hair stood on end when I read your reply. Some of us need to >have our hands held. >It scares me that you have students. > > > > [Reply or follow-up to this message] re: lsass.exe Error Friday, June 25, 2004 at 6:01 am Posted by Sean Masse (1 messages posted) I just put windows XP on my machine and only installed the drivers for my onboard LAN and I am already getting the LSASS.EXE Fault countdown It must be an issue with windows XP On Saturday, May 1, 2004 at 11:03 pm, patrick wrote: >me too.! guys, have you downloaded the yahoo messenger BETA? 'cause for me, it happened >right after i downloaded and installed that program. Help anyone. I'm also gettin' >that countdown timer then it shuts to black screen. > > [Reply or follow-up to this message] re: lsass.exe Error Friday, June 25, 2004 at 7:26 am Posted by Patrick M. Volpi (1 messages posted) Here at work, we encountered the EXACT same problem: We powered off a machine. Disconnected the existing HD. Installed a new HD, booted from the Win XP Pro CD. Reformatted (not quick) and installed XP Pro. We then installed Norton Antivirus 8.0 Corp. We connected via dialup to the internet via ATT to download the latest Virus updates and XP patches. Within a few minutes, we recieved the LSASS.exe error. Okay, sounds impossible right? Here is how we fixed it: 1. Disable System Recovery. 2. Download the latest virus patches and XP patches. 3. Download the latest W32.Sasser Removal Tool from symantec. 4. Reboot in safe mode and run the tool. 5. Reboot and run the tool again just to be sure. 6. Turn on system recovery. This worked. Another way is if you are using NAV, you can use another PC to download the Virus Definitions that are self-installing and place them on a CD. This works great if your machine keeps shutting down. On Monday, June 14, 2004 at 6:52 am, Ryan wrote: >Gentlemen, can we use the forum for helping resolve issues and not just flaming each >other. You can't post to "Annoyances.org" and not expect some actual annoyances. > >That said, I have this same issue and it will not go away. I ended up reformating >my entire HD and reloaded Windows XP. Once completed, I setup my dialup connection >and did the first connection to the Internet via the "WindowsUpdate" icon on my start >menu. About 2-3 minutes after going online for the first time, I got the same lsass.exe >error that shuts down the PC. How can I be infected with a virus not 3 minutes after >going online and not going to any site other than MS Update and not reading any email. > It makes no sense. > >If you're just going to flame me, then don't bother. I realize I am an idiot for >asking the question, even though this question has been asked already, so let me >save you the trouble and call myself worthless. However, if you have something productive >to add, I would be very insterested. > >Thank you for all your patience.... > > > > [Reply or follow-up to this message] re: lsass.exe Error Saturday, June 26, 2004 at 2:00 am Posted by jules (1 messages posted) hey guys this lsass.exe is really annoying, pls give me some help to fix this damn pc countdown On Saturday, May 1, 2004 at 11:03 pm, patrick wrote: >me too.! guys, have you downloaded the yahoo messenger BETA? 'cause for me, it happened >right after i downloaded and installed that program. Help anyone. I'm also gettin' >that countdown timer then it shuts to black screen. > > [Reply or follow-up to this message] re: lsass.exe Error Tuesday, June 29, 2004 at 12:30 pm Posted by Roman (1 messages posted) Problem Solved (lsass.exe issue) http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx Never fear Again Microsoft has saved the day On Saturday, June 26, 2004 at 2:00 am, jules wrote: >hey guys this lsass.exe is really annoying, pls give me some help to fix this damn >pc countdown > > [Reply or follow-up to this message] re: lsass.exe Error Monday, July 5, 2004 at 11:08 pm Posted by donnador (1 messages posted) >When the countdown starts, go to your start menu, go to run then type in shutdown -a this will stop it from shutting down the internet, then after that you are on your own, I have tried everything. On Saturday, May 1, 2004 at 11:03 pm, patrick wrote: >me too.! guys, have you downloaded the yahoo messenger BETA? 'cause for me, it happened >right after i downloaded and installed that program. Help anyone. I'm also gettin' >that countdown timer then it shuts to black screen. > [Reply or follow-up to this message] re: lsass.exe Error Wednesday, July 7, 2004 at 9:46 am Posted by Vready (2 messages posted) Try going into safe mode before you scan for the virus. (press f8 while system is booting and select safe mode). Sometimes the virus hides itself while the memory is running. Safe mode lets the scan software see all files that may be hidden while memory is running. I've repaired the sasserworm this way, but now the problem that I am seeing doesn't seem to be the sasserworm. On Sunday, May 2, 2004 at 7:16 am, obla4ko wrote: >So about this lsass.exe error. I've been trying to deal with it for about 48 hours >now (though i DID get some sleep). It all started off in the exact same way as the >orignator of this string (left comp on overnight, woke up to find it shutting down >due to some illegal lsass error etc.). Though i'm running xp professional. >This is what i've done so far: >1.System restore didnt help. (to several different points in time) >2.Found some info in microsoft website that its a MS issue--installed Service pack >1 update (no change) >3. Knowledge base on microsoft or some such similar also recommended an IE security >update--went and installed several of those -- no change. >4. Downloaded the newest Symantec virus definitions (current as of May 1st) -- scanned >drive, no change, no viruses found >5. Noticed that it all sounds like this worm that people have already mentioned--got >the wormfix file 'fxsasser.exe', ran it -- no worm found. > >Now i'm really kinda out of options--any ideas? Anyone? > > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, August 8, 2004 at 8:22 am Posted by Sean McDonald (1 messages posted) If anyone noticed, there seems to be many different circumstances surrounding the lsass errors. This is because lsass affects many different things in your computers. Without going into what lsass actually does, there are several causes of failure. 1) the worm-just download updates and fix (this is not the most common cause I have seen. 2) Your BIOS does not correctly support NTFS partitioning. If you converted to NTFS from FAT32 and your BIOS is old, you will get lsass errors. You can use FAT32, it isn't all that bad, or flash your BIOS (carefully.) 3) Your networking is confusing itself (to put it simply). Remove any unused networking devices and make sure all hardware, software and drivers are installed correctly. Lsass can not be universally fixed with on cure. Hope this helps. On Wednesday, July 7, 2004 at 9:46 am, Vready wrote: >Try going into safe mode before you scan for the virus. (press f8 while system is >booting and select safe mode). Sometimes the virus hides itself while the memory >is running. Safe mode lets the scan software see all files that may be hidden while >memory is running. I've repaired the sasserworm this way, but now the problem that >I am seeing doesn't seem to be the sasserworm. > > > > [Reply or follow-up to this message] re: lsass.exe Error Thursday, August 19, 2004 at 9:43 pm Posted by uttampramanik (1 messages posted) The system is shutting down .please save all work in progress and logg off. Any unsaved changes will be lost.this shutdown by NT Authoriy/system. Message The system process'c:\windows\systems32\lsass.exe' terminated unexpectedly with status code-1073741819.The system will shutdown and restart then it gives me till it shuts down. [Reply or follow-up to this message] re: lsass.exe Error Wednesday, August 25, 2004 at 11:14 pm Posted by MAXTEK28 (1 messages posted) Hi, well it sounds like the file got messed up, proibly was writing from a cache and if puter looses power the file gets mixed up. so download the new file if your running windows, i would make sure you shut down properly im maxtek28 on yahoo messenger, pm me anytime, and tenantsrights@sbcglobal.net is the other pc in other room, my house is all networked.. On Friday, December 27, 2002 at 11:58 pm, George wrote: >Today I recieved a lsass.exe application error on start up. I cant get past it. Anyone >got any suggestions other than reloading the OS. [Reply or follow-up to this message] re: lsass.exe Error Saturday, September 4, 2004 at 4:14 pm Posted by warlord (2 messages posted) i am also having a problem with the lsass.exe but with my problem it keeps me logged out. i can't log on to my computer. right before it shows the welcome screen the message "lsass.exe - Entry Point Not Found". then inside the box it says "The procedure entry point LsapLnitLsa could not be located in the dynamic link library LSASRV.dll someone PLZZZ HELP MEEE. i dont want to reboot my comp if i dont have to cuz i am going to lose lots of stuff if i do. anyways thanks. On Thursday, February 27, 2003 at 9:14 pm, Jason wrote: >Steve, > You are a genius and a savior... I was having a very similar error on an XP machine >where I was getting: > >Lsass.exe system error >This return status indicates that the value provided as the current password is not >correct. > >I hooked up the drive that was having the problem to another box and copied the old >config files and everything booted up fine. > >Thanks for the indirect help, >Jason [Reply or follow-up to this message] re: lsass.exe Error Friday, September 24, 2004 at 10:09 pm Posted by lucaida (2 messages posted) this is real great. I accidentally deleted lsass.exe file. and boy did it do hell. now after the system boots, and it appears that windows XP prof starts, it just becomes a black blank screen with nothing but my cursor. and so I tried to use the XP cd and use recovery console. but guess what? i do not know the administrator password. I don't even know when the hell did I set an administrator password. I tried almost everything.. including just pressing enter in case i set it as blank. but nothing. and the worst thing is that it only gives me 3 tries and then it restarts. and here we go again. people just don't understand what I am trying to say, do they? I CAN'T use system recovery because I CAN'T even get onto windows. and I CAN'T change or find out the administrator password for the VERY SAME reason. pardon my impatience but this is really giving me hell. please respond if you can help! It would be greatly appreciated. lucaida [Reply or follow-up to this message] re: lsass.exe Error Friday, October 22, 2004 at 10:17 am Posted by RDS (2 messages posted) Pull your HDD and put it another PC, with current anti-virus software installed, as the slave and run a scan on it. you have sasser. After it has cleaned it, place the HDD backi in the system and apply all MS critical updates and start the XP internet firewall. On Friday, September 24, 2004 at 10:09 pm, lucaida wrote: >this is real great. I accidentally deleted lsass.exe file. and boy did it do hell. >now after the system boots, and it appears that windows XP prof starts, it just becomes >a black blank screen with nothing but my cursor. >and so I tried to use the XP cd and use recovery console. but guess what? i do not >know the administrator password. I don't even know when the hell did I set an administrator >password. I tried almost everything.. including just pressing enter in case i set >it as blank. but nothing. and the worst thing is that it only gives me 3 tries and >then it restarts. and here we go again. > >people just don't understand what I am trying to say, do they? I CAN'T use system >recovery because I CAN'T even get onto windows. and I CAN'T change or find out the >administrator password for the VERY SAME reason. > >pardon my impatience but this is really giving me hell. >please respond if you can help! It would be greatly appreciated. > >lucaida [Reply or follow-up to this message] re: lsass.exe Error Friday, October 22, 2004 at 2:22 pm Posted by RDS (2 messages posted) Any PC will work for the scan, also, since you deleted the lsass.exe file, you will need to re-install "over the top" Boot to the XP CD and go through like a normal install. After hitting F8 to agree to the licencse, you will have the option to repair, select it. That will overwrite the exsisting install with out effecting currently installed programs and any saved data should be intact. On Saturday, September 4, 2004 at 4:14 pm, warlord wrote: >i am also having a problem with the lsass.exe but with my problem it keeps me logged >out. i can't log on to my computer. right before it shows the welcome screen the >message "lsass.exe - Entry Point Not Found". then inside the box it says "The procedure >entry point LsapLnitLsa could not be located in the dynamic link library LSASRV.dll > >someone PLZZZ HELP MEEE. i dont want to reboot my comp if i dont have to cuz i am >going to lose lots of stuff if i do. anyways thanks. > > > [Reply or follow-up to this message] re: lsass.exe Error Wednesday, October 27, 2004 at 11:49 am Posted by jadegrahn (1 messages posted) You need to get a hold of microsoft for a new boot disk or the over ride password On Friday, October 22, 2004 at 10:17 am, RDS wrote: >Pull your HDD and put it another PC, with current anti-virus software installed, >as the slave and run a scan on it. you have sasser. After it has cleaned it, place >the HDD backi in the system and apply all MS critical updates and start the XP internet >firewall. > > > [Reply or follow-up to this message] re: lsass.exe Error Thursday, November 4, 2004 at 3:08 pm Posted by mike (2 messages posted) At startup I get the following error message labelled lsass.exe - System error Security Accounts Manager Initialization failed because of the following error: The handle is invalid. Error Status: 0xc0000008. Please click OK to shutdown this system and reboot into Safe Mode, check event log for more detailed information. Can anyone help? Please! mike On Wednesday, October 27, 2004 at 11:49 am, jadegrahn wrote: >You need to get a hold of microsoft for a new boot disk or the over ride password > > > > [Reply or follow-up to this message] re: lsass.exe Error Wednesday, February 16, 2005 at 7:20 am Posted by jubel (1 messages posted) This is how i solve this error: copy the lsass.exe from a working pc with with xp OS then reboot ur infected pc using win Me/win 98 startup diskette,. In dos mode go to c:\windows\system32\ rename lsass.exe to lsass.bak then delete it replace it with the lsass.exe that u copy from a working system earlier remove diskette and reboot normaly, it should be okay now then apply the patch for sasser vulnerability. It worked for me hope it'll work for all of you..... cheers On Thursday, November 4, 2004 at 3:08 pm, mike wrote: >At startup I get the following error message labelled lsass.exe - System error Security >Accounts Manager Initialization failed because of the following error: The handle >is invalid. Error Status: 0xc0000008. Please click OK to shutdown this system and >reboot into Safe Mode, check event log for more detailed information. Can anyone >help? Please! mike > > > > [Reply or follow-up to this message] re: lsass.exe Error Wednesday, April 27, 2005 at 8:36 pm Posted by Roger (1 messages posted) I'm no computer genuis & don't know how to get rid of this non stop rebooting due to lsass.exe error. Can someone tell me how to startup my computer bypassing this error? What keys should I press to access the MS-Dos so I can delete or edit this lsass.exe. [Reply or follow-up to this message] re: lsass.exe Error Wednesday, May 4, 2005 at 8:24 am Posted by Robert Brenneman (1 messages posted) I have something like that as well. I boot and it gets to tthe opening screen, then "lass.exe - System Error An invalid parameter was passed to a service or function" then it automatically startw to reboot. I am not able to boot in Safe mode either. I have up-to-date NAV and Spyware. Does anyone have a suggestion for repair? On Wednesday, April 27, 2005 at 8:36 pm, Roger wrote: >I'm no computer genuis & don't know how to get rid of this non stop rebooting due >to lsass.exe error. > >Can someone tell me how to startup my computer bypassing this error? What keys should >I press to access the MS-Dos so I can delete or edit this lsass.exe. [Reply or follow-up to this message] re: lsass.exe Error Wednesday, May 25, 2005 at 12:50 pm Posted by Peter S. (1 messages posted) I had the same 0xcoooooo8 lsass.exe related error. i fixed it the following way. 1 - put the HD in another pc 2 - look in c:\windows\system32\config , and rename the file called "SAM" to "SAM_ORG" !! this file has NO extention 3 - look in c:\windows\repair , and copy the file called "sam" to c:\windows\system32\config and rename it to "SAM" (capitols!) 4 put the drive back in the origional pc 5 boot. (you will see an very old, probably the lastone before updating to servicepack1, desktop confuguration) 6 DONT DO ANYTHING like trying programs or browsing or anything 7 go to system restore start>programs>desktop accesoiries (might be called different i have a dutch version) > system utilities>system restore 8 restore your system to the nearest point in time that can be restored BEFORE the error. 9 let system restore do its work and your pc is back to normal. 10 delete the file called "SAM_ORG" in c:\windows\system32\config (system restore put the right file back for you which was in the UNACCESIBLE "system volume information" folder which contains the filles backed-up during the making of a restore point) 11 smile =) On Thursday, November 4, 2004 at 3:08 pm, mike wrote: >At startup I get the following error message labelled lsass.exe - System error Security >Accounts Manager Initialization failed because of the following error: The handle >is invalid. Error Status: 0xc0000008. Please click OK to shutdown this system and >reboot into Safe Mode, check event log for more detailed information. Can anyone >help? Please! mike > > > > [Reply or follow-up to this message] re: lsass.exe Error Sunday, July 31, 2005 at 6:00 pm Posted by Luvdog (1 messages posted) http://support.microsoft.com/default.aspx?scid=kb;en-us;308402 "The password is not valid" error message appears when you log on to Recovery Console in Windows XP the above link is the Microsoft solution. The start up disk creation will be six floppy. On Wednesday, May 25, 2005 at 12:50 pm, Peter S. wrote: >I had the same 0xcoooooo8 lsass.exe related error. > >i fixed it the following way. > >1 - put the HD in another pc > >2 - look in c:\windows\system32\config , and rename the file called "SAM" to "SAM_ORG" >!! this file has NO extention > >3 - look in c:\windows\repair , and copy the file called >"sam" to c:\windows\system32\config and rename it to "SAM" (capitols!) > >4 put the drive back in the origional pc > >5 boot. (you will see an very old, probably the lastone before updating to servicepack1, >desktop confuguration) > >6 DONT DO ANYTHING like trying programs or browsing or anything > >7 go to system restore start>programs>desktop accesoiries (might be called different >i have a dutch version) > system utilities>system restore > >8 restore your system to the nearest point in time that can be restored BEFORE the >error. > >9 let system restore do its work and your pc is back to normal. > >10 delete the file called "SAM_ORG" in http://support.microsoft.com/default.aspx?scid=kb;en-us;308402 "The password is not valid" error message appears when you log on to Recovery Console in Windows XP The above link will take you to the microsoft solution to this problem. the xp start up disk set up will take six floppy. c:\windows\system32\config (system restore >put the right file back for you which was in the UNACCESIBLE "system volume information" >folder which contains the filles backed-up during the making of a restore point) > >11 smile =) > [Reply or follow-up to this message] re: lsass.exe Error Sunday, January 1, 2006 at 5:12 pm Posted by Miguel (1 messages posted) This worked!!! what a relief!!! I'd just add that at the end I had to logon in safe mode for my password to work. Thanks alot, I hope that helps as much as I've been helped. Thanx and Happy New Year (2006) On Wednesday, May 25, 2005 at 12:50 pm, Peter S. wrote: >I had the same 0xcoooooo8 lsass.exe related error. > >i fixed it the following way. > >1 - put the HD in another pc > >2 - look in c:\windows\system32\config , and rename the file called "SAM" to "SAM_ORG" >!! this file has NO extention > >3 - look in c:\windows\repair , and copy the file called >"sam" to c:\windows\system32\config and rename it to "SAM" (capitols!) > >4 put the drive back in the origional pc > >5 boot. (you will see an very old, probably the lastone before updating to servicepack1, >desktop confuguration) > >6 DONT DO ANYTHING like trying programs or browsing or anything > >7 go to system restore start>programs>desktop accesoiries (might be called different >i have a dutch version) > system utilities>system restore > >8 restore your system to the nearest point in time that can be restored BEFORE the >error. > >9 let system restore do its work and your pc is back to normal. > >10 delete the file called "SAM_ORG" in c:\windows\system32\config (system restore >put the right file back for you which was in the UNACCESIBLE "system volume information" >folder which contains the filles backed-up during the making of a restore point) > >11 smile =) > [Reply or follow-up to this message] Third Party Tool for Windows Errors Thursday, February 2, 2006 at 3:02 pm Posted by SyscomCEO (1 messages posted) In the future, I certainly recommend a tool called Ultimate Boot CD 4 Windows. You can get more information at: http://www.ubcd4win.com This tool has helped me recover numerous systems that were unbootable. Check it Out! -Scott [Reply or follow-up to this message] re: Third Party Tool for Windows Errors Friday, April 21, 2006 at 10:21 pm Posted by XPis4XPain (1 messages posted) Well, like all good viruses and other gremlins in these confounded machines, I have picked up the dreaded lsass.exe - System Error. Unfortunately, I am in a loop that within seconds after my Windows XP logo screen departs, the lsass.exe - System Error message appears. Whether I click "OK" or "X", the computer drops back to the Toshiba boot and through the Windows XP screen and back again to the lsass.exe - System Error message. I have read each posting (now, that was some fun!) and I found no answers to my specific issue. I am unable to start-up so no getting into my inner computerdom. I am unable to access the internet, so no downloading a solution. If anyone out there has a specific fix, please consider me rather dim and please splain in simple, as-though-I-am-a-blonde terms. Thank you for your assistance. One somewhat XPissed XP user. [Reply or follow-up to this message] re: lsass.exe Error Sunday, July 23, 2006 at 4:50 am Posted by Lee (1 messages posted) Hi all, I've read all of the posts to do with this lsass.exe error and think the solutions are great, except for my problem....because the PC just reboots after reading the error message, again and again and again. I've tried booting in safe mode etc each time the PC will just reboot itself after the window pops up telling me I've got an Lsass.exe system error password parameter problem. I can't attach the hd to another PC as it's a SATA and I've only one SATA cable (which is connecting this h/d I'm using now to get online and up and running). The reason I need the other hd to boot is it's got all my info on and I need to back it up before sending it back to the manufacturer. Any suggestions for a PC that won't load up properly to try anything?! Or should I just get another SATA cable (from ebay or somewhere) and drag the info if that's poss? Ta in advance Lee -X- [Reply or follow-up to this message] re: Third Party Tool for Windows Errors Thursday, October 26, 2006 at 9:42 pm Posted by birrr (1 messages posted) i found if you connect an external hard drive during boot up (in my case via firewire) you can get around the lssas.exe error that appears after the log on. run a system wide virus check and system update, and that should solve the problem. On Friday, April 21, 2006 at 10:21 pm, XPis4XPain wrote: >Well, like all good viruses and other gremlins in these confounded machines, I have >picked up the dreaded lsass.exe - System Error. > > > Unfortunately, I am in a loop that within seconds after my Windows XP logo screen >departs, the lsass.exe - System Error message appears. > > > Whether I click "OK" or "X", the computer drops back to the Toshiba boot and >through the Windows XP screen and back again to the lsass.exe - System Error message. > > > I have read each posting (now, that was some fun!) and I found no answers to >my specific issue. I am unable to start-up so no getting into my inner computerdom. > > > > I am unable to access the internet, so no downloading a solution. > > > If anyone out there has a specific fix, please consider me rather dim and please >splain in simple, as-though-I-am-a-blonde terms. > > > Thank you for your assistance. > > > One somewhat XPissed XP user. > [Reply or follow-up to this message] re: lsass.exe Error Monday, January 22, 2007 at 8:51 am Posted by Juliane (153 messages posted) I am going to revive this dead thread, instead of starting a new one. Tried to boot computer (XP, SP2 or 3, I forget) and before desktop appeared, I got "lsass.exe Application Error - The instruction at ""0x7574ce634" referenced memory at 0x000d5004- The memory could not be "read." Click on "OK" to terminate the program. Click on "cancel" to debug. then another small window appears with "NT Authorization system shutdown - 1073741819." I can boot into safe mode, and I have NAV, it was fully functioning before this morning. I scanned in safe mode and no virus was found (Can I trust this?). Since I cannot connect to the internet in safe mode, how else can I try any updates, patches, etc.? I have a laptop and internet access from that - should I put a patch onto my USB disk and run it from there? Hubby was trying to copy some files from one giant HD onto another, which hung the applications last night, but once I got that operation stopped, I thought everything was fine. Son also grabbed some gifs off the internet, so I was afraid he'd also nabbed a worm... Please walk me through this as if I were a newbie. I'm not, but it's hard to do this in print, much easier in person. I just don't know where to start. I'm very grateful that I can get into Safe Mode! Where do I go to find my System Restore Settings to turn that off, also? TIA, Juliane [Reply or follow-up to this message] re: lsass.exe Error Sunday, February 18, 2007 at 9:24 am Posted by bart (1 messages posted) Steve, Just wanted to let you know that your post on Saturday, December 28, 2002 at 12:24 am saved my bacon. I was able to restore to the latest files in this directory and restart my computer. I now am trying to figure out how to avoid having this happen again in the future! Currently running a full spy ware sweep and will do a full virus scan after that. Bart On Saturday, December 28, 2002 at 10:19 am, George wrote: >Thanks will give it a try... > > [Reply or follow-up to this message] re: lsass.exe Error Friday, May 23, 2008 at 7:21 am Posted by tonym (1 messages posted) For anyone who stumbles here in a search for a fix, gotto tell you that Active@ Boot Creator is pretty good. On Sunday, February 18, 2007 at 9:24 am, bart wrote: >Steve, > >Just wanted to let you know that your post on Saturday, December 28, 2002 at 12:24 >am saved my bacon. I was able to restore to the latest files in this directory and >restart my computer. I now am trying to figure out how to avoid having this happen >again in the future! Currently running a full spy ware sweep and will do a full >virus scan after that. > >Bart > > > [Reply or follow-up to this message] Tip: Use one of the [Reply or follow-up to this message] links above to add a message to this thread Search this forum Start a new thread on a different subject Report abuse of the forum Return to the Windows XP Discussion Forum