Problem with lsass.exe

[[Mystic]]

Hi

Im using a Compaq machine, I have just restored this off the original discs.

Now, When the computer boots up it says error in lsass.exe and reboots. I have checked Microsoft and Compaq's websites and they have identified the problem and say you have to install SP1 for Windows XP.

Now how can I install SP1 if I cannot get into Windows? This is a customers machine and I can not find a way around this. I cannot get a hold of Compaq.

[scifiguy1]

http://www.answersthatwork.com/

Isass isass.exe does not exist See LSASS.

Lsass (1)
Lsass.exe

(Microsoft)
Windows NT4/2000/XP/2003 only. LSASS is the Local Security Authentication Server. It verifies the validity of user logons to your PC/Server (in technical jargon : it generates the process that is responsible for authenticating users for the Winlogon service).

Recommendation :
An integral part of the operating system, leave alone provided that its full path as shown in The Ultimate Troubleshooter is either C:\WinNT\System32\LSASS.exe (Windows 2000) or C:\Windows\System32\LSASS.exe (Windows XP/2003). If the path is anything else then you may have a virus (see below).

Lsass (2)
Lsass.exe

(???)
If the full path to this program as shown in The Ultimate Troubleshooter is not C:\WinNT\System32\LSASS.exe (Windows 2000) or C:\Windows\System32\LSASS.exe (Windows XP, 2003), then you have the W32.Nimos.Worm virus or some other virus.

Recommendation :
Make sure you have up‑to‑date reputable antivirus software and then reboot your PC into Safe Mode and run a full virus scan.

this is copied off of the website "answersthatwork.com"
hope it helps

Dick

[=uNiTy=]

http://www.spywareinfo.com/~merijn/files/HijackThis.exe

scan and then post the results of your scan here.
Dont delete anything yet!!! Wait for others to analyze...

[glc]

Kinda hard to run HijackThis if you can't get into Windows, folks.

I'd wipe it and do another restore - and have SP1 ready to go. You can download the full network install on another machine and burn it to CD. Do *NOT* connect this machine to the Internet till you have installed SP1 and enabled the XP firewall.

http://download.microsoft.com/downlo...p1a_en_x86.exe

[=uNiTy=]

Kinda hard to run HijackThis if you can't get into Windows, folks.

mmhhmmm... good point glc.

[[Mystic]]

Hehe,

Im no n00b (no offence) Its not a virus, I know Lsass controls the security. I just cant get around it to get into Windows. Is there a way to install sp1 without being in windows?

[glc]

Nope.

[glc]

Since you started this thread, it's become evident that the Sasser worm will crash lsass. With this in mind, you may want to revisit the option of wiping and starting from scratch again, and take the required precautions to keep stuff out till you install the SP and get the critical updates.

[doctorgonzo]

I had an issue with lssas.exe (not worm or virus related), and unfortunately the only solution was to do a fresh install.

[Redfallon]

check this link from DuNga's thread "virus on the loose" Worth checking into! Could be that new virus.