lsass.exe boot error (I'm in a hurry!)

WinXP Home SP2- upon booting to Windows, I get the splash screen with the scrolling blue bar, and then I get this error: "lsass.exe - When trying to update a password, this return status indicates that the value provided as the current password is not correct." And there's an OK button to click on. The message stays on screen for maybe 15-20 seconds before the PC reboots; clicking OK makes no difference; the same error happens in safe mode, normal mode, last known good configuration..... any ideas??? links??? suggestions???? THANX!!!!

hd2k

Time is short on this, so any help will greatly appreciated!!!

 

lsass.exe is necessary for startup but, the Sasser Worm is mentioned in many web search results including being mentioned by Microsoft and Trend Micro. MS has released security warnings and patches also so I would think you have been attacked by the Sasser Worm.

 

You can scan your system, but the virus version is usuall lsasss (xtra s) or will have capital L. This is what I have run into so far.

I have had luck going to my lab machine / or another machine w/ identical OS version and copying the lsass from that system, booting to recovery console, rename the damaged lsass.exe to lsass.bad, and copy in the good.

If this doesn't do it, we have had to format/reinstall.

 

If you can get to safe mode, try to remove your passwords under the admin account. Or get a freeware pwd remover that you can boot to.

 

Seems this problem was about since windows 98.
Have a look at microsoft links,hopperdave2000

http://search.microsoft.com/results...=Search&FORM=QBME1&l=1&mkt=en-GB&PageType=101

http://search.microsoft.com/results...=Search&FORM=QBME1&l=1&mkt=en-GB&PageType=101

 

Another to brouse.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;307545

 

Well, I looked at the links and didn't find anything too helpful The last link above requires a system restore 'snapshot' and there were no restore points on this PC; system restore must've been disabled. If you run the reg rebuild in the recovery console and there's no restore points, you end up losing all your shortcuts, file associations, etc. Not really a good thing; I did it once and wasn't too happy with the results. I also tried a bootable password utility (I think someone above may have suggested that also) and that didn't help either. Anyway, the laptop's owner was really pressed for time so I booted to a PE CD, copied some folders to his USB flash drive (you gotta love those things ) and sent him on his way. I'll get another crack at the laptop when there's more time. So, if anyone stumbles across some info, feel free to post it!!! Thanx anyway guys!!! Geek on....

hd2k

 

I don't know if it is this easy ?OR, IF THIS WILL WORK.
http://www.pumaman.net/?Knowledge_Base_Articles::lsass.exe_I/O_Error_While_Booting_Windows_XP

Another method to get into Windows is described at this link, and something I have never tried, by in stalling Windows on Crive, but in c:Windows(2).
This chap was describing how to get into it, if it was a virus, BUT, could it work if it is not, and enable you to fix it, without losing it all, and having to reinstall Windows ?- I only offer it for your perusal, as I have never done it - it sounds a bit like using a virtual operating system.
Scroll down to last paragraphs by Andy Hudson

http://ask-leo.com/comments_000194.php?page=32:duck

 

Could you use the recovery consol to copy the files from \winnt\repair to \winnt\system32\config
(where winnt is the directory of your initial disfunctioning windows install):-

That was suggested here by Jason - the last post on this link.
http://computing.net/windowsxp/wwwboard/forum/31394.html

 

baklogic- that last link has some promising looking info in it. When this guy brings his laptop back in, I'll scan it for the Sasser Worm, then I'll try the steps above.... THANX!!!

hd2k