Major Help Needed!

Discussion in 'Software' started by mbowens4, Aug 29, 2007.

  1. mbowens4

    mbowens4 Private E-2

    I am unsure where to post as I don't know what is causing my problems. My problems have been occuring for several weeks but finally self-destructed this morning. I was having all sorts of driver errors but they boiled down to computer would restart itself whenever with no warning. Normally on reboot would give a driver error message. I've randomly have run everything from antivirus, spyware, registry cleaner, and so on(ad-aware, hijackthis, norton, defrag 2, ccleaner,...). This time on reboot I am now getting a lsass.exe application error, system locks up on this error before getting to desktop. I can not get past this. I've tried safe mode etc.... I've had so many errors I don't know which is the correct error to trace. HELP!

    Can this be handled here? This is my work computer (small family business), which of course hosts my payroll that I need to get done! I have data backups of all major programs not recent complete system backup (not current on email and misc word documents). I can live if I lose those but would rather not.

    Running Windows XP Media Edition.
    Actual current error:
    LSASSE.EXE APPLICATION ERROR
    The application failed to initialize properly (oxC015000f). Click on OK to terminate the application.

    Click ok, get same window again, click ok, screen goes black, with mouse cursor active period.

    before this system would randomly restart itself, usually on restart would give the dreaded blue box saying driver error. I was also getting frequent applications errors (varied between explorer, internet explorer, outlook expresss). I've also gotten referenced memory could be read. ++++
    I have gotten so many different errors I don't know where to start

    Thank you for any assistance,
    Marcy
     
  2. mbowens4

    mbowens4 Private E-2

    Add-on
    There have been so many errors it's hard to remember the order of occurence. Another error I had this morning, I believe this was the last one before the current condition. system32 corrupt and unreadable
     
  3. hopperdave2000

    hopperdave2000 MajorGeek

    Check out this link and follow the steps. You'll need your XP install CD unless you have the Recovery Console already installed on your hard drive. If it is, you'd get a boot menu with Windows XP as the first startup choice, and the Recovery Console as the second startup choice. If you don't have this menu, the RC is not installed. Here's the link:
    http://icrontic.com/articles/repair_windows_xp (print the info if possible for reference)
    If that doesn't help, you may need to perform an 'in-place' safe repair installation of Windows; again, you'll need the installation CD. You boot to the CD, and basically reload Windows over the top of itself, which keeps all your programs, data, and documents intact... good luck!

    hd2k

    I have a sinking feeling that you don't have the Windows CD. Generally speaking, when someone is runnning XP Media Center Edition, it came preloaded and recovery/restore CD's were not included.... :(
     
  4. mbowens4

    mbowens4 Private E-2

    You are right, it was pre-loaded and I do not have a system disk. I had made a DVD system recovery using the windows program, will this work? I can get to the boot menu, are you talking about the Directory Services Restore Mode (window controllers only)? It's the 7th choice.
     
  5. mbowens4

    mbowens4 Private E-2

    You are right, it was pre-loaded and I do not have a system disk. I had made a DVD system recovery using the windows program, will this work? I can get to the boot menu, are you talking about the Directory Services Restore Mode (window controllers only)? It's the 7th choice.
     
  6. mbowens4

    mbowens4 Private E-2

    OK, now what? I do not have a system disk. So I can't use the repair at the link you suggested. I do have a system recovery disk I created.

    I tried the Directory Services Resource Mode but it fails before getting there. Everything I try stalls at the LSASS.EXE error.

    The only thing I have been able to do is F11 System Recovery, it seems to be working until it asks for disk# 2. There is only one disk. There is no other choice have to abort.
     
  7. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    That is not a ms system exe .....it is a backdoor trojan.

    You need to have a portable anti-virus program that you can run from cd or thumb drive when the system first boots ....as in boot to that program ....ClamWin is portable. Otherwise you need to remove the hard drive and slave it to another computer and run all the steps in the Read and Run First guide in the malware section.
     
  8. hopperdave2000

    hopperdave2000 MajorGeek

    I'm assuming you're talking about the "lsass.exe"... attached is a list of running processes from a PC running XP Home. It is running "lsass.exe" as is just about every other XP PC. True, the Sasser worm/virus also disguises itself as "lsass.exe", but it is also a legit process. Read this:
    http://www.liutilities.com/products/wintaskspro/processlibrary/lsass/
    And the zipped screenshot attached below from a healthy PC running "lsass.exe"...

    hd2k

    I'm not trying to start something here, I'm just pointing out that it is also a legit MS process; it stands for Local Security Authority System Service (I think).
     

    Attached Files:

  9. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Read his earlier post:
    Note the difference .....!!!
     
  10. hopperdave2000

    hopperdave2000 MajorGeek

    Doh! My bad! :eek:
     
  11. mbowens4

    mbowens4 Private E-2

    The good news I did find a system disk. But the bad news after choosing R it comes back saying something to the effect of system files damaged/unrecoverable (I'm at home now, so don't have the exact wording). Unfortunately I couldn't stay late tonight, so tomorrow night (will be out of town tomorrow) I will see if it will recover properly with the oe system disk. I'm not sure if it will because it didn't give me the choice like described at icrontic. The only thing it will let you do is recovery. I'm thinking it's different because it is Media Edition not Professional Edition?
    Thank you for all your assistance so far.
     
  12. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

  13. mbowens4

    mbowens4 Private E-2

    Found system disk. Was able to restore system. Ran all windows updates. Installed printer, service program and payroll program. Restored payroll data. System went blank and rebooted itself. I did not get the LSASS.EXE error but I'm figuring it's only a matter of time. Attempted to run clamwin portable but can't get it to download virus definitions (tried 2 different computers). Could this be a memory malfunction? What next?

    Also, it said all my data got d:\backup, but it will not let me access. How do I retrieve when everything else is fixed?
     
  14. mbowens4

    mbowens4 Private E-2

    Decided to try one more time win clamwin and this time it went through. Started scan, starts running then goes black, no input, and reboots. 3x. now what?
     
  15. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    See if you can download Everest.
    See if it is reporting problems with temps / ram / voltages.
    Also ...when you right click my computer / properties...what does it say about the amount of ram you have?

    Have you blown all the dust out of the case?

    Doing a repair install does not remove malware ....
     
  16. mbowens4

    mbowens4 Private E-2

    Malware problem?

    EDIT by chaslang: New thread merged to original

    Hi, Still trying to fix this system. This where I stand right now.

    Virus checks out okay. I attempted to run adware 2007 and it locks up about half way through. Attempted to run Spyware Doctor, rebooted itself about half way through. Clamwin report attached. I also ran spybot which ran in to major problems. On startup said it had been changed since install, advised to run virus and malware check immediately. This came up with all sorts of errors, could not get report. Attempted again in safe mode. Still had problems. So ran hijackthis, report attached.
     
    Last edited by a moderator: Sep 4, 2007
  17. evilfantasy

    evilfantasy Malware Fighter

    Re: Malware problem?

    TimW was trying to help you in the previous thread. He is very capable of good advice. We do not diagnose Malware issues in the Software Forum.
    Only MG Authorized Malware Fighters can advise on that issue. Which TimW is also authorized and very capable in.

    Malware READ AND RUN ME FIRST will be requested before a determination can be made.
    Then post the results in the Malware Forum.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds