Antispyware update bug crash machine / lsass.exe

[Guest]

Hi,
I updated my antispyware today, and when it ask reboot, it didin't come up
anymore.
It's gives an error of lsass.exe boot processing (before login
screen)(Prosessi pyysi objektin käyttöä, mutta käyttöoikeuksia ei ole
myönnetty), I try to translate that to english. "Process ask object use, but
access is not granted", and when I hit ok, it's reboot again. I try to use
safe mode, but didin't help, but i can get to the repair console, but I don't
know what to do there, maybe some antispyware uninst batch or some must be
run, but how?

 

[Guest]

I also disabled all services at recovery console, what uses the lsass.exe
(netlogon/samss/policy...) but still don't work. So please can anyone help me?

It's starts to black screen, where is mouse, and that error message, so
can't do nothing in windows on it. How I uninstall antispyware at recovery
console?

 

[Guest]

I don't have any answers but I did have a similar experience yesterday while
in XP. While logged in as an administrator, I gave the MSAS application
permission to update to 1.0.7 but did not reboot immediately. After
finishing some projects (and saving my work) I rebooted only to discover I
could not get any response to the OS selection screen (I have a multi-boot
system with XP SP2 and Window Server 2003, I'm a networking student.) I
tried rebooting to Safe Mode but could get no response to any of those
alternative options either. After several boot attempts, I fired up Recovery
Console (off of the CD) but then was called away from my desk for a time.
When I came back I decided to try rebooting one more time before implementing
more drastic measures. The crazy system worked perfectly! I'm up and
running just fine but have not yet figured out the problem. Ideas?

 

[Bill Sanderson]

About the only thought I have from your experience is that it isn't the same
as DaCool's--I think you had different issues.

When you say you had no response to the OS selection screen--can you give
more detail? Clearly you were able to choose between normal and safe mode?
But once a given mode was chosen, nothing more seemed to happen?

So you ran the recovery console, let it sit for a bit, and then tried
another normal start?

Recovery console is an alternative OS--just starting it has very minimal
interaction with the OS in place--so I don't see how that could have fixed
anything......
--

 

[Bill Sanderson]

DaCool--this has all the earmarks of a virus.

I think your solution is going to be a reinstall of XP over itself--but
you'd do well to get direct expert advice before attempting that. (If your
installation media allows for it, such a reinstall takes a while, but has
excellent end result--everything should be intact.)

I'd recommend calling Microsoft Product Support Services:

In the United States or Canada, call 1-866-pcsafety. Elsewhere in the
world, call your local Microsoft subsidiary, or call the number for paid
product support in your part of the world, and ask for the free help with
virus removal or security issues.

I believe your issue will be covered by this free help, but there is a small
chance that it won't be--they are unable to support the beta program
itself--it is explicitly unsupported--but if you simply describe your
symptoms, I believe they will feel that they merit the coverage.

I'd love to hear how this comes out.

--

 

[Guest]

Correct in that I could use the arrow keys to select/highlight a given mode;
at that point it was as if my keyboard would go dead. Additionally, I have
the standard 30 second count during bootup after which the default OS would
normally start to load if I left it alone. The count would go from 30 to
zero normally but then no other response. I'm confident that POST completed
successfully as verified by sound and a digital readout I have on my
motherboard. And obviously the Boot.ini file was accessed and read. I
didn't mean to imply that Recovery Console fixed anything; it just was part
of the sequence of events. I did then just do a normal startup which was
successful. Also, upgrading to 1.0.701 was the only change I made to the
system that day but I'm still not clear on how that could temporarily
interfere with the boot process. An interesting event.

 

[Bill Sanderson]

Thanks--interesting is the right word--especially at this distance--I know
what it must have been like sitting in front of it.

You didn't imply that the recovery console fixed anything--I was just
thinking out loud.

I've no idea what might have gone on there. I may post your messages on
another list to see if I can get an opinion--I don't know enough detail on
the boot process to have any useful thoughts.

--

 

[Guest]

I was using erd commander 2005, and copy the c:\windows\repair\ files to the
c:\windows\system32\config, but still didin't work.. except when i copied
security file from it, it's changes it's error message to somewhat password
error. And reboot before I click ok, and keeps endless loop. And changed
recovery console password to unknown, I quess those files was some hp oem
install files, so it's some password, what only hp services know. So i
reinstall it' because i didin't have that monitoring on harddrive changes on.
So i wasent able to copy those security, settings, default, system, sam from
c:\System Volume information\xxx\Snapshot.

And I was so mad at microsoft that they can't document better, so i almost
install debian on it, but then I come reality, and pick my old hp recovery
dvd, and re installed my xp home edition back..

I have never had virus on my computer, i always install updates as they
comeout, my computer is always free from adware/spyware/virus, and it's
running 24/7, exept when updated need reboot the machine. And i used it about
8-12h/day, and I do computers what I want, and anothers do what they know, so
I think we can count that 'might be virus' issue off, my quess is that it's
conflict some another program like symantec virus/firewall or it just mess
somecase you c:\windows\system32\security file and registry, I looked with
erd commanders event viewer, and there was some files that was in use another
program, and antispyware cannot use/replace them. But i didin't have more
time to resolve that, because I need my computer daily up and running. I
afraid to install microsoft antispyware again, but i quess I don't needed,
because it didin't realy never find anything on my computer, because i know
how use internet safely, without infecting my computer. But I recomend that
they who don't know, uses it.. because new reinstall don't mess up your
files(if you do it right), but some virus or some may do it.

Hope this article lights things little bit, if someone runs in same problem.

-dacool
Ps. Sorry my bad english

 

[Guest]

Btw, cannot use repair install, because it's win home xp with sp2, and the hp
recovery dvd/recovery partition is just home edition(maybe sp1 included), and
don't know what the oem recovery partition and automatic software install
likes, if i slipstream sp2 to the recoverypartition:\i386\

 

[Bill Sanderson]

Situations like this are why you need Microsoft PSS. They may refer you to
HP--that's within their rights--the OS support is supposed to come from the
OEM vendor, and then HP can tell you the bad news about how they've perhaps
left you up the creek without a paddle.

Sorry to hear that you had to reinstall, but I understand the time pressure
issues.
I don't know if there is a better way out of this situation or not, I'm
afraid--you may have done the only thing that is possible given the kind of
media that came with your system.

I've seen this symptom posted before and I can't tell whether it is the
result of spyware removal, an underlying virus issue, or as you are
theorizing--some software interaction.

Thanks for taking the time to describe the situation in detail and tell us
what happened--sorry it wasn't easier.

--