I deleted lsass.exe in the dos mode!

K

Klaus Dakmann

hi friends,

i have a problem with the pc of a friend of mine. he has xp and had problems
with the sasser virus.
i have installed the ms patches and the virus seems to disappear, but then i
found in the task manager the process lsass. i think i read somewhere that
this is the virus or a part of it so i tried to delete it from the directory
\windows\system32 which was not possible out of xp. so it i did it from the
dos mode, this worked.
but after that xp didn´t boot again.
while booting the screen freezes always at the same point.

what can i do? is it possible to copy this data file (now i know that this
file was the Local
Security Authority Service) from another xp pc to the pc of my friend?

or what can i do?
do i need to install xp again? (would this overwrite the data?)

best regards,
klaus
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top