Yet another lsass.exe problem

[heavenmonument]

Hi guys,
Recently we upgraded to ADSL2+ broadband internet and installed a modem to
match (a NetComm model).

Six hours later, all sound ceased. Our computer would just not play sound.

Two days later, we cannot use the computer due to an error with lsass.exe in
logon phase.

Safe Mode works perfectly, but we can't go 40 seconds in normal mode without
this lsass.exe problem occuring. As such, without manual intervention our
computer will just repeatedly restart, encounter the error, restart, ad
nauseum.

I am wondering what *basic* things I can do to fix this. I would prefer not
to work with a command prompt, and I wouldn't touch the registry unless it
was my last resort. I am willing to use System Restore and Last Known Good
Config if need be.

My computer is running an AMD processor, and I *think* it's 64-bit, although
I am not totally sure. Is there a way to check that my processor and my
version of WinXP are both 64-bit?
If so, there was a support article that is perfect for me on this site.

Thanks in advance,
~HM

 

[William R. Walsh]

Hi!

Hi guys,
Recently we upgraded to ADSL2+ broadband internet and installed a
modem to match (a NetComm model).

Six hours later, all sound ceased. Our computer would just not play
sound.

Two days later, we cannot use the computer due to an error with
lsass.exe in logon phase.

After setting up your connection, did you make sure the Windows Firewall (or
the firewall software/hardware of your choosing) was working? Was said
firewall configured appropriately (no unnecessary ports open)?

What happens if you remove the modem or disable the connection?

I think you've been a victim of some kind of remote compromise. If that's
the case, you should just save yourself a whole lot of time, grab your
backups (you do have them, right?) and start over.

Safe Mode works perfectly

Networking is disabled in Safe Mode, and any malicious programs may not have
had the chance to get their hooks into the system.

I am willing to use System Restore and Last Known Good
Config if need be.

There is no harm in trying either, but I doubt it will help that much
either. If the system has somehow been remotely compromised, you can't ever
be sure that you got everything that might have been done.

My computer is running an AMD processor, and I *think* it's 64-bit,
although I am not totally sure. Is there a way to check that my processor
and my version of WinXP are both 64-bit?

A tool such as CPU-Z can tell you what your processor is capable of. GRC's
SecurAble can also tell you at a glance:

http://www.cpuid.com/cpuz.php
http://www.grc.com/securable.htm

Right clicking the My Computer icon (either on the desktop or Start Menu)
and choosing Properties will tell you what version of Windows you are
running.

William