lsass.exe system error object name not found

[jaycee]

I am running xp pro with a wifi firewall and an antivirus which is fully up
to date.
Boot hangs with the above error message before the welcome page loads. If I
click ok nothing happens. It is the same for all safe mode options, but i can
load with command prompt and I get the administrator login screen. having
logged in as administrator can I load/run windows from here. I had just
downloaded sp3, any chance this could be the problem. Can I remove sp3 from
command prompt.

 

[Don Phillipson]

I am running xp pro with a wifi firewall and an antivirus which is fully up
to date.
Boot hangs with the above error message before the welcome page loads. If I
click ok nothing happens. It is the same for all safe mode options, but i can
load with command prompt and I get the administrator login screen. having
logged in as administrator can I load/run windows from here. I had just
downloaded sp3, any chance this could be the problem.

Google indicates several web sites identifying ISASS as malware.
Your error message is typical of those we get after malware has been
removed but a file call to the malware has been left behind -- so when
the file is called we get the error message NOT FOUND. So long as
WinXP behaves OK (and your AV reports no malware) you need do
nothing. To suppress the error message you can search INI files and
the Registry (Hive) for ISASS and remove any file call or key for it.

 

[PA Bear [MS MVP]]

Google indicates several web sites identifying ISASS as malware.
Your error message is typical of those we get after malware has been
removed but a file call to the malware has been left behind -- so when
the file is called we get the error message NOT FOUND. So long as
WinXP behaves OK (and your AV reports no malware) you need do
nothing. To suppress the error message you can search INI files and
the Registry (Hive) for ISASS and remove any file call or key for it.

What about C:\WINDOWS\SYSTEM32\LSASS.EXE? <wink>

 

[jaycee]

As per my original post I am not able to boot into windows, the load hangs at
the point I assume that it is looking for client login. As I am the only user
I not not usually see this as I have not set a password. I have done a litlle
research and it seems that lsass.exe is the function around which this login
occurs and it would seem that something is missing. Everything has been
working fine, no unusual activity on AV, I widows update downloaded sp3,
rebooted as requested, and now I am no longer able to load.

 

[jaycee]

not sure what you are trying to say. I believe my problem revolves around
missing component, either not loaded or removed somehow by SP3. Problem only
arose when rebooting afyter windows update. Is this something I can fix
myself or do I need to see a computer specialist.

 

[PA Bear [MS MVP]]

I was replying to Don, not you.

not sure what you are trying to say. I believe my problem revolves around
missing component, either not loaded or removed somehow by SP3. Problem
only
arose when rebooting afyter windows update. Is this something I can fix
myself or do I need to see a computer specialist.

 

[PA Bear [MS MVP]]

You can uninstall WinXP SP3 via Add/Remove Programs after logging-in as the
Administrator.

However, there is a very good chance that you are seeing the effects of a
hijackware infection! If so, you should NOT attempt to install SP3 again
until an expert's given it a clean bill of health OR you have formatted and
done a clean install.

NB: A Repair Install will NOT fix this!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup, http://aumha.net/viewforum.php?f=30
or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

 

[jaycee]

How can I do this if windows will not load?

You can uninstall WinXP SP3 via Add/Remove Programs after logging-in as the
Administrator.

However, there is a very good chance that you are seeing the effects of a
hijackware infection! If so, you should NOT attempt to install SP3 again
until an expert's given it a clean bill of health OR you have formatted and
done a clean install.

NB: A Repair Install will NOT fix this!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup, http://aumha.net/viewforum.php?f=30
or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002

I am running xp pro with a wifi firewall and an antivirus which is fully
up
to date.
Boot hangs with the above error message before the welcome page loads. If
I
click ok nothing happens. It is the same for all safe mode options, but i
can load with command prompt and I get the administrator login screen.
having logged in as administrator can I load/run windows from here. I had
just downloaded sp3, any chance this could be the problem. Can I remove
sp3
from command prompt.

 

[HeyBub]

not sure what you are trying to say. I believe my problem revolves
around missing component, either not loaded or removed somehow by
SP3. Problem only arose when rebooting afyter windows update. Is this
something I can fix myself or do I need to see a computer specialist.

You symptom has nothing to do with SP3 and everything to do with the removal
of a virus.

There is a HUGE difference between LSASS and ISASS (though they both look
the same when in lower-case).

Look 'em up.

 

[PA Bear [MS MVP]]

You said you were able to log-in as the Admin and load the OS, yes?

How can I do this if windows will not load?

You can uninstall WinXP SP3 via Add/Remove Programs after logging-in as
the
Administrator.

However, there is a very good chance that you are seeing the effects of a
hijackware infection! If so, you should NOT attempt to install SP3 again
until an expert's given it a clean bill of health OR you have formatted
and
done a clean install.

NB: A Repair Install will NOT fix this!

NB: If you had no anti-virus application installed or the subscription
had
expired *when the machine first got infected* and/or your subscription
has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection'
scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002

I am running xp pro with a wifi firewall and an antivirus which is fully
up
to date.
Boot hangs with the above error message before the welcome page loads.
If
I
click ok nothing happens. It is the same for all safe mode options, but
i
can load with command prompt and I get the administrator login screen.
having logged in as administrator can I load/run windows from here. I
had
just downloaded sp3, any chance this could be the problem. Can I remove
sp3
from command prompt.

 

[PA Bear [MS MVP]]

There is a HUGE difference between LSASS and ISASS (though they both look
the same when in lower-case).

Does isass.exe look the same lsass.exe to you? I see a dot over the first
character in the first one.

 

[jaycee]

no. I can load in safe mode to command prompt only and log in as
administator. In all other modes the load hangs before it gets to the welcome
page.

 

[Mark Adams]

no. I can load in safe mode to command prompt only and log in as
administator. In all other modes the load hangs before it gets to the welcome
page.

Jaycee, see if the following KB article is any help.
http://support.microsoft.com/kb/883268

Scroll down to "Resolution" and follow the instructions, keep your fingers
crossed that you are better at this stuff than I am.