lsass.exe system error

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I am obviously not the first one hit with this virus...
I cannot boot-up windows XP home edition (I get the lsass.exe system error),
which means that I cannot apply the microsoft support solution (start -> run
etc).
I have tried to reboot hitting the F8 key then "last good configuration",
same resul
tI have tried to reboot hitting the F8 key then "safe mode with command
option", same result...
I have tried working with the Operating system cd (repair/intall or
something like that) but it didn't work either...
I've read something about rebooting with Bart's PE... but haven't seen any
reply saying it worked
I'm baseically terrified to do something wrong (too many options).
Has anyone found a solution? Could someone guide me through this?
Thank you
 
|>I am obviously not the first one hit with this virus...
|>I cannot boot-up windows XP home edition (I get the lsass.exe system error),
|>which means that I cannot apply the microsoft support solution (start -> run
|>etc).
|>I have tried to reboot hitting the F8 key then "last good configuration",
|>same resul
|>tI have tried to reboot hitting the F8 key then "safe mode with command
|>option", same result...
|>I have tried working with the Operating system cd (repair/intall or
|>something like that) but it didn't work either...
|>I've read something about rebooting with Bart's PE... but haven't seen any
|>reply saying it worked
|>I'm baseically terrified to do something wrong (too many options).
|>Has anyone found a solution? Could someone guide me through this?
|>Thank you

can't guide you but if you need access to your OS Bart's will allow
that or a livecd http://www.knoppix.org/

Then do what you need to do - replace/delete files - or grab what you
want while you can.
 
VCh said:
I am obviously not the first one hit with this virus...
I cannot boot-up windows XP home edition (I get the lsass.exe system error),
which means that I cannot apply the microsoft support solution (start -> run
etc).
I have tried to reboot hitting the F8 key then "last good configuration",
same resul
tI have tried to reboot hitting the F8 key then "safe mode with command
option", same result...
I have tried working with the Operating system cd (repair/intall or
something like that) but it didn't work either...
I've read something about rebooting with Bart's PE... but haven't seen any
reply saying it worked
I'm baseically terrified to do something wrong (too many options).
Has anyone found a solution? Could someone guide me through this?
Thank you
Click to expand...

Hi Clueless,
Adding to Penny and Curt, If you could attach your HDD to another Computer
with up to date AV defenitions and TRy to get rid of this virus and rescue
your data and OS, try it by setting it as Slave and from there on the other
computer it will detected and you can scan and delete or even Copy and Move
your Data to a removable Storage.
There is no shame to admit if you can't do the above, then take it to your
local Tech shop and they will do it for you.
HTH
Regards
nass
 
VCh said:
I am obviously not the first one hit with this virus...
I cannot boot-up windows XP home edition (I get the lsass.exe system
error), which means that I cannot apply the microsoft support
solution (start -> run etc).
I have tried to reboot hitting the F8 key then "last good
configuration", same resul
tI have tried to reboot hitting the F8 key then "safe mode with
command option", same result...
I have tried working with the Operating system cd (repair/intall or
something like that) but it didn't work either...
I've read something about rebooting with Bart's PE... but haven't
seen any reply saying it worked
I'm baseically terrified to do something wrong (too many options).
Has anyone found a solution? Could someone guide me through this?
Thank you
Click to expand...

Dear Clueless,

You might want to try asking this question at alt.comp.virus.

Consider yourself crossposted.

--
Rhonda Lea Kirk

If you ever need some proof that time can heal your wounds,
just step inside my heart and walk around these rooms;
where the shadows used to be.... Mary Chapin Carpenter
 
From: "Rhonda Lea Kirk" <[email protected]>

|
| Dear Clueless,
|
| You might want to try asking this question at alt.comp.virus.
|
| Consider yourself crossposted.
|

That's alright Rhonda. There are plenty of LSASS errors that are NOT associated with the
exploit of a buffer ovverflow problem in the LSASS module.

This doesn't sound like it is a case of such an exploitation.
 
That's alright Rhonda. There are plenty of LSASS errors that are NOT
associated with the exploit of a buffer ovverflow problem in the
LSASS module.

This doesn't sound like it is a case of such an exploitation.
Click to expand...

Well, then, that's one less problem he has to worry about, because he
seems to think he has a virus.

I've set the follow-ups back to mpwg only. Thanks, Dave.

rl
--
Rhonda Lea Kirk

If you ever need some proof that time can heal your wounds,
just step inside my heart and walk around these rooms;
where the shadows used to be.... Mary Chapin Carpenter
 
|
| Well, then, that's one less problem he has to worry about, because he
| seems to think he has a virus.
|
| I've set the follow-ups back to mpwg only. Thanks, Dave.
|
| rl

The following NT Shutdown in 60 sec. message is indicative of an exploitation of the LSASS
buffer overflow vulnerability...

NT AUTHORITY\SYSTEM
'c:\windows\system32\lsass.exe' terminated unexpectedly with status code -1073741819

or

NT AUTHORITY\SYSTEM
'c:\winnt\system32\lsass.exe' terminated unexpectedly with status code -1073741819
 
Back
Top