lsass.exe terminated unexpectedly with status code 128

[G.r.e.g.©]

Windows 2000 Advanced Server SP4.
It had all the post-SP4 patches installed, including MS04-011.
This server is on a small home LAN.

Started getting the following error:

"The system process
'C:\WINNT\system32\lsass.exe' terminated unexpectedly with
status code 128. The system will now shut down and
restart"

Nothing has been changed or added on the server.
The machine is not infected with Sasser or any of its variants.
This occurs in Normal boot or in Safe Mode.

Reapplied the updates and SP4. Also ran a repair of W2K from CD, but this
still happens.

Not sure how to proceed other than a complete reload.
Any suggestions?

Thanks in advance.

Greg

 

[Douglas Kentner]

do you have AV software installed, off the bat sounds a lot like the blaster
virus from a while back which terminated required RPC functions.

 

[G.r.e.g.©]

Yes it has Symantec Antivirus 9.0. The definitions are only current up to
8/25/05 but that should be sufficient to catch the blaster and sasser
variants.
I'll run the sasser and blaster removal tools from Symantec on it to verify.

Also, I ruled out any viruses on the 5 other machines on my network. The W2K
server is disconnected from the network but still has this error.

Thanks

-- ~Greg~

 

[Guest]

Hi,
I've this problem too, same as you have.
I want to try another antivirus... If I find any answer, I'll tell U.

Good luck,
S.Kazemi

--------