Recurring "LSA Shell (Export Version)" error on Startup

[diertac]

Hi - I'm hoping someone can help me with this issue, as everything I am
finding with online searches is from 2004.

I am running Windows XP Professional, Service Pack 2 on an IBM Z61t.

Recently, I have been experiencing multiple errors at startup.

First, I have issues logging in upon startup. I hit ctrl-alt-delete and
instead of taking me to my user ID and password login window, it reverts back
to the ctrl-alt-delete window. Frequently I have to reboot before it allows
me to login.

Upon login, I receive these errors:

===================
LSA Shell (Export Version) encountered a problem and needed to close.
===================

Along with the date and time, and then it instructs me to click for more
information. Doing so, I receive this window:

===================
LSA Shell (Export Version) - Title Bar
Error signature
szAppName: lsass.exe szAppVer: 5.1.2600.2180 szModName: lsasrv.dll
szModVer: 5.1.2600.2976 offset: 00014f94
===================

Trying to view the technical information, I'm instructed where to find the
lsass.exe.mdmp file and the appcompat.txt files - but an hour later when I
had the opportunity to search for them, the specific directory under Temp
that had been build to hold them was no longer present.

This is a company computer, so I can't change a lot on my own. I am running
Symantec AntiVirus, and did a virus scan but found nothing. I also checked
for the Sasser worm, even though it's from 2004, but it wasn't present.

I tried engaging our support team on this, but they were stumped. And when I
got my computer back they had messed up several other items. Plus I can't
afford to lose my computer for 2 days, which I'd have to do to turn it over
to them.

Any suggestions or ideas? I'll provide whatever other information I can.

Thanks!

 

[Mark L. Ferguson]

If you are getting into the system at all, you can try HiJackThis, a utility
to find out if you have an invader. There are web sites that will help you
know if this is a case of malware, or if you simply need to repair your
system.
This site lists a few good sites that will help you.
AumHa Forums HijackThis log site: http://aumha.net/viewtopic.php?t=4075
--
Was this helpful? Then click the Ratings button. Voting helps the web
interface.
http://www.microsoft.com/wn3/locales/help/help_en-us.htm#RateAPostAsAnswer
Mark L. Ferguson
..

 

[AJR]

Since LSA (Local Security Authority) is involed I would thing the suuport
personnel would have evaluated security settings.

Also a key "step" in trouleshooting would be diabling security/anti-virus
utilites. There are many LSA issues addresed via Microsoft Help and
Support.