• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

lsass.exe problems

HotWire

Senior member
Need help in getting into computer that was/is infected possibly with the Lsass.exe virus, I cannot access Windows XP Pro it starts loading then goes to a page showing a security error X000_ _ _ # and gives the option to restart. I can't access the repair menu cause I can't get by the admin password screen even when just hitting the [Enter] key it states wrong admin password. Any ideas on how I can access this computer without reformating? Would a duplicate install of windows help?

 
If you are trying to do a repair install, the first option for repair takes you to the repair console, you don't want that one, continue on like you are going to install windows, and then it will scan for the operating system, and give you the repair option.
 
hmm, well if you can't remember the admin password for the recovery console, don't know what else to try, other than sticking the drive in another PC as a slave to recover what you can. What makes you think you had the sasser worm?
 
it stated somewhere in there lsass.exe and my client seemed to start this process off after opening a email from someone she didn't know..and the computer stated acting funny right away according to her.
 
well the lsass.exe file is actualy a windows system file, it's supposed to be there. The sasser worm was a virus that infects that file. Unless the computer didn't get normal updates, it should have been protected from that worm.
 
I know ...they probably weren't up to date with their updates and worst of all they weren't running any virus protection software at all.
 
If it will boot to Safe Mode With Command Prompt at all, you could try this. But job #1 is to rescue the data, yeah 🙂

edit: since the system won't boot normally, you'd have to get the scanner files onto the drive from a second system 😱
 
use stinger from mcafee. its free and will remove it. also be sure to turn off the system restore option (in win xp) so it can clean that part too
 
Back
Top