How can I fix the error lsasse.exe - unable to locate component

You have been infected.... lsasse.exe is a known attack vector, I'm afraid.

The discussion here:
http://forums.techguy.org/windows-nt-2000-xp/422893-lsasse-exe-system-error.html

is a good overview.  Basically, if you cannot even boot into SAFE mode, then you will need to do a system restore, or possibly even reinstall windows.  See MS article at the link below.  The key points are also below.

http://support.microsoft.com/default.aspx?scid=kb;en-us;304449&sd=tech

To start System Restore using the Command prompt, follow these steps:
 
   1. Restart your computer, and then press and hold F8 during the initial startup to start your computer in safe mode with a Command prompt.
   2. Use the arrow keys to select the Safe mode with a Command prompt option.
   3. If you are prompted to select an operating system, use the arrow keys to select the appropriate operating system for your computer, and then press ENTER.
   4. Log on as an administrator or with an account that has administrator credentials.
   5. At the command prompt, type %systemroot%\system32\restore\rstrui.exe, and then press ENTER.
   6. Follow the instructions that appear on the screen to restore your computer to a functional state.

                                              

1:
2:
3:
4:
5:
6:
7:
8:

Thanks for taking my question.  The exact error is :

lsass.exe - unable to locate component
This application has failed to sart because DNSAPI.dll was not found.  Re-installing the application may fix this problem.

I have been working with another expert all day and when he had me run a worm scan on my computer, it came back saying it didnt exist on my computer, so does this mean I don't have a virus?  

I am getting so frustrated with this, I can't even describe it!  I am missing all the disks for the computer, I cannot boot into Windows, cannot boot in Safe mode, or any other mode for that matter!  The other expert helping me had me burn a cd for the erd commander and that has gotten me into Windows with very minimal access.  I tried restoring the computer from there but get another run time error!

I hoep you can help!  

daisy2cute,

Different Anti virus software detects certain things.
One product may detect a certain infection, another may miss it.

Both Norton Anti Virus and Kaspersky Anti Virus will detect LSASS.EXE

JeffCoachman

I would be happy to run an anti-virus program if I could actually get into Windows.  I have tried getting into safemode with command prompt and i get the same error.  

Now, I must have misread my error and the error I am getting does NOT have an "e" on the end.  It is lsass.exe!  

Hope that helps!

daisy2cute,

Then it is possible that your computer is already too far gone.
:-(

You will have to buy the Anti virus software from a store and run it from the CD.

Look for an option to scan the Computer right away without installing the software to the computer.

JeffCoachman

Okay - lsass.exe is an entirely different thing, and is a standard part of windows.  One moment.....

see this post and related links.....

http://www.annoyances.org/exec/forum/winxp/1104850228

From what I am reading from that link, I need the XP cd, and I don't have one!

MS has made a free trial version of DaRT (ERD Commander renamed) available for download. With this disk, you should be able to recover your system. An XP CD is needed to create the ERD Commander disk.

http://www.microsoft.com/downloads/details.aspx?familyid=5D600369-0554-4595-8AB4-C34B2860E087&displaylang=en

Quick Start Guide
http://technet.microsoft.com/en-us/library/bb608290.aspx

ERROR --- "An XP CD is needed" -- should be An XP CD is NOT needed

try downloading the actual .dll
dnsapi.dll
http://www.dll-files.com/dllindex/dll-files.shtml?dnsapi

I am not sure if it is because of all these different things I am doing, or what, but I think I have just gone about 2 steps backwards now!  Here is where I am now!

My ERD Commander isn't working the way it was before.  I tried one last time to restore my computer and now I can only get into My desktop by OS offline (whatever that means) but I know I can't do hardly anything in there!  

Also, when I try to boot up my computer w/o the ERD Commander cd in, I can't even get my old error message, it just keeps rebooting and bringing me back to the black screen where I can choose what mode I want.  No matter which one I choose, it does the same thing again!

HELP!!!!!

I had intended for you to use Explorer in ERD Comander to copy the missing file. If you did a system restore from within ERD, try to use its restore rollback function to undo the restore. At this point, your only option may be a repair install of XP which requires an XP disk with the same version (e.g. OEM Home) and the same or later SP as that installed.

I didn't actually do the system restore, after it looked like it moved some files, I got a run time error and it didnt complete the restore.  I am checking with my family members to see if anybody has an xp cd.

Now that it won't let me into Windows like it did before, it won't let me check the system information to see the specifics on the windows xp, is there another way to check this?

safemode offers access into a diagnostic version of windows tap F8 continously at the post screen, also offers to fix this from the advanced configuration choose last known good configuration that worked

I don't understand what you did with ERD Commander and what you mean by it won't let you back in. Can you explain?

Ok, sorry I didn't respont to anybody this afternoon but we were gone.  

I got a Windows XP cd today from a family member and when I insert it, it says press any key to boot from this cd.  When I do that, nothing happens.  If I let it go, it brings me to a black screen that says We apologize for any inconvenience, but Windows didnt start successfully...and gives me all the different mode options.  No matter which one I choose, safe mode or last known configuration, etc, it tries to load to Windows and then gets a blue screen with white wording that briefly says A problem has been detected...and I can't read the rest fast enough and then it reboots!   And all of this just continues in a circle over and over!

I don't know what happened to my ERD Commander!  When I was in my limited Windows access with the ERD, I tried to restore the computer.  I got a pop-up box that said something about some files will return back to...and I don't remember the rest.  I just clicked OK and continued on.  Eversince I did that, when I try to get in with the ERD, my only option for getting in is None-do not attach to a Windows Installation.  The other option is Windows Unsupported OS version (Microsoft Windows NT) but this is grayed out and not a selectable option.  When I click "None" I get a pop-up box that says Registry information will not be loaded...and then I can hardly do anything once I am in!

I am so sorry for causing such a hassle, but I do greatly appreciate any information I can get!  I am desperate to get this to work!