Windows LSASS.EXE Problem

Posted on 2004-08-04
Medium Priority
Last Modified: 2010-04-13

I am running WIndows 2000 Professional Service PAck 4 and i'm having trouble with the LSASS.exe process. The computer is on my windows 2000 network. it is a basic client machine with no special features.

Before i describe it i have checked lots of sites that describe various types of problems that can arise with the LSASS process. I have tried lots of the fixes also.

Basically when the computer starts up it gets as far as the logon screen and a popup box appears that tells me the lsass.exe process has referenced memory that could not be read and will be shut down. if i click on ok i get a dialog box telling me that the system is being rebooted and i am given 60 seconds. this is all before i even try to login.

if i try to login in now i dont get to the username and password screen. it keeps returning to the 'press ctrl-alt-delt' screen.

If i ignore the initial popup box(referenced memory error) and try to login i get to the username/ password entry screen. however if it try to login as a network user i get error messages telling me the system couldn't locate that handle.

i am however able to login as the local administrator of the machine. the popup box stay on screen and if i click ok it shuts the machine down after the 60 second period.

i checked the event logs and theres no real information in there other than a note that it showed a popup.

i am running Trend Micro anti-virus with the firewall enabled and the virus definition files are bang up to date. they were up to date before this occurred. I ran a fulll system scan and it didnt find anyting.

i downloaded the sasser removal tool from symantec and it didnt find anything.

i am running service pack 4 which, as far as i am aware, patches the vulnerability.

i installed the hard drive as a slave on another machine and copied the LSASS.exe file across. but no joy!

has anyone got any ideas on how to get around this???????
Question by:Fatlog
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
LVL 28

Expert Comment

ID: 11714873
The system will shut down if LSASS has a terminal problem. It is telling you that it is experiencing a memory error - have you tried a different stick of RAM? The boot process will heavily load the RAM, so if an error is going to occur, this is the likely time.

Chris B

Author Comment

ID: 11715045
as in not enough memory or the current memory module is not working properly?

Author Comment

ID: 11715080
the machine has two memory sticks. i tried each one on its own and the same problem still occurred. could the problem be with both?
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

LVL 28

Expert Comment

ID: 11715369
<could the problem be with both?> Probably not - sorry, it was worth a try.

Chris B

Author Comment

ID: 11715457
any other ideas?

i tried installing the service  pack again but you guessed it, nada!

bloody annoying!

there must be a reason for it!

Accepted Solution

RevelationCS earned 400 total points
ID: 11716011
Have you done an online scan for virus infections?

Try the following:

Adaware - http://www.lavasoftusa.com/software/adaware/
Spybot S&D - http://www.safer-networking.org/en/download/index.html
Trend Antivirus Online Scanner - http://housecall.trendmicro.com

Make sure you have Adaware and Spybot updated before running the scans with them. Also, download HijakThis and post the log file here.

Author Comment

ID: 11717364
thanks revelationCS - worked a treat.

not sure which one of Adaware or Spybot cleaned it but its working now.

should my anti-virus software not have picked it up as a treat???

Expert Comment

ID: 11717510
glad I could help you out....

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In today's business world, data is more important than ever for informing marketing campaigns. Accessing and using data, however, may not come naturally to some creative marketing professionals. Here are four tips for adapting to wield data for insi…
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…

800 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question