• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1327
  • Last Modified:

Windows LSASS.EXE Problem

Hi,

I am running WIndows 2000 Professional Service PAck 4 and i'm having trouble with the LSASS.exe process. The computer is on my windows 2000 network. it is a basic client machine with no special features.

Before i describe it i have checked lots of sites that describe various types of problems that can arise with the LSASS process. I have tried lots of the fixes also.

Basically when the computer starts up it gets as far as the logon screen and a popup box appears that tells me the lsass.exe process has referenced memory that could not be read and will be shut down. if i click on ok i get a dialog box telling me that the system is being rebooted and i am given 60 seconds. this is all before i even try to login.

if i try to login in now i dont get to the username and password screen. it keeps returning to the 'press ctrl-alt-delt' screen.

If i ignore the initial popup box(referenced memory error) and try to login i get to the username/ password entry screen. however if it try to login as a network user i get error messages telling me the system couldn't locate that handle.

i am however able to login as the local administrator of the machine. the popup box stay on screen and if i click ok it shuts the machine down after the 60 second period.

i checked the event logs and theres no real information in there other than a note that it showed a popup.

i am running Trend Micro anti-virus with the firewall enabled and the virus definition files are bang up to date. they were up to date before this occurred. I ran a fulll system scan and it didnt find anyting.

i downloaded the sasser removal tool from symantec and it didnt find anything.

i am running service pack 4 which, as far as i am aware, patches the vulnerability.

i installed the hard drive as a slave on another machine and copied the LSASS.exe file across. but no joy!

has anyone got any ideas on how to get around this???????
0
Fatlog
Asked:
Fatlog
  • 4
  • 2
  • 2
1 Solution
 
burrcmCommented:
The system will shut down if LSASS has a terminal problem. It is telling you that it is experiencing a memory error - have you tried a different stick of RAM? The boot process will heavily load the RAM, so if an error is going to occur, this is the likely time.

Chris B
0
 
FatlogAuthor Commented:
as in not enough memory or the current memory module is not working properly?
0
 
FatlogAuthor Commented:
the machine has two memory sticks. i tried each one on its own and the same problem still occurred. could the problem be with both?
0
Learn to develop an Android App

Want to increase your earning potential in 2018? Pad your resume with app building experience. Learn how with this hands-on course.

 
burrcmCommented:
<could the problem be with both?> Probably not - sorry, it was worth a try.

Chris B
0
 
FatlogAuthor Commented:
any other ideas?

i tried installing the service  pack again but you guessed it, nada!

bloody annoying!

there must be a reason for it!
0
 
RevelationCSCommented:
Have you done an online scan for virus infections?

Try the following:

Adaware - http://www.lavasoftusa.com/software/adaware/
Spybot S&D - http://www.safer-networking.org/en/download/index.html
Trend Antivirus Online Scanner - http://housecall.trendmicro.com

Make sure you have Adaware and Spybot updated before running the scans with them. Also, download HijakThis and post the log file here.
0
 
FatlogAuthor Commented:
thanks revelationCS - worked a treat.

not sure which one of Adaware or Spybot cleaned it but its working now.

should my anti-virus software not have picked it up as a treat???
0
 
RevelationCSCommented:
glad I could help you out....
0

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

  • 4
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now