Submit an article about your scariest tech experience—and the solution—and you’ll be automatically entered to win one of 4 fantastic tech gadgets.
Solved
lsass.exe exits with error code 120
Posted on 2004-08-22
Hi,
I have Win 2000 OS.
Recently I have started getting a irritating problem of my PC been rebooted on its own. The error message says "c:\winnt\system32\lsass.e
The m/c boots in 60 secs..
Norton sayz no viruses found.
Watz rong in my PC.
Please gimme an exact answer as in wat shud be done.
Thanks in advance
Prasad
I have Win 2000 OS.
Recently I have started getting a irritating problem of my PC been rebooted on its own. The error message says "c:\winnt\system32\lsass.e
The m/c boots in 60 secs..
Norton sayz no viruses found.
Watz rong in my PC.
Please gimme an exact answer as in wat shud be done.
Thanks in advance
Prasad
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
3
- +2
7 Comments
Though Norton reports no virus ( assuming you got the latest virus definitions for it) , there might be sasser worm
Removal tool : http://www.microsoft.com/downloads/details.aspx?FamilyID=76c6de7e-1b6b-4fc3-90d4-9fa42d14cc17&displaylang=en
Removal Instructions:
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm.html#removalinstructions
Manual removal :
1. Disconnect your computer from the Internet.
2. Boot in Safe Mode by pressing the F8 key during startup.
3. Navigate to your Windows directory (c:\WINDOWS or c:\WINNT) on your
hard drive.
4. Look for a file named AVSERVE.EXE. Delete it.
5. Click on the Start menu and select Run.
6. Type "regedit" (without quotes).
7. Navigate to the following Registry key:
HKEY_LOCAL_MACHINE\SOFTWAR
8. In the windows to the right, look for a value called avserve. Delete
it.
9. Exit RegEdit.
10. Reboot.
Once your system is up, go to windowsupdate.microsoft.co
Removal tool : http://www.microsoft.com/downloads/details.aspx?FamilyID=76c6de7e-1b6b-4fc3-90d4-9fa42d14cc17&displaylang=en
Removal Instructions:
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm.html#removalinstructions
Manual removal :
1. Disconnect your computer from the Internet.
2. Boot in Safe Mode by pressing the F8 key during startup.
3. Navigate to your Windows directory (c:\WINDOWS or c:\WINNT) on your
hard drive.
4. Look for a file named AVSERVE.EXE. Delete it.
5. Click on the Start menu and select Run.
6. Type "regedit" (without quotes).
7. Navigate to the following Registry key:
HKEY_LOCAL_MACHINE\SOFTWAR
8. In the windows to the right, look for a value called avserve. Delete
it.
9. Exit RegEdit.
10. Reboot.
Once your system is up, go to windowsupdate.microsoft.co
Hi,
I ran the Sasser worm removal tool
http://www.microsoft.com/downloads/details.aspx?FamilyID=76c6de7e-1b6b-4fc3-90d4-9fa42d14cc17&displaylang=en
but it sayz "No infection found."
I ran the Sasser worm removal tool
http://www.microsoft.com/downloads/details.aspx?FamilyID=76c6de7e-1b6b-4fc3-90d4-9fa42d14cc17&displaylang=en
but it sayz "No infection found."
pai_prasad,
Go to http://windowsupdate.microsoft.com and check for updates.
Do all the updates
Restart the machine and check
Go to http://windowsupdate.microsoft.com and check for updates.
Do all the updates
Restart the machine and check
>>"c:\winnt\system32\lsass
Error code 120 is
//
// MessageId: ERROR_CALL_NOT_IMPLEMENTED
//
// MessageText:
//
// This function is not supported on this system.
//
#define ERROR_CALL_NOT_IMPLEMENTED
Have you installed some SW that is NT or XP only recently?
Error code 120 is
//
// MessageId: ERROR_CALL_NOT_IMPLEMENTED
//
// MessageText:
//
// This function is not supported on this system.
//
#define ERROR_CALL_NOT_IMPLEMENTED
Have you installed some SW that is NT or XP only recently?
Try this online virus scan - http://housecall.trendmicro.com/
The PC that is rebooting is not necessarily infected with a virus. However it needs MS04-24 (I think), its the blaster patch. Somewhere on your netowork a PC is scanning and attempting to infect these rebooting machines. The machines that are rebooting may never actually get infected(which is why anti-virus says nothing is wrong), but until you close the back door with the MS patch, they will continue to reboot.
The virus blows up the LSASS service in an attempt to infect, which causes the reboot.
The virus blows up the LSASS service in an attempt to infect, which causes the reboot.
Featured Post
Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.
One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
One of the most important things in an application is the query performance. This article intends to give you good tips to improve the performance of your queries.
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB.
To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …
Suggested Courses
Course of the Month11 days, 22 hours left to enroll
636 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.