lsass.exe exits with error code 120

Hi,

I have Win 2000 OS.
Recently I have started getting a irritating problem of my PC been rebooted on its own. The error message says "c:\winnt\system32\lsass.exe exited with error code 120".

The m/c boots in 60 secs..
Norton sayz no viruses found.

Watz rong in my PC.
Please gimme an exact answer as in wat shud be done.
Thanks in advance
Prasad

LVL 10
pai_prasadAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
Advertise Here
 
sunray_2003Connect With a Mentor Commented:
pai_prasad,

Go to http://windowsupdate.microsoft.com and check for updates.
Do all the updates
Restart the machine and check
0
 
sunray_2003Commented:
Though Norton reports no virus ( assuming you got the latest virus definitions for it) , there might be sasser worm

Removal tool : http://www.microsoft.com/downloads/details.aspx?FamilyID=76c6de7e-1b6b-4fc3-90d4-9fa42d14cc17&displaylang=en

Removal Instructions:
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm.html#removalinstructions

Manual removal :


  1. Disconnect your computer from the Internet.
  2. Boot in Safe Mode by pressing the F8 key during startup.
  3. Navigate to your Windows directory (c:\WINDOWS or c:\WINNT) on your
hard drive.
  4. Look for a file named AVSERVE.EXE. Delete it.
  5. Click on the Start menu and select Run.
  6. Type "regedit" (without quotes).
  7. Navigate to the following Registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  8. In the windows to the right, look for a value called avserve. Delete
it.
  9. Exit RegEdit.
  10. Reboot.

Once your system is up, go to windowsupdate.microsoft.com and update with the patches.
0
 
pai_prasadAuthor Commented:
Hi,

I ran the Sasser worm removal tool

http://www.microsoft.com/downloads/details.aspx?FamilyID=76c6de7e-1b6b-4fc3-90d4-9fa42d14cc17&displaylang=en

but it sayz "No infection found."


0
The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

SEE THE WINNERS
 
jkrCommented:
>>"c:\winnt\system32\lsass.exe exited with error code 120".

Error code 120 is

//
// MessageId: ERROR_CALL_NOT_IMPLEMENTED
//
// MessageText:
//
//  This function is not supported on this system.
//
#define ERROR_CALL_NOT_IMPLEMENTED       120L

Have you installed some SW that is NT or XP only recently?
0
 
Rob StoneCommented:
Try this online virus scan - http://housecall.trendmicro.com/
0
 
sunray_2003Commented:
0
 
coopey247Commented:
The PC that is rebooting is not necessarily infected with a virus.  However it needs MS04-24 (I think), its the blaster patch.  Somewhere on your netowork a PC is scanning and attempting to infect these rebooting machines.  The machines that are rebooting may never actually get infected(which is why anti-virus says nothing is wrong), but until you close the back door with the MS patch, they will continue to reboot.

The virus blows up the LSASS service in an attempt to infect, which causes the reboot.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.