Avatar of bankwest
bankwest
Flag for United States of America asked on

lsass.exe error

My boss has a laptop while on vacation so I am trying to help resolve while the laptop is not here.    When trying to boot up it keeps giving the system error:   Object not found in the lsass.exe.  Click OK and machine reboots.   So cant even get it to boot up.    This is Windows XP Pro.

Please help.
Windows XP

Avatar of undefined
Last Comment
flubbster

8/22/2022 - Mon
flubbster

Could be an indication of malware which often corrupts the lsass file. See if he can boot to safe mode. If so, have him do a system restore from there. It will usually fix the issue, at least until you can get it into your hands to do a full scan.
bankwest

ASKER
They have done an F8 to safe mode but all it does it pop up the same error.
Zerox Hoop

Hi Bankwest,

you solve that issue various type.which are following.

1) Remove the drive and use it as an external drive in another system. I'll call it drive X:

2) On that other computer, create the following folders on X:
x:\temp\registry\new
x:\temp\registry\orig

3) start windows explorer and Right click on
X:\System Volume Information and assign Full
privileges for your current administrator user.
If you cannot see X:\System Volume Information,
then you need to go to the Tools-->Folder Options menu
and click on the view tab.
Then be sure that the following boxes are checxked:

Display the Contents of System Folders
Show Hidden Files and Folders

and UNcheck the following box:
Hide Protected Operating System Files (Recommended)

Then do what was stated at the beginning of #3 above

4) Open the X:\System Volume Information and and copy the most "recent" working directory to
x:\temp\registry\new . How do you know
what's recent? The paths are named X:\System Volume
Information\_restore{x-GUID-x}\RP###.
Get the most recent RP### path from a date when the system was working
- never choose RP### from the day on which you discovered corruption.

5) Now you need to back up files that we are going to replace: Copy all of the registry files from x:\WINDOWS\system32\config to
x:\temp\registry\orig . The registry files will probably be the following: SOFTWARE, SAM, DEFAULT, SECURITY, SYSTEM -- with no extensions.

6) Delete those 5 files from x:\WINDOWS\system32\config

7) Copy those 5 files from x:\temp\registry\new\rp###\snapshot to x:\windows\system32\config. Note: the files in snapshot will probably have the following prefix: _REGISTRY_MACHINE_ or _REGISTRY_USER
After copying, edit those file names so that they once again just say SOFTWARE, SAM, DEFAULT, SECURITY, and SYSTEM

8) Move your hard drive back into the original system and reboot.

Method 2

i. Restart the computer.

ii. Start tapping F8 key.

iii. You will get Advanced Boot Option window.

iv. Select the option Safe mode.

Thereafter, run System File Checker [SFC] scan on the computer which will replace the missing or corrupt files & check if the issue persists:

i. Type ‘cmd’ in Start, Run box. Right click on cmd.exe in the Program list and then select the option Run as Administrator.

ii. Type the following command, and then press ENTER on the keyboard:

     sfc /scannow

i hope this tricks usefull for you.
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
ASKER CERTIFIED SOLUTION
flubbster

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.