Solved

lsass.exe error

Posted on 2012-03-12
4
466 Views
Last Modified: 2012-08-13
My boss has a laptop while on vacation so I am trying to help resolve while the laptop is not here.    When trying to boot up it keeps giving the system error:   Object not found in the lsass.exe.  Click OK and machine reboots.   So cant even get it to boot up.    This is Windows XP Pro.

Please help.
0
Comment
Question by:bankwest
  • 2
4 Comments
 
LVL 30

Expert Comment

by:flubbster
Comment Utility
Could be an indication of malware which often corrupts the lsass file. See if he can boot to safe mode. If so, have him do a system restore from there. It will usually fix the issue, at least until you can get it into your hands to do a full scan.
0
 

Author Comment

by:bankwest
Comment Utility
They have done an F8 to safe mode but all it does it pop up the same error.
0
 
LVL 6

Expert Comment

by:xeroxzerox
Comment Utility
Hi Bankwest,

you solve that issue various type.which are following.

1) Remove the drive and use it as an external drive in another system. I'll call it drive X:

2) On that other computer, create the following folders on X:
x:\temp\registry\new
x:\temp\registry\orig

3) start windows explorer and Right click on
X:\System Volume Information and assign Full
privileges for your current administrator user.
If you cannot see X:\System Volume Information,
then you need to go to the Tools-->Folder Options menu
and click on the view tab.
Then be sure that the following boxes are checxked:

Display the Contents of System Folders
Show Hidden Files and Folders

and UNcheck the following box:
Hide Protected Operating System Files (Recommended)

Then do what was stated at the beginning of #3 above

4) Open the X:\System Volume Information and and copy the most "recent" working directory to
x:\temp\registry\new . How do you know
what's recent? The paths are named X:\System Volume
Information\_restore{x-GUID-x}\RP###.
Get the most recent RP### path from a date when the system was working
- never choose RP### from the day on which you discovered corruption.

5) Now you need to back up files that we are going to replace: Copy all of the registry files from x:\WINDOWS\system32\config to
x:\temp\registry\orig . The registry files will probably be the following: SOFTWARE, SAM, DEFAULT, SECURITY, SYSTEM -- with no extensions.

6) Delete those 5 files from x:\WINDOWS\system32\config

7) Copy those 5 files from x:\temp\registry\new\rp###\snapshot to x:\windows\system32\config. Note: the files in snapshot will probably have the following prefix: _REGISTRY_MACHINE_ or _REGISTRY_USER
After copying, edit those file names so that they once again just say SOFTWARE, SAM, DEFAULT, SECURITY, and SYSTEM

8) Move your hard drive back into the original system and reboot.

Method 2

i. Restart the computer.

ii. Start tapping F8 key.

iii. You will get Advanced Boot Option window.

iv. Select the option Safe mode.

Thereafter, run System File Checker [SFC] scan on the computer which will replace the missing or corrupt files & check if the issue persists:

i. Type ‘cmd’ in Start, Run box. Right click on cmd.exe in the Program list and then select the option Run as Administrator.

ii. Type the following command, and then press ENTER on the keyboard:

     sfc /scannow

i hope this tricks usefull for you.
0
 
LVL 30

Accepted Solution

by:
flubbster earned 500 total points
Comment Utility
I can't even imagine you trying to explain how to do a system restore as posted above. Your boss will kill you I think lol.

There are several utilities that can be used to do a restore. One of them is ubcd4win. It contains a utility called RegResWiz. You boot the system with the CD, then run the utility.

Unfortunately, it will require a working computer to create the boot disk. Google ubcd4win and see what you think. Creating the boot cd is actually quite easy, but again, not sure if it is something you want your boss to attempt on his own.

Also, have you tried Booting to "Last Known Good Configuration" ??
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Most of the time we are in fix when all of sudden our systems behave weirdly.  Such problems cost time and effort... so it's best to take some preventive actions so that we can avoid such issues or overcome such problems more easily. Preventive M…
If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now