Forum Home
Press F1
Thread ID: 84399	2007-11-04 04:18:00	lsass.exe - system error	timaru2007 (12408)	Press F1

Post ID	Timestamp	Content	User
608260	2007-11-04 06:04:00	What about this ? (support.microsoft.com) Only thing is it says Pro not Home. HAd a look at that but requires access to "Safe mode with command prompt" or "last known good configuration". Both of these I cannot get into. Resigned myself at this stage to try and copy data off the HDD using drive adaptor and then using the recovery CD. Will have to wait till tomorrow though. Getting tired now... Cheers Francis	timaru2007 (12408)
608261	2007-11-04 06:12:00	Another thing you could do, is get the adapter connect the laptop hdd, and copy lsass.exe from the desktop to C:\windows\system32 folder on the laptop. Then scan the laptop hdd first for viruses etc. Once its clean, put it back in the laptop. See if it boots Was SP1 or 2 on this laptop??	Speedy Gonzales (78)
608262	2007-11-04 06:44:00	Another thing you could do, is get the adapter connect the laptop hdd, and copy lsass.exe from the desktop to C:\windows\system32 folder on the laptop. Then scan the laptop hdd first for viruses etc. Once its clean, put it back in the laptop. See if it boots Was SP1 or 2 on this laptop?? Thanks I'll give that a try. No idea whether SP1 or SP2 are on this laptop. Sis in Law is not very computer savvy, although she types really fast! Will need to spend some time updating it when all's running again. Cheers Francis	timaru2007 (12408)
608263	2007-11-05 00:50:00	The lsass file here is all lower case too, and I definitely don't have a worm/virus. Touch Wood	supergran (108)
608264	2007-11-05 01:49:00	You sure about that WT?? The lsass file here is all lower case too, it definitely isnt a worm/virus. Just went back and checked some notes, as it seems there is conflicting reports, some say the Lower case l is a virus, some say the L is and some say the i is. Even the AV companies all spell it differently some all in caps some in lower case. Since the sasser had many different variants its all confusing, any how if the reg rebuild doesnt work (its time consuming I've done it a few times) with a 50/50 success rate - then generally a wipe the drive and load windows again is the best choice (after saving data of course) The reg fix appears to also be dangerous with an OEM install Warning Do not use the procedure that is described in this article if your computer has an OEM-installed operating system. The system hive on OEM installations creates passwords and user accounts that did not exist previously. If you use the procedure that is described in this article, you may not be able to log back into the recovery console to restore the original registry hives. From Microsoft Support (support.microsoft.com) Same article posted earler on.	wainuitech (129)
608265	2007-11-15 06:58:00	Thanks all removed HDD from laptop and recovered all the documents . Used restore CD (4) and reinstalled everything . Partitioned drive so Docs are now seperated from OS . Thanks for the advice Francis	timaru2007 (12408)
608266	2007-11-15 13:49:00	We are still trying to find the original restore disc, but have tried an old copy of XP home I have lying around to see if a repair is possible. It is not as I am asked for an administrator password. When this is entered it tells me I used the wrong password. ok firstly it's good to see you fixed it ......however i'm curious.......when it asked you for an administrator password the default is usually to simply tap 'enter' as the password is usually really non existant did you try that.....also by asking for an admim password it's pretty obvious you were trying to access the 'recovery console' that's NOT how you run a 'repair install' you dont 'tap R to repair' the comp at the first choices screen you tap enter as if you are goin to reinstall the operating system. That then takes you to a screen where the install process will recognise your existing system and offer to repair it.......that essentially is a re-install 'over the top' of the existing system and it's 'non destructive' thus you dont lose any data/programs/settings etc.........however theres a catch......usually with laptops they're a VLK (volume liscense key) and if you try that process you'll end up at a point where you try to input what you believe to be the windows liscense key which you'll usually find on the bottom of the laptop however it'll jsut keep telling you 'not a valid key' .........problem ! so your best solution was and is to use the genuine restore cd set assuming you can find one which you did....... there; a little info for you	drcspy (146)
1 2