Re: Unable to remove the Lsass.exe
From: Sadie (anonymous_at_discussions.microsoft.com)
Date: 05/14/04
- Next message: bogdan: "RE: Spy Ware issue?"
- Previous message: anonymous_at_discussions.microsoft.com: "I find this works quite well..."
- In reply to: Bryan Probst: "Re: Unable to remove the Lsass.exe"
- Next in thread: bryan probst: "Re: Unable to remove the Lsass.exe"
- Reply: bryan probst: "Re: Unable to remove the Lsass.exe"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 13 May 2004 16:58:45 -0700
Hello,
Try this,and if it works,or you find your own
solution,post back so that others may benefit.Could you
also expand upon your definition of "reformat",please?
This is highly experimental,since I am uncertain what is
causing the constant resets being reported by so many
people.Virus activity is one possibility-but a multitude
of other things such as soundcard problems can cause
resets.Bear in mind,this is written purely from a sense
of enabling a P.C to remain online long enough to
download critical patches.Let me know if it works or not.
If your computer resets before accessing Windows XP,refer
to your BIOS manual to determine how to boot into safe
mode via the BIOS.(e.g.I tap F5,but your computer may be
different.)This may prove impossible-report back,so a
clearer picture of events can be garnered from your
responses.
To prevent resets interupting the downloading of patches
Turn off Automatic Reboot, if you haven't already. Of
course, you can only do this if you can get into Safe
Mode and logged in as Administrator:
1) Click on "Start", right-click on "My Computer",
choose "Properties"
2) Click on the "Advanced" tab.
3) Under "Startup and Recovery" click on "Settings"
4) Under "System Failure" uncheck "Automatically Restart".
5) Click "Apply" then "Ok" then reboot your system. If
you get an error message, and your system doesn't reboot,
report the precise error message.
>-----Original Message-----
>My friendâ?Ts computer has been infected with this
virus. The problem is, is that the computer starts, shows
logo, brings up an lsass.exe error message about a
password and then shuts down. We cannot get to a screen
to run anything. Startup disk do not work and neither
did a reformat. Any suggestions. Thanks BRYAN PROBST
>
> ----- Carey Frisch [MVP] wrote: -----
>
> The "Lsass.exe" is a critical Windows XP system
file.
> Do not attempt to delete it!
>
> lsass.exe - Process
>
http://www.liutilities.com/products/wintaskspro/processlib
rary/lsass/
>
> Follow these directions to remove "The Sasser Worm"
from your computer:
> http://www3.telus.net/dandemar/sasser.htm
>
> [Courtesy of MS-MVP Jupiter Jones]
>
> --
> Carey Frisch
> Microsoft MVP
> Windows XP - Shell/User
>
> Be Smart! Protect your PC!
> http://www.microsoft.com/security/protect/
>
> ----------------------------------------------------
------------------------
>
> "Rishi Flower" <rajsingh49@hotmail.com> wrote in
message:
> news:cca001c4393b$e90fd880$a101280a@phx.gbl...
>
> | Hello People,
> | I know my computer is infected with some kind of
virus or
> | worm. I have winodws XP Home, and I have Norton
Anti Virus
> | 2003, and Norton Internet Security 2003. When I
do a
> | system scan or use the tool to delete the sasser
worm it
> | does not detect anything. But when I do a
Ctrl+Alt+Del, I
> | see the Lsass.exe running in the background. I am
unable
> | to stop the process.
> | Please help
>
>.
>
- Next message: bogdan: "RE: Spy Ware issue?"
- Previous message: anonymous_at_discussions.microsoft.com: "I find this works quite well..."
- In reply to: Bryan Probst: "Re: Unable to remove the Lsass.exe"
- Next in thread: bryan probst: "Re: Unable to remove the Lsass.exe"
- Reply: bryan probst: "Re: Unable to remove the Lsass.exe"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|