Computing.Net > Forums > Windows XP > lsass.exe/sasser virus cant boot

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

lsass.exe/sasser virus cant boot

Reply to Message Icon

Name: amdspitfire
Date: February 23, 2005 at 15:24:10 Pacific
OS: Win XP sp2
CPU/Ram: xp2800/512mb
Comment:

Its a form of the sasser virus i think, forced to shutdown once. Its affecting the lsass.exe file. I can no longer boot into windows(safe mode included) because it comes up with an error at the winxp login screen, regarding the lsass.exe file. So at this point I need a way to clean the virus up from dos. The problem is its NTFS file system.

wierd thing is i have all the windows updates.



Sponsored Link
Ads by Google

Response Number 1
Name: yankanuk
Date: February 23, 2005 at 15:32:53 Pacific
Reply:

All critical up-dates is good, but also an up-to-date AV is also important.
Have you tried Stinger

MIKE TYSON VIRUS
quits after one byte


0

Response Number 2
Name: yankanuk
Date: February 23, 2005 at 15:35:37 Pacific
Reply:

My apologies, I just noticed you said you can't boot up in either mode. Pls disregard my post

MIKE TYSON VIRUS
quits after one byte


0

Response Number 3
Name: per
Date: February 23, 2005 at 15:51:00 Pacific
Reply:

You may be able to do something from the ultimate boot disk. Go here.
http://www.majorgeeks.com/download518.html


0

Response Number 4
Name: amdspitfire
Date: February 23, 2005 at 16:07:51 Pacific
Reply:

i tried stinger when i was still able to boot into windows and it didnt find anything!

this is the error i get at the winxp login.

lsass.exe - system error

security accounts manager initialization failed...error stats 0xc...0


0

Response Number 5
Name: per
Date: February 23, 2005 at 16:12:02 Pacific
Reply:

You can try a system repair and it may get you up and running to clean the virus.
How to do a system repair.--Boot from the xp cd and go past the recovery console to the install menu. Select repair the existing installation. You won't lose any data except the xp updates. Unless you have a slipstream sp1 cd you will have to d/l sp1 and all subsequent updates. You MUST have at least SP1 installed and the updates for security reasons. Be sure the firewall and A/V is active before going online as you will be susceptible to sasser and msblaster. If you don't want SP2 go to autopatcher.com and d/l SP1 and subsequent updates.


0

Related Posts

See More



Response Number 6
Name: amdspitfire
Date: February 23, 2005 at 19:46:43 Pacific
Reply:

repaired through windows setup now i get a memory dump on startup and it resets too quickly to read the cause of it.


0

Response Number 7
Name: per
Date: February 23, 2005 at 19:58:40 Pacific
Reply:

Now try the safe mode.


0

Response Number 8
Name: amdspitfire
Date: February 23, 2005 at 20:57:48 Pacific
Reply:

tried safe mode as well still get a memory dump


0

Response Number 9
Name: ugnius
Date: February 23, 2005 at 21:40:30 Pacific
Reply:

yes lsass.exe error appears usually because of sasser worm.
First of all try to load into safemode, if it doest help you need to find not corrupt lsass.exe file (it is in every win system) and dos manager which understands ntfs system. As I remember small dos manager comes with partition magic. Then you'll be able to upload the file and boot the system normally. Just after the boot you need to clear the virus with antispyware or antivirus software.


0

Response Number 10
Name: amdspitfire
Date: February 23, 2005 at 22:41:13 Pacific
Reply:

swapped the lsass file from another working computer. The comp still causes a system dump and wont boot into the os even in safemode. I also repaired the system through xp setup, i think this caused the system dump.


0

Response Number 11
Name: per
Date: February 24, 2005 at 09:46:00 Pacific
Reply:

Don't understand you "repaired through windows setup". Use the CD as explained in response #5.


0

Response Number 12
Name: amdspitfire
Date: February 24, 2005 at 16:29:23 Pacific
Reply:

^ thats exactly what I did, but that caused the memory dump on startup even when i start in safe mode. Now im stuck again.


0

Response Number 13
Name: per
Date: February 24, 2005 at 16:33:58 Pacific
Reply:

Unfortunately it sounds like a format and clean install. You could pull the hd and copy it as a slave on another machine or put in a new hd and install xp and slave the old one to retrieve the needed files.


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: lsass.exe/sasser virus cant boot

lsass.exe- Sasser Worm www.computing.net/answers/windows-xp/lsassexe-sasser-worm/174108.html

lsass.exe not letting me into win www.computing.net/answers/windows-xp/lsassexe-not-letting-me-into-win/135505.html

lsass.exe not found www.computing.net/answers/windows-xp/lsassexe-not-found/159202.html