Lsass.exe - testmy.net resource / tool
Home
Welcome, Guest. Please login or register.
Did you miss your activation email?

  



donations help testmy.net pay for the very high cost to run the site. Any amount is greatly appreciated.
Click to read why...

  spcr
    
News : uglystupid2 Don't look stupid, make sure you keep up-to-date with our rules, please read rules, click here  police December 03, 2008, 02:04:36 PM
testmy.net Broadband  |  Main Forum  |  HELP!  |  HELP! With Other Stuff  |  Topic: Lsass.exe Advanced search

Recommended Tests

Click here to run a free Performance Scan
   Test PC Performance:
     Click here to run a free Performance Scan		     Test PC Stability:
     Click here to run a free Registry Scan


Note: The links above are sponsored links
  0 Members and 1 Guest are viewing this topic. « previous next »
Topic Tools Search this topic
 Pages 1 ... 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 ... 42 Go Down
Author
Sticky Topic Topic: Lsass.exe  (Read 103901 times)
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #180 on: July 03, 2005, 01:53:29 PM »
Here's the link, go down aways to "bhavesh" and read. I guess it's not the exact problem I had ie, mine doesn't shut down unless I delete the error right away, anyhow here goes.

http://forum.theispguide.com/isp-ftopic2693.html

BTW It looks like "cjs fixes" posted this one first,,,,,,,,,
« Last Edit: July 03, 2005, 02:30:53 PM by 69 RAT » Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #181 on: July 03, 2005, 03:19:26 PM »
It's definitely sounding more like you're still virused up.  I'm fighting a machine which has one of the appinit viruses right now. (Not my machine, someone I work with.)  Pain in the butt.  The virus is not being detected because it loads so early in the boot process and it disallows running of hijackthis, antivirus software, and interferes with stinger.  Also, it stops you from using the Task Manager and if you use another program such as processViewer, it does not allow you to stop execution of the virus and further if you delete the entry in the registry, it just recreates it immediately.  It looks like the virus runs under the netlogon program, as a process module.  One other thing that this bad boy does is rename itself.  Thought I'd gotten it but then saw a different funky named program running.  Still there.  I'm gonna try running stinger from what Microsoft calls a command line (which I call BS) to see if I can get it that way.  I miss msdos.  When MS took that away from us, they took away our power to control our computer systems. cry cry  But I digress...........

Go ahead and stop the rpcSs service (net stop rpcSs)  Strange spelling for that file....  to see what happens.  Also, run another hijackthis and post the results.  Bug has to be executing somewhere.  There are a number of services that are running which don't need to be.  If you want, I can list them.     The link you posted sounds like a good idea. 
BTW:  Did you ever run CWS Shredder?
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #182 on: July 03, 2005, 03:33:15 PM »
Hey Dude. I did have my services trimmed down alot until this started and I've been starting some of them up to see if that makes any difference. Let me know which ones that I can "disable" and I will I have not run CWS Shredder.I'll stop the rpcSs Then I'll do another HJT and post. BTW, on my second hard drive I have a perfect match lsass file Exclamation Exclamation Same exact file version-sp2 and all. See, the drive is, or was, a complete OS before I transferred all important stuff over to  my 80GB disk and then pulled this one out if that makes any sense. I'll do the services thing and the HJT right now and post, stay tuned
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #183 on: July 03, 2005, 03:40:38 PM »
Well I got this window before I even had a chance to re-boot. I'll post it now and then reboot

AHH Duh, I meant after disabling rpcSs in the services
« Last Edit: July 03, 2005, 03:42:45 PM by 69 RAT » Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #184 on: July 03, 2005, 04:04:06 PM »
OK here is the latest HJT file:
Well some other time I guess. It won't take. Keeps telling me it has to be txt, etc but I can't save it as a txt. When I go to save the only choice I get is .log or all files and that won't work. I've posted HJT before. Is my memory that short? :haha: :haha:
« Last Edit: July 03, 2005, 04:20:32 PM by 69 RAT » Logged
cholla
TMN Veteran
*
Offline Offline

Gender: Male
Posts: 2843


View Profile
« Reply #185 on: July 03, 2005, 04:17:59 PM »
69 RAT : You might check this out to see if it will fix your blank help(system information screen)
http://www.dougknox.com/xp/scripts_desc/fixwinxphelp.htm

cak46 I've read you can go to DOS in XP with aWindows 98 start up disk I don't know because I don't have a way to test it.
Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #186 on: July 03, 2005, 04:25:09 PM »
Quote from: 69 RAT on July 03, 2005, 04:04:06 PM
OK here is the latest HJT file:
Well some other time I guess. It won't take. Keeps telling me it has to be txt, etc but I can't save it as a txt. When I go to save the only choice I get is .log or all files and that won't work. I've posted HJT before. Is my memory that short? :haha: :haha:
Smile
Just go to the File menu in Notepad, the version that pops up automatically, then click save as and name the file.  Can you do a search and see where the rpcss.exe file is.  It should be in one of the system directories  c:\windows\system or c:\windows\system32.

Cholla:  You can but if you are running NT File System, the dos won't recognize the hard drive.
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #187 on: July 03, 2005, 04:37:31 PM »
No search results for rpcSs but the Ultimate Troubleshooter has it listed right here
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #188 on: July 03, 2005, 05:05:33 PM »
I'll try it this time here goes;
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #189 on: July 03, 2005, 05:09:26 PM »
now for the main scan BTW I'm saving the HJT files to the actual HJT folder and it works:
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #190 on: July 03, 2005, 05:12:45 PM »
Quote from: 69 RAT on July 03, 2005, 03:40:38 PM
Well I got this window before I even had a chance to re-boot. I'll post it now and then reboot

AHH Duh, I meant after disabling rpcSs in the services

BTW the last 3 times I have gone into services, I have gotten this error when I leave cry cry
Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #191 on: July 03, 2005, 05:13:19 PM »
Your RPC service is named incorrectly.  Not sure whether this means anything.  The name sould be Remote Procedure Call Service or Remote Procedure Call in the name listing you have and in the net start list.  Will take a peeky at your logs.....

Edit:  See you are running DiskKeeper.  I  don't see a damn thing.  Only thing I can figure is if it's a bug, it's replaced one of the files normally used with XP.
« Last Edit: July 03, 2005, 06:12:39 PM by cak46 » Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #192 on: July 03, 2005, 05:19:33 PM »
Quote from: cak46 on July 03, 2005, 05:13:19 PM
Your RPC service is named incorrectly.  Not sure whether this means anything.  The name sould be Remote Procedure Call Service or Remote Procedure Call in the name listing you have and in the net start list.  Will take a peeky at your logs.....
I will right now check my other puter and see what it lists for RPC, I remember that title very clearly.

EDIT:Remote Procedure Call-RPC is listed twice, one with Locater after it Exclamation Exclamation HMMMMMMMMMMMMMMM Question
« Last Edit: July 03, 2005, 05:31:49 PM by 69 RAT » Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #193 on: July 03, 2005, 05:49:05 PM »
Quote from: cholla on July 03, 2005, 04:17:59 PM
69 RAT : You might check this out to see if it will fix your blank help(system information screen)
http://www.dougknox.com/xp/scripts_desc/fixwinxphelp.htm

cak46 I've read you can go to DOS in XP with aWindows 98 start up disk I don't know because I don't have a way to test it.

Sorry it didn't work for MS help. I noticed that it(the fix) looked like it was for the MS windows online update. Well they have a new way of doing things and I can't get it to work!! They tell you that you have to have "userdata persistence" enabled in your security section of your internet options folder under custom settings. Well mine already is enabled but their site won't recognize that so I can't look for or get any of the latest updates cry cry I did also check system info and still no luck/or network connections. I will be checking out that site more often thought, it looks cool
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #194 on: July 03, 2005, 06:06:34 PM »
Check this out. rpcss is the same as remote procedure call: I'd better leave it alone

http://www.theeldergeek.com/remote_procedure_call_(rpc).htm

http://www.theeldergeek.com/remote_procedure_call_(rpc)_locator.htm

It seems maybe that rpcSs has replaced the other two listings because I now have the latest version of sp2. The kitchen puter still has the other two listings and as you can see, according to these links, they appear to be the same thing Question
« Last Edit: July 03, 2005, 06:14:38 PM by 69 RAT » Logged
Print  Pages 1 ... 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 ... 42 Go Up
testmy.net Broadband  |  Main Forum  |  HELP!  |  HELP! With Other Stuff  |  Topic: Lsass.exe « previous next »
Jump to:  

 
    
testmy.net's forum is proudly Powered by SMF | SMF © 2006-2007, Simple Machines LLC
Bookmark: Del.icio.us    StumbleUpon
 		  

 

 © 1999-2008 testmy.net - Contact - Legal - Facts & FAQs
Page Loading Stats: This forum Page created in 0.119 seconds with 53 queries.