Lsass.exe - testmy.net resource / tool
Home
Welcome, Guest. Please login or register.
Did you miss your activation email?

  



donations help testmy.net pay for the very high cost to run the site. Any amount is greatly appreciated.
Click to read why...

  spcr
    
News : uglystupid2 Don't look stupid, make sure you keep up-to-date with our rules, please read rules, click here  police December 03, 2008, 10:48:59 PM
testmy.net Broadband  |  Main Forum  |  HELP!  |  HELP! With Other Stuff  |  Topic: Lsass.exe Advanced search

Recommended Tests

Click here to run a free Performance Scan
   Test PC Performance:
     Click here to run a free Performance Scan		     Test PC Stability:
     Click here to run a free Registry Scan


Note: The links above are sponsored links
  0 Members and 1 Guest are viewing this topic. « previous next »
Topic Tools Search this topic
 Pages 1 ... 34 35 36 37 38 39 40 41 42 Go Down
Author
Sticky Topic Topic: Lsass.exe  (Read 103972 times)
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #600 on: August 12, 2005, 10:20:55 PM »
hottiecakes. You might take a look in your event viewer and check what sort of errors you are getting around the time that this happens. Look in your your event viewer/ "system" first, and then you can check your "security", and then "application" logs. Right click on "my comptuer" click "manage" then double click on "event viewer" and your'e there. good luck.
Logged
Swimmer
Vice Admin
TMN Seasoned Veteran
*
Offline Offline

Gender: Male
Posts: 6403



View Profile
« Reply #601 on: August 12, 2005, 10:52:34 PM »
Here is what I found out about this thing.. i dont have the time to read 48 pages of posts..
http://www.ozzu.com/ftopic24247.html
http://extremetechsupport.org/forum/showthread.phtml?t=64852

Sasser variant..
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

I also guess that MS released a patch for this exploit a while back.. so you might want to remove the worm then reapply the patch..
Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #602 on: August 13, 2005, 09:07:24 AM »
Hottiecakes, try 69 Rats and Swimmers fixes.  Most likely Sasser variant, but viruses generally don't come back unless you re-install with a program or file that you keep reloading after formatting and reinstall.
Logged
Swimmer
Vice Admin
TMN Seasoned Veteran
*
Offline Offline

Gender: Male
Posts: 6403



View Profile
« Reply #603 on: August 13, 2005, 10:24:54 AM »
if you do quick format it could be possible..
Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #604 on: August 13, 2005, 06:25:00 PM »
Quote from: Swimmer on August 13, 2005, 10:24:54 AM
if you do quick format it could be possible..
Yeah, I suppose, but wiping the allocation tables/indexes would only leave room for a possible boot sector virus.  Unlikely nowadays, but still a possibility.  Not Sasser, though.....  He could also be getting the virus back from the web prior to updating his xp install as well.  I ran across NYB  (a boot sector virus) about 2 weeks ago.  Talk about a blast from the past. 
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #605 on: August 14, 2005, 08:43:33 PM »
Well EVERYBODY  cry This a sad day indeed. I fixed the problem, but not. I went around the lsass error and installed a fresh copy of xp on a seperate partition that I had on the same drive. So I guess I did a parallel install. It works great, but we will never know what caused it in the first place. 61 days is a long time to work on one problem, no doubt, but not finding it may haunt me, so to speak. There may be other issues than come up and I will post them as needed. What a learning curve. cak46 put his heart into this one for sure, but he supports my decision, albeit "incomplete". Cholla helped a great deal too. Thank you all for your efforts. I still have that error in there(in the other partition) maybe someting will come up. I will not destroy that OS, just in case. Besides, all the boot stuff is on that partition.

BTW if any of you have a usb keyboard (mine is a new DasKeyboard) and your'e going to boot from a cd(during post-"hit any key to boot from cd") and it doesn't work, then it's because it's not on yet. You will have to change back to a PS2 keyboard to "hit that key". I'll sign off for now and a good night to all.
Logged
php
Vice Admin
TMN Seasoned Veteran
*
Offline Offline

Gender: Male
Posts: 5127



View Profile
« Reply #606 on: August 14, 2005, 08:47:50 PM »
I just have to say... congrats to both of you (and cholla) for working so hard on figuring this out... I've been following since the beginning Very Happy
Too bad you couldn't get it figured out, but maybe a fresh install is the best thing to do after 2 months ;)
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #607 on: August 14, 2005, 08:55:03 PM »
Thank you php. I almost feel like I've let the viewers down. I know this can't go on forever, but at the same there may have been some people out there that were depending on a "fix find". If any of these people DO find something (fix) out there, then maybe they could post. It was tough though, not being a vurus. Again thank you for the kudos. Maybe this won't be in vain?
Logged
Swimmer
Vice Admin
TMN Seasoned Veteran
*
Offline Offline

Gender: Male
Posts: 6403



View Profile
« Reply #608 on: August 14, 2005, 10:41:36 PM »
try zeroing the partition.. i am wondering if there is something wrong with the partition..  For you guys to work 60+ days on it and not find something..   If you do find out what happend please let us know!
Logged
cholla
TMN Veteran
*
Offline Offline

Gender: Male
Posts: 2843


View Profile
« Reply #609 on: August 14, 2005, 11:31:07 PM »
69 RAT I'm glad I was some help But I'm giving the real credit to you & cak46 .You two worked long & hard on this.I don't blame you for calling it enough.It is too bad the fix wasn't found.
Logged
Swimmer
Vice Admin
TMN Seasoned Veteran
*
Offline Offline

Gender: Male
Posts: 6403



View Profile
« Reply #610 on: August 15, 2005, 08:24:16 AM »
The mods have decided to sticky this thread.. you guys have worked hard and we dont want this work to go to waste..
Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #611 on: August 15, 2005, 06:38:32 PM »
Quote from: 69 RAT on August 14, 2005, 08:43:33 PM
Well EVERYBODY  cry This a sad day indeed. I fixed the problem, but not. I went around the lsass error and installed a fresh copy of xp on a seperate partition that I had on the same drive. So I guess I did a parallel install. It works great, but we will never know what caused it in the first place. 61 days is a long time to work on one problem, no doubt, but not finding it may haunt me, so to speak. There may be other issues than come up and I will post them as needed. What a learning curve. cak46 put his heart into this one for sure, but he supports my decision, albeit "incomplete". Cholla helped a great deal too. Thank you all for your efforts. I still have that error in there(in the other partition) maybe someting will come up. I will not destroy that OS, just in case. Besides, all the boot stuff is on that partition.

BTW if any of you have a usb keyboard (mine is a new DasKeyboard) and your'e going to boot from a cd(during post-"hit any key to boot from cd") and it doesn't work, then it's because it's not on yet. You will have to change back to a PS2 keyboard to "hit that key". I'll sign off for now and a good night to all.

You stuck in there 69 RAT .......  the kudos go to you.......  notworthy  I just wish we had found the answer.  It is going to stick with me as well.   I'm glad the new install is treating you well.   Smile   Who knows, maybe tomorrow someone will find the answer.   Smile
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #612 on: August 15, 2005, 06:53:42 PM »
Quote from: Swimmer on August 15, 2005, 08:24:16 AM
The mods have decided to sticky this thread.. you guys have worked hard and we dont want this work to go to waste..

Well I guess it's learning time again. Sticky this thread? Somehow draw other people to it? Just a guess. I like it anyhow.It has been alot of work but I wouldn't have been able to go this far without cak46 and his desire to not let a machine beat us out. Ya know, I'm not really excited about having done this, cause the old one is right here on the same disc! I mean, "great, I have an OS that works good", but nothing has changed with the old one. The problem still lurks. I suppose that if someone came up with an idea from time to time, that I could boot into the other OS to try out the suggestion?

Cholla, thanks for the kind thoughts. Maybe we can consider this "over but not over"? 
Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #613 on: August 15, 2005, 07:08:28 PM »
Quote from: 69 RAT on August 15, 2005, 06:53:42 PM
Well I guess it's learning time again. Sticky this thread? Somehow draw other people to it? Just a guess. I like it anyhow.It has been alot of work but I wouldn't have been able to go this far without cak46 and his desire to not let a machine beat us out. Ya know, I'm not really excited about having done this, cause the old one is right here on the same disc! I mean, "great, I have an OS that works good", but nothing has changed with the old one. The problem still lurks. I suppose that if someone came up with an idea from time to time, that I could boot into the other OS to try out the suggestion?

Cholla, thanks for the kind thoughts. Maybe we can consider this "over but not over"?
A sticky:  If you look at the "Help with Other Stuff" page, the topic will stay at the top of the list.  They use these as "primers" for threads.     "Over but not over"......  sounds good......  Smile 
Logged
tommie gorman
Sophist Member
TMN Seasoned Veteran
*
Online Online

Gender: Male
Posts: 10226


"OLD GLORY"


View Profile
« Reply #614 on: February 14, 2006, 12:41:21 AM »
You might try this link 
http://www.grisoft.com/doc/removal/lng/us/tpl/tpl01?uti=Vcleaner
Logged
IF YOU DON'T STAND BEHIND OUR TROOPS, PLEASE, FEEL FREE TO STAND IN FRONT OF THEM !!!

"an old country hick from america"

Sprint EVDO Rev. A * AMD 64 3500+ 2.2 GHz cpu Ram 2GB/XP Home * TCP Optimizer
Print  Pages 1 ... 34 35 36 37 38 39 40 41 42 Go Up
testmy.net Broadband  |  Main Forum  |  HELP!  |  HELP! With Other Stuff  |  Topic: Lsass.exe « previous next »
Jump to:  

 
    
testmy.net's forum is proudly Powered by SMF | SMF © 2006-2007, Simple Machines LLC
Bookmark: Del.icio.us    StumbleUpon
 		  

 

 © 1999-2008 testmy.net - Contact - Legal - Facts & FAQs
Page Loading Stats: This forum Page created in 0.125 seconds with 53 queries.