Lsass.exe - testmy.net resource / tool
Home
Welcome, Guest. Please login or register.
Did you miss your activation email?

  



donations help testmy.net pay for the very high cost to run the site. Any amount is greatly appreciated.
Click to read why...

  spcr
    
News : Have you seen the guides section?  It's an always growing section with tons of cool guides for subjects you might not even know about, check it out... it's a good read azn December 03, 2008, 11:06:37 PM
testmy.net Broadband  |  Main Forum  |  HELP!  |  HELP! With Other Stuff  |  Topic: Lsass.exe Advanced search

Recommended Tests

Click here to run a free Performance Scan
   Test PC Performance:
     Click here to run a free Performance Scan		     Test PC Stability:
     Click here to run a free Registry Scan


Note: The links above are sponsored links
  0 Members and 1 Guest are viewing this topic. « previous next »
Topic Tools Search this topic
 Pages 1 2 3 4 5 6 7 8 9 10 11 ... 42 Go Down
Author
Sticky Topic Topic: Lsass.exe  (Read 103980 times)
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #45 on: June 18, 2005, 07:11:59 PM »
Quote from: 69 RAT on June 18, 2005, 06:52:29 PM
If you mean a copy of Pauls "fix" I can do that. I just put the whole thing in notepad and can email it to MS
Couldn't hurt.... Sounds likeMS is a bit baffled with this one.  Maybe you'll be helping them out.  Smile  That would be a hoot.  You contact MS and find the fix for them, instead of them fixing it for you.....  I just find that kinda ironic.  Smile
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #46 on: June 18, 2005, 07:25:59 PM »
Very interesting Exclamation I just did a system search using a capitol L and came up with same results. BUT I have noticed that on different forums/sites that it is spelled the two different ways and I'm wondering if somewhere there might be a difference. When I type capital L and small l It's two different things as you can see. icon_scratch icon_scratch Hold it. The capitol I is the same as the small l . The mystery continues
« Last Edit: June 18, 2005, 07:33:27 PM by 69 RAT » Logged
cholla
TMN Veteran
*
Offline Offline

Gender: Male
Posts: 2843


View Profile
« Reply #47 on: June 18, 2005, 07:33:10 PM »
 69 RAT: what I was saying is the capital I (i) looks like the small l (L) .
This is a capital  I (i)
This is a small l (L)
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #48 on: June 18, 2005, 07:39:39 PM »
You're right Cholla, they look identical. I caught it myself and edited my previous post. I wonder if our systems could misread this Question Question Naaaa do ya think? I'm going to try it right now with another system search using Isass.exe (I just typed that with a cap i icon_study icon_study 

Update: didn't work, when I typed in a cap i the actual type that showed was a typical i ya know like an i beam. Got no results at all Exclamation :!:I'm going to go ahead and send MS this batch file change and see what they say.
« Last Edit: June 18, 2005, 07:46:38 PM by 69 RAT » Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #49 on: June 18, 2005, 08:02:02 PM »
Quote from: 69 RAT on June 18, 2005, 06:52:29 PM
If you mean a copy of Pauls "fix" I can do that. I just put the whole thing in notepad and can email it to MS

 :haha: :haha: I sure hope it doesn't come to tossing it out the window. Last resort is clean install cry cry cry Get this, MS told me to make a screen shot of the error and then open mspaint and do some clicking around and then save to an email. Well no matter how you cut it, it ends up an attachment. Well they told me not to send it as an attachment cause it will be lost Exclamation Exclamation Exclamation So I took matters into my own hands (long story short) I opened a new email and went to insert and selected picture went to browse and selected screenshot and clicked OK and guess what? Picture is IN email Exclamation Exclamation Exclamation icon_scratch icon_scratch It seems that is what they should have a guy do in the first place
That kind of thing really builds your confidence in MS support doesn't it... evil6 :whaa: angry3  You're right.  Thats what they should have recommended.  A little surprising that ms doesn't take attachments though...  Must not have much confidence in the security of their OS products either...  :haha: :haha: :haha:
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #50 on: June 18, 2005, 08:10:20 PM »
Boy, you got it Exclamation Exclamation Exclamation I'm right now trying  to get a clean copy of Paul's fix into an email and send it to MS. Some of the symbols are changing in the translation so I think I'll just send them the link so they can read it for themselves. :haha: :haha: :haha: I hope I don't have to show them how to do that Very Happy Very Happy Very Happy Very Happy
Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #51 on: June 18, 2005, 08:25:12 PM »
Quote from: 69 RAT on June 18, 2005, 08:10:20 PM
Boy, you got it Exclamation Exclamation Exclamation I'm right now trying to get a clean copy of Paul's fix into an email and send it to MS. Some of the symbols are changing in the translation so I think I'll just send them the link so they can read it for themselves. :haha: :haha: :haha: I hope I don't have to show them how to do that Very Happy Very Happy Very Happy Very Happy
:haha: :haha:
Sounds like a plan!  (you may have to show them by the sounds of the tech you're dealin' with.......)
BTW:  Did you find that .dll.dll.dll file on your hard drive?
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #52 on: June 18, 2005, 08:28:42 PM »
Yes, I just cleared the last registry key a minute ago. This was the one thing that MS told me to do. That dll entry thing is gone. Very Happy Very Happy Very Happy
Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #53 on: June 18, 2005, 08:37:24 PM »
Quote from: 69 RAT on June 18, 2005, 08:28:42 PM
Yes, I just cleared the last registry key a minute ago. This was the one thing that MS told me to do. That dll entry thing is gone. Very Happy Very Happy Very Happy
Good.  But did you search your hard drive for the file?  Even though the entry is gone from your registry, the file will still exist on your hard drive.  If you want, do a seach for it and see if it's there.  If it is, do another post and attach it.  I'd like to take a look at it. 
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #54 on: June 18, 2005, 08:52:17 PM »
Well I cleaned the system earlier today with HJT and selected FIX and it went away. For some reason it did not save to backup Exclamation Exclamation Wait a minute. I might be able to find it in a log file and select and paste it in the search box although I think I did this already but forgot. I shall try and see......................

Back again. I did try it before. No dice. "Not a valid file",,,,,,,,,,,,,,,,,,,
« Last Edit: June 18, 2005, 08:55:31 PM by 69 RAT » Logged
cholla
TMN Veteran
*
Offline Offline

Gender: Male
Posts: 2843


View Profile
« Reply #55 on: June 18, 2005, 10:04:59 PM »
69 RAT Glad the i L wasn't the problem like I posted it was probably for ME & older/But it didn't hurt to check.I guess MS worked out the i L bug with XP.Aparently XP uses an i beam type i thats how it always should have been.On a system where they look identical it would hide it pretty well.
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #56 on: June 18, 2005, 10:13:07 PM »
Ya dead end there.  Neutral Neutral  I might get some action tomorrow from MS , I don't know but I sent them the "batch file fix" link and a pic of my screen, maybe they'll come up with something.

Here's a link to the screen shot if you've never seen one.

http://home.Comcast.net/~melric/test_2.JPG

I just noticed the pic is kinda broken, I don't know why. I just listed two items on Ebay and those pics are also not 100%. I don't know what the term would be, just some of the "lettering" is not clear.
« Last Edit: June 19, 2005, 08:16:05 PM by 69 RAT » Logged
resi3js
TMN Friend
*
Offline Offline

Gender: Male
Posts: 311



View Profile WWW
« Reply #57 on: June 20, 2005, 07:36:56 PM »
That's funny, I get over 36,000 results with isass.exe and 338,000 with Lsass.exe, top pick for isass.exe was some information on a virus. There's also another virus called mydoom that is Lsass.exe.

http://www.auditmypc.com/process/lsass.asp


Update : I found that it is indeed an L.

http://www.liutilities.com/products/wintaskspro/processlibrary/lsass/

Also, here is your exact problem on another forums, you must sign up for it though, and it costs $10 a month just to view. =(

http://www.experts-exchange.com/Operating_Systems/WinXP/Q_20958211.html



Here we go! Sasser worm, I'm sure you've heard of it and it must be manually uninstalled.

http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

Use that and see if it gets rid of it!

IMPORTANT :  You must make sure you are fully updated with Windows or else it'll keep on coming back!

More information here.

http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.b.worm.html

and

http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm.html

And lastly, and most importantly.

http://www.ozzu.com/ftopic24247.html

I hope this all helps, if not... Then I'm stumped!


make sure to turn "off" system restore.


Also, if "that" didn't work... Then disable RPC.

1- start-programs-administrative tools-services
2- locate the: Remote Procedure Call (RPC) and open it
3- choose recovery botton then select -Take No Action- for the three pulldown menus


Hope this helps.
« Last Edit: June 20, 2005, 07:43:16 PM by resi3js » Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #58 on: June 20, 2005, 09:00:26 PM »
Hi all Exclamation Exclamation Well I just ran Paul Ramsey's "fix" twice and it didn't work cry cry cry For those of you are not familiar with this, the link is on page three about half way down.I typed it in exactly as written but no results. I tried disabeling one of the rpc's in my services, one that looked suspicious, and that got rid of it (the error) and my task  tray and 90% of my services stopped working as well Exclamation Exclamation Exclamation So back to square one. I'm very sure it's not a virus, I do not get the 60 second countdown and I can still do all of my puter needs and after a few I can just delete the error and it goes away,,,,,,,,,, till next boot. I now have XP Pro. It started when I had Home  the day before I updated to Pro. No word from MS today but  yesterday they told me ( believe this or not)  to go ahead and RUN Paul Ramsey's fix Exclamation Exclamation Exclamation and see if it helps Exclamation Exclamation Exclamation  Hummmmmmmmmmmm. I wonder if they have anything else up their sleeve? Except the dreaded " Well, we suggest that we make a clean install"  Laughing Laughing Laughing
Logged
resi3js
TMN Friend
*
Offline Offline

Gender: Male
Posts: 311



View Profile WWW
« Reply #59 on: June 21, 2005, 10:23:35 AM »
You didn't check for the sasser? DO IT
Logged
Print  Pages 1 2 3 4 5 6 7 8 9 10 11 ... 42 Go Up
testmy.net Broadband  |  Main Forum  |  HELP!  |  HELP! With Other Stuff  |  Topic: Lsass.exe « previous next »
Jump to:  

 
    
testmy.net's forum is proudly Powered by SMF | SMF © 2006-2007, Simple Machines LLC
Bookmark: Del.icio.us    StumbleUpon
 		  

 

 © 1999-2008 testmy.net - Contact - Legal - Facts & FAQs
Page Loading Stats: This forum Page created in 0.128 seconds with 54 queries.