Lsass.exe - testmy.net resource / tool
Home
Welcome, Guest. Please login or register.
Did you miss your activation email?

 



donations help testmy.net pay for the very high cost to run the site. Any amount is greatly appreciated.
Click to read why...

  spcr
    
News : Have an idea that will make testmy.net better?  Click here to post it!  We love to hear feedback, user feedback like yours have helped build testmy.net over the years.. true story wink December 03, 2008, 09:10:15 PM
testmy.net Broadband  |  Main Forum  |  HELP!  |  HELP! With Other Stuff  |  Topic: Lsass.exe Advanced search

Recommended Tests

Click here to run a free Performance Scan
  Test PC Performance:
     Click here to run a free Performance Scan
    Test PC Stability:
     Click here to run a free Registry Scan


Note: The links above are sponsored links
  0 Members and 1 Guest are viewing this topic. « previous next »
Pages 1 2 3 4 5 6 7 8 9 10 11 12 ... 42 Go Down
Author
Sticky Topic Topic: Lsass.exe  (Read 103958 times)
cholla
TMN Veteran
*
Offline Offline

Gender: Male
Posts: 2843


View Profile
« Reply #60 on: June 21, 2005, 12:09:24 PM »

69 RATit looks like  resi3js  did a lot of research & spent some time on the Lsass.exe You should check out his links & try them. I don't have the Lsass.exe problem but I am going to look at the links.
Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #61 on: June 21, 2005, 04:34:19 PM »

Wow!!!! So much info!!!! Thank you all!!!!!!!  A little recap- I do have the latest S-t-i-n-g-e-r from McAfee and no virus, I have run all virus removal tools from McAfee and no virus. I ran a full system scan in safe mode-nothing. The weird thing is that this started on Saturday when I had XP Home and was still there on Sunday AFTER installing XP Pro!!!!! I also have a great utility called TUT (The Ultimate Troubleshooter) from Answers That Work.com, I think that's the URL. Anyhow, this program explains almost all tasks and services and startups that you have going on at any given time. It then suggests what to do, like delete or disable or don't touch, etc. I can't live without it!!!!!!!!!!!!!!! You do not need to go to Msconfig when you have this. There are tons of other things you can do from this utility. Check it out. In the meantime, I will keep everybody informed as I have just started a case right now with Microsoft on this Lsass.exe issue and they will getting back to me within 24 hrs. PS: Boot INI files, aw, no thanks not a place for me to go!!!!!!!!!!!!!!! Exclamation Exclamation Exclamation  Cak46-I checked and I do not have Avserve2.exe, not in windows or my registry : Smile Smile
Resi3js:  He already did  Rolling Eyes

Edit:  69Rat:  This is going to kind of be a pain in the lsass, but you can set Dr. Watson to run on startup.  This program is a little known debugger that may expose what object is not being found by lsass.  It won't do anything to your system, just log errors as they occur.  I'll look up the setup for boot and get back to you.......

Edit2  Go to Start>search>files or folders and enter drwtsn32.exe   searching the c: drive.  Once you find it, make a shortcut to it onto your desktop (Drag and drop it with your right mouse button to the desktop, then select "create a shortcut" from the pop up menu).  Now, go to "My Computer" through Start menu (or however you normally do it)  and double click on c: (Drive) .  Find the directory named Documents and settings, double click on it, then double on All Users.  Now, double on Start menu, then Programs, then Start Up.  Now, drag the shortcut you created earlier for Dr. Watson and drop it into the Startup folder.  Close all windows, then reboot.  When it comes back up, force it to exhibit the bad behavior with lsass.  Reboot, then wait the time for the error not to occur and let me know.  We'll need you to post the log file from Dr.Watson after you're done.
« Last Edit: June 21, 2005, 05:06:37 PM by cak46 » Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #62 on: June 21, 2005, 06:40:51 PM »

Oh ya, and then some. I ran both versons of stinger, all 5 McAfee virus removal tools, twice ran Symantec's removal tool, a complete virus scan in safe mode and I even ran the old Klez removal tool. When I was in safe mode the other day, it popped up. Today, it did not pop up in safe mode at all. Also today it didn't pop up at all until I started clicking on different icons. Paul Ramsey said it would pop up when I was in "safe mode with com prompt" and it didn't. Course his "fix" didn't work either Exclamation Exclamation The saga continues,,,,,,,,,,,,,,,,,,,,,,,,,,


Sorry guys, I just now saw your posts, my email link took me to page four instead of five. Exclamation Exclamation Exclamation  I will try Dr. Watson,,,,,,,,,,,,,,,,,,,
« Last Edit: June 21, 2005, 06:46:48 PM by 69 RAT » Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #63 on: June 21, 2005, 08:40:04 PM »

Cholla, I did look at all sites and tried Symantecs removal tool with no results. One of the sites talked about the 60 second doom and that's not my problem right now.

Cak46, I tried drwtsn.exe and it works fine except it comes up way before the error pops up Exclamation Exclamation Exclamation Therefore it can't "catch" the error cause it's already run boo hoo Sad Sad  The error isn't coming up now until I click on a few icons. I think my memory banks are good enough now to explain how this all came about. When I tried to install Silent Hunter III it wouldn't cause it kept getting 'interrupted' So I mailed to support and they said to end all processes in task manager except sys tray and explorer. Well, one or two went away and then several came up and said 'cannot delete'. Well then came Lsass.exe and I clicked on that to end process and got the 60 second doom window and my system shut down Exclamation Exclamation After that everything was fine (for awhile) At that point I started 'studying online' everything I could find out about lsass. I ran my clean-up utilities and finally went back to experiment with lsass and clicked on it to 'end process' and guess what? It now came up with 'cannot delete this,,,,,,,,,,' No 60 sec doom Exclamation Exclamation :!:So I now thought everything was fine. But that same weekend( I think it was Saturday) all of a sudden the lsass error started popping up on my screen Exclamation Exclamation It's weird cause when you get the 60 sec doom it just keeps coming back till you fix it. It only happened to me once. The next day (Sun) I installed XP Pro but the error stayed Sad Sad Sad  As far as I can tell I have a clean system and it is a legitimate system error. The lsass file path is is just as it supposed to be. I'm sending info to MS today and see what they say. (again) Cheers, the saga continues some more,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #64 on: June 22, 2005, 06:54:59 PM »

I think if you just minimize watson, it will monitor your system until you turn watson off.  A little icon that looks like a doctor should appear in your systray, if I remember correctly.  Did you get Silent Hunter in successfully?  If you did, might want to consider uninstalling it to see if that is somehow causing the object 'not found error'.  Are the icons that cause the error consistent eg: whenever you click on MSWord, it happens, but if you click on MSExcel, it never happens?
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #65 on: June 22, 2005, 07:48:34 PM »

Good questions Cak46 Exclamation I did get Silent Hunter installed on Sunday after I installed XP Pro. Unfortunately, the error problem started on Sat., when I still had XP Home  cry BUT I will uninstall it just because............. On Watson, it came up first and then maybe 3 minutes later the error popped up but nothing came up on Watson's screen. This time it came up without me clicking on anything!!!!!!!! Now yesterday, it seemed like it was popping up everytime I tried to enable my firewall which was weird cause my firewall is conf'd to start on boot but it has not been starting on boot Exclamation Exclamation Hummmmmmmm, uninstall my firewall?????? I wonder. Later in the eve, it didn't matter what icon I clicked on, it just seemed to come up whenever it felt like it Exclamation Exclamation Exclamation No word from MS, they are probably pulling their hair out by now,,,,,getting ready to "suggest"  that "we make a clean install"  Exclamation Exclamation Sad Sad I will take out Silent Hunter right now

update: Silent Hunter is gone with no results. Watson doesn't come up in my task tray. It comes up on my screen and there's no way to config it. But again it didn't show anything when the error popped up. Still, lots of trouble getting my firewall to get started so I will remove it now,,,,,,,,,,,,,,stay tuned

update X 2: there's no way to minimize the Watson window that I can find,,,,,,,,,,,,,,,,,,,,,,,,,,,
« Last Edit: June 22, 2005, 08:31:26 PM by 69 RAT » Logged
resi3js
TMN Friend
*
Offline Offline

Gender: Male
Posts: 311



View Profile WWW
« Reply #66 on: June 23, 2005, 05:12:02 AM »

Yeah man, anyone at this point would suggest for you to backup and reformat.
Logged

69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #67 on: June 23, 2005, 06:17:20 PM »

resi3js. I think you nailed it right on the head. So far, MS has not mailed me for two days now Exclamation Exclamation Exclamation It's a puzzle alright, I mean, everything works just fine, all I do is wait a few and click OK and it's gone without any  problems. And to be present in two OS's , Home and Pro, tells me that the "faulty" file was there and not removed after I installed Pro. This was an upgrade only so all my files and settings were saved. Sooooooooooooo, I have several formatted cd's, UDF style, that I can use as floppy discs with 539Mb's each and I can start the old transfering process. cry cry cry cry The sad thing is, that if I do this, we will never really learn how to fix it in a more basic way. I went to some of your link suggestions and many others and this is a big problem but a "simple" solution doesn't seem to exist. There are forums all  over the place talking about lsass.exe. If nothing comes up by the weekend, I'll go ahead and do the clean install.
Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #68 on: June 23, 2005, 06:18:51 PM »

Good questions Cak46 Exclamation I did get Silent Hunter installed on Sunday after I installed XP Pro. Unfortunately, the error problem started on Sat., when I still had XP Home  cry BUT I will uninstall it just because............. On Watson, it came up first and then maybe 3 minutes later the error popped up but nothing came up on Watson's screen. This time it came up without me clicking on anything!!!!!!!! Now yesterday, it seemed like it was popping up everytime I tried to enable my firewall which was weird cause my firewall is conf'd to start on boot but it has not been starting on boot Exclamation Exclamation Hummmmmmmm, uninstall my firewall?????? I wonder. Later in the eve, it didn't matter what icon I clicked on, it just seemed to come up whenever it felt like it Exclamation Exclamation Exclamation No word from MS, they are probably pulling their hair out by now,,,,,getting ready to "suggest"  that "we make a clean install"  Exclamation Exclamation Sad Sad I will take out Silent Hunter right now

update: Silent Hunter is gone with no results. Watson doesn't come up in my task tray. It comes up on my screen and there's no way to config it. But again it didn't show anything when the error popped up. Still, lots of trouble getting my firewall to get started so I will remove it now,,,,,,,,,,,,,,stay tuned

update X 2: there's no way to minimize the Watson window that I can find,,,,,,,,,,,,,,,,,,,,,,,,,,,
OK.....  The next time that it the "Object not found" occurs note the time and then go into Start>settings>control Panel>Administrative Tools>Event Viewer.  Look thru each of the logs and note any activity in the logs for that time , + or - 5 minutes.  Especially, look for errors and Security activity  in the logs then post them.  I can't believe that this is happening and no error records are being created.  I can understand it with Watson, to a degree, because that is primarily used for Exception error debugging. 

If you are at the point of reformat and have had enough, you may want to consider this Final Last Resort:  start uninstalling programs but do it Last in First out, meaning uninstall the most recently installed program first, then next most recent second....Etc. and reboot between each, giving it time after the reboot to error out on you with the "object not found".  If it does error out, do the next program.  Include service Packs, Updates, etc. to the operating system as well (Maybe one of those messed something up).  I do not like to lose, especially to a machine,  Smile but it's your call...............
       
BTW:  To stop execution of Watson, since it is not helping, go into Start>Programs>Startup and right moues click once on the watson entry, then click Delete on the popup menu that appears.
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #69 on: June 23, 2005, 06:23:43 PM »

cak46 just read your note, I will look at the logs right now,,,,,,,,,,,,,,,,,,,,stay tuned
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #70 on: June 23, 2005, 07:14:17 PM »

 Details
Product: Windows Operating System
ID: 26
Source: Application Popup
Version: 5.2
Symbolic Name: STATUS_LOG_HARD_ERROR
Message: Application popup: %1 : %2
   
Explanation
The program could not load a driver because the program user doesn't have sufficient privileges to access the driver or because the drive is missing or corrupt.
 
   
User Action
To correct this problem:

Ensure that the program user has sufficient privileges to access the directory in which the driver is installed.
Reinstall the program to restore the driver to the correct location.
If these solutions do not work, contact Product Support Services.
 
   
   
Version: 5.0
Symbolic Name: status_log_hard_error
Message: Unable to Load Device Driver : device driver could not be loaded.
   
Explanation
The program could not load a driver because the program user doesn't have sufficient privileges to access the driver or because the drive is missing or corrupt.
 
   
User Action
To correct this problem:

Reinstall the program to restore the driver to the correct location.
If these solutions do not work, contact Product Support Services.
 
 

-------------------------------------------------------------------------------This is what I get when I click on the App Popup entry. I'm still trying to figure out how to send you some of these warnings so that they are in English................this is the "object name not found"
Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #71 on: June 23, 2005, 07:27:38 PM »

Looks like we may be getting somewhere.  If you want, do a print screen of the information you want to post  (print Scrn key on the keyboard, then paste it into mspaint, then save it and do a post and attach the file.
Edit: goin' to do some research.... back soon.....
Edit:  Looks like a driver issue or a permissions issue, maybe.  Did you update or install Anything that day it started happening, including hardware drivers?
          Another thing to check:  Go to start>settings>Control Panel>Users and Passwords and check to make sure your Login id is in the administrators group
Here is some info:  http://www.microsoft.com/technet/support/ee/result.aspx?EvtSrc=Application+Popup&EvtID=26&ProdName=Windows+Operating+System&LCID=1033&ProdVer=5.2
http://www.microsoft.com/technet/support/ee/result.aspx?EvtSrc=Application+Popup&EvtID=26&ProdName=Windows+Operating+System&LCID=1033&ProdVer=5.0
« Last Edit: June 23, 2005, 07:45:32 PM by cak46 » Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #72 on: June 23, 2005, 07:55:32 PM »

 Details
Product: Windows Operating System
ID: 615
Source: Security
Version: 5.0
Component: Security Event Log
Symbolic Name: SE_AUDITID_IPSEC_POLICY_CHANGED
Message: IPSec policy agent changed: %1
PolicySource: %2
%3
 
 

--------------------------------------------------------------------------------
 
 Related Knowledge Base articles
 You can find additional information on this topic in the following Microsoft Knowledge Base articles:
 • Microsoft Security Center
 Find information, answers to your questions, instructions, the latest downloads, and more on the Blaster worm.
 
 
Now this came up at exactly the same time the error popped up.This was a Security alert
Logged
69 RAT
TMN Friend
*
Offline Offline

Gender: Male
Posts: 324


View Profile
« Reply #73 on: June 23, 2005, 08:02:15 PM »

Ah yes, print screen, thank you. The only thing I was trying to install was Silent Hunter about 6 times up to that point including on Sat. Will check your links right now Thanks, I'm getting a little excited. It's so cool to get something "almost mystical" fixed, not to mention perplexing Exclamation Exclamation Exclamation Exclamation

edit; ya I'm the comptuer administrator,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

editX 2; The trouble with their "fix" is that they are saying I need to reinstall the drivers to fix the error but they aren't telling anybody what the drivers are for Exclamation Exclamation
« Last Edit: June 23, 2005, 08:10:57 PM by 69 RAT » Logged
cak46
TMN Friend
*
Offline Offline

Gender: Male
Posts: 996


View Profile
« Reply #74 on: June 23, 2005, 08:10:27 PM »

Have you tried this scanner from microsoft?  Looks like that last error might be related to the blaster worm.   
http://www.microsoft.com/downloads/details.aspx?familyid=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en
Do you have all of the newest updates, including service pack 2 installed?

Thanks, I'm getting a little excited. It's so cool to get something "almost mystical" fixed, not to mention perplexing

Me too,  Smile but, have a ways to go yet.
« Last Edit: June 23, 2005, 08:12:40 PM by cak46 » Logged
Print  Pages 1 2 3 4 5 6 7 8 9 10 11 12 ... 42 Go Up
testmy.net Broadband  |  Main Forum  |  HELP!  |  HELP! With Other Stuff  |  Topic: Lsass.exe « previous next »
Jump to:  

    
testmy.net's forum is proudly Powered by SMF | SMF © 2006-2007, Simple Machines LLC
Bookmark: Del.icio.us    StumbleUpon
 
 

 

© 1999-2008 testmy.net - Contact - Legal - Facts & FAQs
Page Loading Stats: This forum Page created in 0.124 seconds with 54 queries.