Go Back   Forums @ The Digital Fix > Gadgets and Gizmos > Computing Forum

Reply
 
Thread Tools Display Modes
Old 04-03-2005, 12:16   #1
roddy22
Unstopable
 
Join Date: Dec 2000
Location: scotland
Posts: 1,607
Thanks: 0
Thanked 0 Times in 0 Posts
corrupt registry then onto lsass.exe-system error

bit of background,

yesterday my computer (xp pro) restarted itself and couldn't reboot back up as windows\system32\config\system was missing or corrupt. Fair enough so I went into recovery console and followed the instructions to manually try to restore a recovery point.

Went resonable well and I was able to get into windows using the c:\windows\repair backup. I should have at this point backed up my documents etc onto another hdd but i didn't .

copied the registry files from a restore point and rebooted, before getting to the login screen windows hit me with a "lsass.exe" system error and just restarted. Googling about it seems to be due to some sort of virus, I went back to recovery mode to try to copy the repair registry back but when I go to enter my admin password it says it's wrong!!!

Could this virus (if it's a virus) have changed my password? i don't have caps lock on btw v confused as the password worked not 5 mins ago.

any suggestions or help greatly apreciated
__________________
http://homepage.ntlworld.com/r.smith5237/brain2.jpg
Are you pondering what i'm pondering!
roddy22 is offline   Reply With Quote
Old 04-03-2005, 12:28   #2
thetope
officially countrified
 
Join Date: Dec 2002
Location: the glens of antrim
Posts: 3,033
Thanks: 13
Thanked 16 Times in 14 Posts
i'm pretty sure there is a virus that does stuff with lsass.exe
have you tried a virus scan?
thetope is offline   Reply With Quote
Old 04-03-2005, 13:06   #3
roddy22
Unstopable
 
Join Date: Dec 2000
Location: scotland
Posts: 1,607
Thanks: 0
Thanked 0 Times in 0 Posts
I can't get into windows to do a scan, the error comes up before the login screen causing the computer to restart.
roddy22 is offline   Reply With Quote
Old 04-03-2005, 14:02   #4
thetope
officially countrified
 
Join Date: Dec 2002
Location: the glens of antrim
Posts: 3,033
Thanks: 13
Thanked 16 Times in 14 Posts
have a look at the advice in this thread, i'm not sure if that sysclean prog is bootable though http://thedvdforums.com/forums/showthread.php?t=354186
thetope is offline   Reply With Quote
Old 04-03-2005, 14:16   #5
roddy22
Unstopable
 
Join Date: Dec 2000
Location: scotland
Posts: 1,607
Thanks: 0
Thanked 0 Times in 0 Posts
I'm running something at the moment which will hopefully tell me what my password has been changed to. If I manage to get back into minwows in any form I'll run sysclean.

I'll keep you posted, meanwhile any hints or tips would be apreciated
roddy22 is offline   Reply With Quote
Old 04-03-2005, 17:53   #6
Dan
Passed away :(
 
Join Date: May 2002
Posts: 18,791
Thanks: 1
Thanked 3 Times in 2 Posts
The lsass vulnerability is well known flaw which should be patched as soon as possible.
Dan is offline   Reply With Quote
Old 14-04-2006, 13:17   #7
Guest 989
Trusted User
 
Join Date: Sep 2000
Location: Nr London
Posts: 193
Thanks: 0
Thanked 0 Times in 0 Posts
roddy22 - did you ever fix this? I'm having the same problem on my lappy. Fixed the system 32 file and now says lsass.exe error the value provided as the current password is not correct...

I've tried everything - any ideas what I can do. How would I go about extracting data off of the lappy given that I cannot boot in to windows? cheers.
Guest 989 is offline   Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On

Forum Jump

All times are GMT. The time now is 04:08.


Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
Copyright ©2000 - 2018 Poisonous Monkey Ltd. Part of The Digital Fix Network