Comments for What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Comment from rowl on 2008-12-03

2008-12-03T23:28:30Z

i have a serious pc issue every time i start it up the desktop is missing with the start bar or its there and i cant go on the internet its like i never ever even clicked the icon. like right now for me to be own it has to be in SAFEMODE WITH NET WORKING AND THE PAGE IS BLACk when i log in with no icons just safe mode wording in every corner. i open task manager go to file click new task and open fire fox since explorer is down. remember the screen is stupid pixelated in safe mode. and that error is in task manager (lsass.exe)-----SOS----- I ALREADY PREVIOUSLY HAD TO RESTORE ALL MY DRIVERS BECAUSE THEY WENT MIA NEED MAJOR ASSISTANCE ASAP

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from activenets dot com on 2008-10-25

2008-10-25T23:51:12Z

If you still get the C:\WINDOWS\Cursors\lsass.exe is not found after removing the infection it is because the file has been placed in the registry. If you run regedit (and back it up before changing anything!) Navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon. Within this key you will see "Shell"="Explorer.exe C:\\WINDOWS\\Cursors\\lsass.exe" Delete the C:\\WINDOWS\\Cursors\\lsass.exe portion and exit the registry. hat will stop the popup error on startup.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Angel on 2008-09-17

2008-09-18T01:06:47Z

Same problem i have it appears everytime i reboot my computer but when I rename lsass.exe to lsass.txt it never shown again why?

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Gary on 2008-08-28

2008-08-28T19:15:34Z

RE. cursors.lsass.exe.
I uninstalled NERO and the problem has gone away. Must've been something in the program...

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Gary on 2008-08-27

2008-08-27T10:21:23Z

I am experiencing a problem with cursors.lsass.exe. The warning appears after start up when trojan remover program runs. I have updated my anti virus software and ad/mal aware programs and none of those programs find anything wrong. Should I just ignore the message each time the trojan remover runs?

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Saritha on 2008-08-22

2008-08-22T18:33:21Z

I am getting the message as Leo's. Can anyone help?

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from chinthaka on 2008-06-10

2008-06-10T08:32:03Z

god article . is that isass.exe replaced lsass.exe ? how will i remove that virus from my system Manually? pls write smthing

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Rod on 2008-05-12

2008-05-12T20:25:10Z

Thanks for the above article:
When starting up my laptop I get the Windows loading screen and then I am getting a message prior to Windows login screen. The message box sits on a blue back ground and the header reads "lsass.exe - Application Error", and the txt in the message box reads "The Application Failed to Initialize Properly (0Xc0000006) Click on OK to Terminate the Application". When I click "OK" my laptop sits there with a blue screen and nothing happens, but I can see and move the cursor. I know this isn't a great deal differnt to the other issues posted but it seems like Windows is loading and I am hoping not to have to re-install Windows. Thanks.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Leo on 2008-05-10

2008-05-10T23:10:38Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If Windows won't load, you'll need to perform an repair
install of Windows. More here:
http://ask-leo.com/how_should_i_reinstall_windows.html

Thanks,

Leo

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFIJitpCMEe9B/8oqERAiBKAJ9e1QRt343sM/UIxz/vMEzL8FsG1wCfcroa
yesC7FA3vKnhUH1/l2lgh0c=
=gWYW
-----END PGP SIGNATURE-----

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from mike on 2008-05-09

2008-05-10T03:40:49Z

how can I do this if my windows would not load anymore.. after boot up, the screen just displays an error message about lsass.exe is restricted then my pc restarts.. this happens again and again.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Vhielle on 2008-05-04

2008-05-05T05:54:48Z

I have read the article.. the solution sounds great but how can I do this if my windows would not load anymore.. after boot up, the screen just displays an error message about lsass.exe is restricted then my pc restarts.. this happens again and again.. please help...

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Jay on 2008-03-31

2008-04-01T00:26:42Z

Having a problem with my laptop when I turn it on it boots up and as XP loading screen is running I get an error message object name not found ISASS.EXE then it reboots and just does the same.Ive tried getting in to safe mode -same thing so how do I get into windows so I can get a hold of something I can run to fix this problem?

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Tanya Vernon on 2008-02-28

2008-02-28T22:21:25Z

I can't get my laptop to come on. It does not go pass the blue HP screen. So how can I get into the laptop to fix the problem. I got a window that said application error, terminate or something like that. Not knowing, I did this and now I can't get pass the blue HP screen. Included in this window is lsass.exe address. Did I mess up my computer for good or can this be fixed. I really need my computer.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Wayne on 2008-02-25

2008-02-25T13:09:59Z

Everyony should be aware that Lsass is a virus, lsass is Windows system file that has something to do with logging on. Don't delete it.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Jose Rivas on 2008-02-24

2008-02-24T15:04:02Z

I need you advice. In my laptop appear a window that say:

"Isaes.exe - Unable To Locate Components"
and then bwlo say:

"This application has failed because DSAPI.dll has not found. Re-installing the application may fix the problem."

and then a box to click OK. after I click OK the scree is black. I can see the arrow mouse but nothing happen after this. XP do not open.

I inserted the Win XP CD and the recovery CD of the computer but the situation is the same as above.

Could you help to find a solution? Could you suggest me the step to follow to put operative my laptop?. Do you think that the Hard Disk is damaged?

Regards
Jose Rivas

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Kevin on 2008-01-18

2008-01-18T14:36:18Z

i read the article at the top in hopes of finding info on lsass.exe. my windows won't boot up.. goes right to lsass.exe - system error. It is stuck in a loop. I have tried to reboot with the disc as well as going into F8 and trying all the options and none get me to windows..

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Ken on 2007-12-27

2007-12-27T19:24:02Z

So far all I've done is replace lsass.exe w/ a good one from another machine to put i Windows\Config folder. This is not a good reslution in that lsass.es is only supose to be in System32, but when deleted I get a nessage requiring lsass.exe in MSCONFIG again! Ugh.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Suhas Bhargav on 2007-12-12

2007-12-12T16:08:27Z

Hi...
"If i turn on my PC a pop up will open,saying windows/system32/lsass.exe is missing.U cant able to access somethings etc..."
Is it a problem for me...?
But as far as i know,lsass.exe checks the validity of user logons... etc
What shud i do inorder to turn off this pop up blocker window....?
Gimme a solution plzzzzzzzzzzzzzzz...!

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from jeannine on 2007-12-05

2007-12-05T21:11:02Z

i read the article at the top in hopes of finding info on lsass.exe. my windows won't boot up.. goes right to lsass.exe - system error "object name not found" I have tried to reboot with the disc as well as going into F8 and trying all the options and none get me to windows..

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from kelly roberts on 2007-11-27

2007-11-27T19:21:15Z

My computer at home does not get past the inital boot up when I get an error message regarding the lsass.exe file. how do i get my computer to boot up all the way so I can fix the problem?? There is never a way to "enter" anything anywhere??

HELP

Kelly

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from David on 2007-09-21

2007-09-21T22:30:08Z

I have the exact same problem as Christian above. My computer keeps shutting down different programs (Word 2007 and Internet explorer 7) and upon startup I have the same old "windows error - cannot find lsass.exe.” Please help. I will follow the instructions above but any other hints are appreciated.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from substance on 2007-09-17

2007-09-17T13:24:55Z

i've checked my system with AVG 7.5 and it found some kind of virus in lsass.exe and deleted it... now I've got some problems with all kind of games... they behave strange, you can play some time , but in 7 minutes game crashes and turns off... also starting windows appears WINDOWS error it is'nt abble to find lsass.exe please change path or search for it on your PC... it is tolld that it might be in windows/config/lsass.exe but it's empty ... where can i find that file ??? can i copy it from other PC ??? wont it do bad things to me ???

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from christian on 2007-09-16

2007-09-17T02:07:49Z

i had the same problem couple of weeks ago about the message that appears after windows starts. Here's what i did (by the way im using winxpsp2 on a pc). I simply copied lsass.exe from system32 folder, paste it to windows folder and the error message disappear. I dont know what lsass.exe does but until now i havent encounter any side effects whatsoever, so iguess it works. hope this help.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from fareast on 2007-09-07

2007-09-08T03:55:23Z

when i turn on my computer, i wouldn't see the desktop. Rather a message appered as lsass.exe on the top and it says the requested operation was not succesful. And it turns of by itself. I sent it to my warranty provider two time, but the problem was not resloved. Please help me. MY laptop is SONY vaio.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from pak on 2007-09-05

2007-09-05T17:00:13Z

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Peepo23 on 2007-09-02

2007-09-02T14:09:16Z

please help me. when i turn on my pc, a pop up bar appears and says i may not be able to access some of my files because of the lsass.exe.exe virus. unlike others, my pc doesnt auto shut off, but still im getting frustrated with this. please help me. my MS word files ar enot accessible and it seems like theyre all affected. [Email Address Removed]

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Jaymes on 2007-08-29

2007-08-30T02:04:01Z

If your computer keeps booting after your get the lsass.exe error, your security registry hive could be corrupt.

****Do This To Fix It****
You can use your XP disk to boot into recovery mode (recovery mode is just a DOS prompt, there's no reinstallation), or if you don't have an XP CD (and you can't borrow one)

rename "c:\windows\sytem32\config\security" to security.bak

then copy c:\windows\repair\security to the location above.

This should get you back into your Windows Installation, update your antivirus progam and start a virus scan to make sure the virus has been cleaned. you might have to re-activate your copy of Windows. I did

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Ravi Parsi on 2007-08-27

2007-08-27T10:52:05Z

I have deleted the file lsass.exe to clean up after sasser worm infestation. Now am getting error message that system cannot find lsass.exe everytime the laptop is started. where can i find this file?
I checked as given in your website and have only one host called localhost

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from rpk on 2007-08-24

2007-08-24T17:44:01Z

i had the same virus but my anti virus software disinfected it...all of it. ive done all the checks and nothing seems to be left of the sasser worm. i use panda titanium antivirus software. hope this helps, otherwise the instructions given are accurate in disinfcting your computer.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Priscilla Berlanga on 2007-08-21

2007-08-21T15:53:13Z

HELP!!!!!! I've tried everything after getting lsass.exe password error messages. Tried repair reinstall - setup didn't complete due to the same problem. Tried recovery console, same. Tried spotmau.com disk recovery and you guessed it, didn't work due to the same problem! Short of throwing this thing out the window, is there anything else I can try????? Toshiba laptop, Windows xpsp2, had all updates, virus protection, firewall, etc. cannot get in system at all, not even through DOS

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Jessica on 2007-08-03

2007-08-03T16:45:50Z

I have the same problem that some one mentioned eriler, my toolbar does not appear when i start upmy computer so i am unable to reach the "run" program to stop my computer from shutting down every 60 seconds. help!

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Amro on 2007-07-31

2007-07-31T23:19:41Z

On my laptop i turn it on and it comes up with error box saying Lsass.exe not found so i click ok then it shuts pc down and turns back on again in one big cycle

help me plzzz

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from stuctoo on 2007-07-29

2007-07-29T19:14:03Z

ralph those sites u see in notepad mean you are infected, from what ive read online already, im stuc with similar prob, just dont have that variant !

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Ralph on 2007-07-22

2007-07-22T17:42:30Z

leo, when I have searched thru and opend the hosts file in note pad, I see somany web addresses there. Many of which are links to porn sites. Does this mean I cant access those sites, I mean; what are the links doing there?

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Joshua on 2007-07-19

2007-07-19T08:56:11Z

well, i got those same problems too, before i had reformatted my computer i had this "could not stop lsass.exe" and Task manager has been disabled by the administrator. then i tried reformmating it. but im still not sure if it still have that virus. can u pls help me sovle this stuff?

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Jaya on 2007-07-12

2007-07-12T19:43:45Z

I think i have the sasser virus on my desktop. Each time i shut down, a message appears saying couldnt stop the program lssas.exe and i have to press ok for it to end. Besides this it says that the task manager has been disabled by the administrator, but i am the only user!! And in the start menu, the RUN button seems to be missing. I tried the sasser removal tool from symantec, but it didnt detect anything. what can i do can any one suggest me??

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Frank on 2007-07-10

2007-07-10T21:38:44Z

once windows has loaded up, i am faced with a blank screen and a window with the title "lsass.exe - Unable To Locate Component" in the bix it says "This application has failed to start because WLDAP32.dll was not found. Re-installing the appkication may fix the problem."
when i click ok i am faced with a blank screen - nothing hapens at all.
i read the advice give when faced with this sort of problem, but have found that this does not help, as i cannot do anything, let alone run a command.
Please help me get my laptop life back.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Nathan Dobson on 2007-07-04

2007-07-04T16:31:45Z

When Windows XP starts to load I get and error message Lsass.exe system error. clck OK and Just Black screen , Tried to load in Safe Mode etc. and computer does the same. I can get to the log on screen and if I was to try and log on it reboots. Anything I can do to fix this?

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Vikram Jain on 2007-07-01

2007-07-02T04:50:10Z

I think i have the sasser virus on my desktop. Each time i shut down, a message appears saying couldnt stop the program lssas.exe and i have to press ok for it to end. Besides this it says that the task manager has been disabled by hte administrator, but i am the administrator!! And in the start menu, the RUN button seems to ber missing. I tried the sasser removal tool from symantec, but it didnt detect anything. i use Trend micro PC Cillin with the latest updates but it also fails to detect anything. what do i do??

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from luis on 2007-06-19

2007-06-19T15:41:41Z

I can't do anything with my little toolbar dow at the bottom. so i can't use command, run, or anything else... i need to know how to get ride of it. I am up to date with microsoft.
p.s i dont whant to instal anything because I am afraid ill get another virus like what happend last time.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Larry Brunson on 2007-06-09

2007-06-09T15:40:45Z

My hard drive rumbles constantly. I trace it to lsass.exe. This shows I/O read and write activity constantly. Anyway to stop this?

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Luke on 2007-06-08

2007-06-08T09:12:02Z

On my laptop i turn it on and it comes up with error box saying Lsass.exe not found so i click ok then it shuts pc down and turns back on again in one big cycle. PLZZZZZZZZ help me

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Dan on 2007-06-07

2007-06-07T12:42:18Z

I have the same problem as most here. I get the lsass.exe error when attempting to log on to windows either normally or in safe mode. The computer then reboots and repeats. When I first had this problem, I could log into safe mode, maybe twice, then the lsass.exe took over and now nothing. A couple times it didnt recognize that I had a hard disk, but when doing other tests it shows that all my info is still occupying the disk space. I found the Linux comment interesting from another user here and was curious if there was any truth to this? I thought about reinstalling windows, but couldnt create a new petition without deleting my old one with all my files on the hard drive, and I am unsure of the commands that i would use to attempt to repair windows, even assuming it is repairable. I found your site interesting and helpful thus far. Thanks so much for the site and information.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Stormie on 2007-05-21

2007-05-21T16:10:20Z

Just don't use "spyware stormer"... That is how I ended up with the System Error "The endpoint format is invalid"...It deleted registry values, and now my puter is FUBAR.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Gordon on 2007-05-16

2007-05-16T14:31:39Z

I clicked on a link in some search results and was immediately notified that a program was trying to access the internet. I blocked it. Still, a program called "lsass.exe" was loaded into my start-up programs. My anti-spyware allowed me to disable them right away. I then ran scans that said my computer is not infected. Still, what a scare. Never click on links and I recommend SpySweeper!

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Byron on 2007-04-28

2007-04-28T17:01:31Z

Hey I think I have sasser but none of the removal tools I have found seem to work... The only thing is my system goes very slow and there are TWO running lsass.exe processes. one takes up very little computing power, and one takes up almost 80%. When I shut down the resource intensive one, the problem dissapears, but If I reboot, I have to shut it down again. I have run all of my spyware/virus removal tools and used the windows removal tool and symantec removal tool (none of which detected the sasser worm.)

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Chris Hallock on 2007-04-02

2007-04-03T00:10:23Z

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Paul on 2007-03-30

2007-03-31T01:28:38Z

I NEED HELP PLEASE.... My laptop wont even log onto windows anymore and an error message comes up just before the log on window (which wont come up) 'lsass.exe - application error the application failed to initialize properly (0xc0000006)."
Can anyone help please.....

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from anuar on 2007-03-25

2007-03-26T02:34:29Z

When Windows XP starts to load I get and error message Lsass.exe system error. clck OK and Just Black screen , Tried to load in Safe Mode etc. and computer does the same. What can I do to fix this problem? Thank You in advance!

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from WL on 2007-03-21

2007-03-22T00:39:16Z

I was attacked by sasser worm so installed the microsoft removal tool and managed to remove the worm but when i on my notebook the next day. I cant login xp. when i click my user name to log in, it logs off by itself. No choice to enter xp. Please help....i have important docs in my notebook and format would be my last resort. Thank you

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Archangel on 2007-03-20

2007-03-20T08:45:00Z

Windows is complete garbage, but unfortunately we are almost required to use it nowadays. What the other people say is true; you will end up having to format your HD and install Windows XP again. I had that error before, as well. What none of the Microsoft Techs, or most other advocates of this horrible OS, will tell you is that there is a way to get the data off that you need.

You use something called a LiveCD / LiveDVD. It is a version of Linux that is booted from the disk itself. You can use it anytime that you would like. Hell, my Windows works fine and I use it my computer occasionally just for kicks. By booting the computer while this disc is in the drive, you can boot into Linux before Windows. This will allow you to use a CD/DVD burner (internal or external) or a flash drive to get all of your data off and onto discs or another computer temporarily. Just be sure that all peripheral devices (including removable media) are plugged in prior to booting into Linux, otherwise Linux may not recognize it.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from mark on 2007-03-08

2007-03-08T23:21:49Z

I'm having the same problem one of your readers posted...I can't reboot the system and keep getting an error message stating, "When trying to update a password, the return status indicates that the vale provided as the current password is invalid." I cannot restart in SAFE mode since I get the same message. I've tried using the "Fix" option from the WindowsXP CD but that doesn't do anything. Do I have to reinstall WindowsXP totally? Thanks.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from megan on 2007-03-07

2007-03-08T06:39:49Z

When I started up my laptop today a box with lsass.exe in the corner reading "A parameter has passed to the system or function." What does this mean?

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Shine on 2007-03-07

2007-03-07T20:53:29Z

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Pankaj on 2007-03-07

2007-03-07T17:29:03Z

When my Windows XP Home Edition starts to load I get and error message Lass.exe system error. When I close out the prompt the computer shows Windows loading, then shuts down and re-boots. Tried to load in Safe Mode etc. and computer does the same. What can I do to fix this problem? Thank You in advance!

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Ali on 2007-03-01

2007-03-02T03:40:21Z

My son's PC was infected by LSASS.EXE. I removed from my system by access the registry (regedit). used the "Find" option under the edit menu and located the all of the key values that contained lsass.exe and deleted them. It solved my problem. Good luck..

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Joe Del Gobbo on 2007-03-01

2007-03-01T17:40:49Z

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from igb on 2007-03-01

2007-03-01T12:01:24Z

I got infected with the lsass virus. It has disabled RUN, REGEDIT, FOLDER OPTIONS and TASK MANAGER. My antivirus (AVG)was not able to scan it so I uninstalled and installed McAfee which detected it but was not able to delete or quarantine it. I have used the 'Fxsasser' found on the Mcafee website but it still cannot detect it. what do i do.
secondly, my dvdrom stopped working bout 6months ago and my operating system needs to be reloaded with the dvd that came with the laptop to restore some missing files, now i have the installation files on the harddisk but how can i install without dvdrom? I use toshiba satellite a15.
thanks

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from ruben on 2007-02-27

2007-02-27T19:39:38Z

I am running the Windows ME operating system. Whenever I boot the system up and use the task manager to see which programs are running, I notice that Lsass.exe is listed. However, I cannot seem to find out where on the hard disk this program resides. How do I get rid of it.

Hope you can help.

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Shane on 2007-02-25

2007-02-25T22:11:06Z

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Frank on 2007-02-24

2007-02-25T04:58:52Z

I had the lsass error and I run my XP disk to fix my booting problem. I now have a dual boot option at start up. The new OS works fine, but my old one is the one with the lsass problem. I need to fix the old OS and delete the new one, any suggestions?

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from shakti on 2007-02-20

2007-02-20T12:40:09Z

I got infected with a trojan that runs a modified lsass.exe. It has disabled RUN, REGEDIT, FOLDER OPTIONS and TASK MANAGER. My antivirus was not able to scan it so I uninstalled to install norton. But now it says some files missing from the installer which was on my hard drive. I m not sure waht to do. Do I need to reinstall XP????

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from chris on 2007-02-18

2007-02-18T13:06:35Z

I have had a number of problems in the past with windows (allways with orignal software!)on the shelf i have 3 orignal win 95, 2 win win 98, 3 me and 2 XP home.
like vista i would lend from a mate (Prirate copy) for 2 or 3 week yep its OK on my machine so i will buy a copy not any more as this linux live CD is in my machine yet againe. If only linux where more user friendly and i could install my printer! windows is good but allways have a linux live CD to hand so you can find the solution from Leo

Thank you Leo, you a star!

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Tom on 2007-02-05

2007-02-06T06:05:30Z

How can I abort the shut down when the boot never gets to the Start button? My re-boot starts before the OS starts, with message "When trying to update a password, this return status indicates that the value provided as the current password is incorrect." then re-boots. I don't have a WinXP CD. What can I do other than reformat/restore?

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Harry Gentner on 2007-01-30

2007-01-31T00:37:32Z

I have Window XT and start the system a error with lsass.exe and something about a incorrect password and the just starts rebooting over and over and over again..... I have tried safe mode and the same thing. What can I do to stop this? I really need to get this computer up

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Michael on 2007-01-27

2007-01-28T06:33:00Z

Hi Leo,
I've got some really bad problems with my PC considering Lsass.exe.
My PC constantly reboots, with no indication that it is about to do so. It generally happens if I open a program which use about 30k Memory or more.
I'm using Windows XP. This virus/worm, whatever it is, is really irritating, because I have to type up many essays, and the rebooting makes it a very start and stop process.

Any help is appreciated.

Thanks

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Nischal on 2007-01-26

2007-01-26T20:09:25Z

You talk about opening some file in notepad.. but the etc folder doesnot exist on my comp. why is that?
i am infected by some file called ctpmon.exe what should i do?

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Big Bill on 2007-01-26

2007-01-26T10:28:56Z

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Mike Allison on 2007-01-20

2007-01-21T01:47:24Z

I keep getting code 128 regarding the lsass.exe file when rebooting win2000 server just when it is about to display the login screen, and then it does a restart loop. I logged in in safe mode and ran a sasser remover tool which didn't find sasser. I also ran a blaster remover which gave the same results. I was able to download the most recent Symantec definitions, mine was circa 1/7/07, so it wasn't too old. This is an exchange server Exchange 2000 running on a Raid array off an old IBM Netfinity 4000R skinny rack server.

We are switching to offsite email, but I need to get this box up so I can transfer the mailboxes.

Any ideas or URLS to point me to?

Thanks

Mike

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from karen on 2007-01-17

2007-01-17T13:05:02Z

lsass.exe error messgae, ,computer will not boot in safe mode, regualr, nor can i reinstall WINxp,in fact cant do anything with my computer. please can anyone help me solve this problem in order to fix OS without losing hard drive data. Thanks for any help!!

]]>

A comment on: What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.