how to get rid of lsass.exe
I have a dell laptop inspiron 1501 that is just a little over a year old. when we turn it on it loads the windows screen and goes directly to a blue/gray screen that says lsass.exe. Cannot go any further...can i repair this some way by logging on in safe mode? Please help..have been without my computer for about 2 months now.
Software/Hardware used:
Software/Hardware used:
ASKED:
April 2, 2008 2:25 PM
UPDATED:
February 2, 2011 8:27 PM
Answer Wiki:
Download the latest engine and signature updates for your anti-virus program from another computer so that you have them in case you cannot access the Internet from the infected computer. Then boot into safe mode on the infected computer, update the anti-virus software and perform a full scan. This should remove the infection if it is a computer virus. If it is another form of malware then you will need to employ other tactics (see below).
<b>Spybot Search & Destroy</b>
<a href="http://www.download.com/3000-8022-10122137.html?tag=pao">http://www.download.com/3000-8022-10122137.html?tag=pao</a>
<b>Ad-Aware SE Personal Edition</b>
<a href="http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10045910.html?tag=pao">http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10045910.html?tag=pao</a>
<b>Microsoft Windows Defender</b>
<a href="http://www.microsoft.com/athome/security/spyware/software/default.mspx">http://www.microsoft.com/athome/security/spyware/software/default.mspx</a>
<b>Microsoft Windows Malicious Software Removal Tool</b>
<a href="http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&displaylang=en">http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&displaylang=en</a>
<b>Microsoft Windows Update</b>
<a href="http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&displaylang=en">http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&displaylang=en</a>
<b>Microsoft Windows XP - Start the Computer In Safe Mode</b>
<a href="http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/boot_failsafe.mspx">http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/boot_failsafe.mspx</a>
<b>Free online anti-virus and malware scans:</b>
<b>Panda Software</b> <a href="http://www.pandasecurity.com/usa/homeusers/solutions/activescan/default.htm?track=80383">http://www.pandasecurity.com/usa/homeusers/solutions/activescan/default.htm?track=80383</a><b>Symantec Security Check</b> <a href="http://security.symantec.com/sscv6/home.asp?langid=ie&venid=sym&plfid=23&pkj=INBEMUYTACDCOYWOBWY">http://security.symantec.com/sscv6/home.asp?langid=ie&venid=sym&plfid=23&pkj=INBEMUYTACDCOYWOBWY</a>
<b>Microsoft Live OneCare</b> http://www.microsoft.com/protect/products/computer/safetyscanner.mspx
<b>General computer security recommendations from Microsoft:</b>
<a href="http://www.microsoft.com/protect/computer/default.mspx">http://www.microsoft.com/protect/computer/default.mspx</a>
To see all answers submitted to the Answer Wiki: View Answer History.
Just a note: lsass.exe is a windows process (Local Security Service). Apparently, your has been corrupted or infected in some way. Follow the steps above and you SHOULD be able to fix the issue: if not, you will need to boot from a parallel installation (another hard drive with Windows installed, or a PE disk like Bart PE or UBCD4Win) and run a virus scan and any other necessary remediation steps from the parallel install.
FYI, one well known virus which might cause issues with lsass.exe is “W32.sasser.worm” – the sasser virus
how would booting from a parellel system help…
It wouldn’t help. But that’s not what was suggested. The suggestion was to boot from a “parallel installation”, not a “parellel system”.
The parallel install would be on the same system but on a different disk. The different disk should probably be a CD, but you might be able to install a second hard drive that you could boot from. You’d use the clean booted operating system to run processes that cleaned the original hard drive (which you’d temporarily have as a second drive).
Tom