I removed the software for the modem in my PC and tried to shutdown but a message appeared saying I did not have the authority to shutdown the PC. I shutdown the PC manually (switched it off) and when I attempted to restart I received the following message " lsass.exe-System Error -Object name not found. I have never put a password into the system to gain entry. Does anyone out there have a clue to what has occurred and can I get around it. I have restarted in Safe Mode but the same Error message appears, I have tried to repair from the System CD but it asks for the administrators name and password. as I said I have never put a password into the system and it knocks back everything I do enter. HELP please.
My o/s is Windows XP Pro + SP1
Want to enjoy fewer advertisements and more features? Click here to become a Hardware Analysis registered user.
It appears you have the SASSER WORM, lsass.exe has a flaw in it, sasser worm attacks that flaw and causes problems for the system, grab the latest Stinger from Network Associates(Creators of McAfee Virus Scan), grab this patch http://www.microsoft.com/downloads/details.aspx?FamilyID=3549e...laylang=en after grabbing those 2, turn off system restore, unplug ur computer from the internet line, run Stinger, it should remove the crap that is causing that, afterwards, install the patch, then enable the windows firewall and restart computer than renable the System Restore. since i noticed that people that are behind hardware routers and gateways dont seem to get the worms actually compared to people on dialup or people on Internet not behind a hardware gateway or router.
Indeed the "l" is in the lower case but it not the time out Sasser worm, this one appears when I get past the post and the windows flashing loading symbol, the message lsass.exe - System Error "Object name not found" as I stated this all started when my system said I did not have authority to close my PC down, I did but thats when it started when I tried to boot up my PC.
I downloaded the M'soft patch and ran it, nothing was highlighted so now I will try the Symnatec approach.
I had my 80GB hard drive partitioned and I am using the secondry partition to work the PC, but I am forced to download programs like Trend Internet security and reload Outlook Express to enable me to talk to the outside World! all my -mail history and addresses are on the primary partition which the system will not let me enter. I will have to try and get past it because I have too much in time, info and money tied up. If you find any other clues and aids please let me know.
well put the HD on another HD with XP loaded but make sure u have an antivirus on that XP Disk and all the patches for it, then Grab ur addresses and put em on that disk and all the files u want to keep, scan em for viruses etc then reformat the Main XP disk as far as i see.
Just this wkend past, my HP notebook PC (running Win XP Home) came down with the exact same symptoms: "lsass.exe - System Error, Object Name not found" on boot. It appears that the boot sequence is failing somewhere inside lsass.exe (Local Security Authority System Service). Attempts at a "Safe Mode" boot fails with the same msg.
HP only provided "Disk Image" CD's with the PC, so I do not actually own separate CDs representing my copy of the XP Home Operating System. My plan is to borrow a copy of the XP Home CDs from a friend and then attempt a "Windows XP Repair Install" as outlined here: http://www.michaelstevenstech.com/XPrepairinstall.htm.
"Snowy Winter", I don't know if you ever solved your problem, but I'm now very curious... Pls let me know!
No! I never did sort the problem out, I lost everyhing, so I had to start again, this time I installed Win XP onto a 60 Gb Maxtor hard disk (C:\) and the 80 Gb hard disk Hitachi (where I had my O/S installed, which I assume was hi-jacked by a virus!!) is now my (D:\ and E:\) drives. I've got TrendMicro Internet Security running, also Ad-aware 6, Registry Mechanic and Updated popup blocker, so far everything seems to be working fine. I have learned one thing from all this and that is, If its working, leave well alone.
Sorry I couldn't help you with your problem.
Thanks for the info Snowy! (too bad you couldn't recover the OS, tho),
Well, my buddy forgot to bring in his Win XP Home CD(s) today, so now I'm not sure when I'll get a chance to attempt the Win XP Repair Install... (it'll probably be some time over the upcoming July 4th holiday... 8P).
I'll let everyone know if it works... (fingers crossed! )
lsass validates user logons. the software generates the process that is responsible for authenticating users. I work for the wonderful Bellsouth. I have encountered many customers with similar problems and more often than not it is caused by a virus. I assume trying to exploit lsass vulnerability. I would recommend downloading a new virus scanner. Possibly AVG (http://www.grisoft.com) Alot of the time viruses are written to attack antivirus software making them useless. Here is an update from microsoft about this issue. Also one from symantec for further background. Good Luck
After suffering from a (seemingly catastrophic) fatal: "lsass.exe - System Error, Object Name not found" boot msg, I was able to successfully recover the OS and get my PC back up & running again! (even without an XP install CD)!
Here's how I did it:
On a separate machine, I navigated over to Microsoft's website and looked into the details of creating a set of Windows XP Setup boot disks. I found all the necessary information here: ( http://support.microsoft.com/default.aspx?scid=kb;en-us;310994 ). Since my home PC (the one with the lsass.exe error) was running XP Home Edition with SP1, the "winxpsp1_en_hom_bf.exe" file was appropriate for me. That program generated six (6) floppy disks which I subsequently used to boot up my XP Home machine and get into the "Microsoft Windows Recovery Console" mode as described here: http://support.microsoft.com/default.aspx?scid=kb;en-us;307654 "Recovery Console" mode is a DOS-like mode with limited access to the Windows directory system files (it supports FAT & NTFS file formats, but file access is limited to only the "root" OS sub-folders. User data files are not accessible in "Recovery Console" mode).
OK, now that I was able to boot from the floppies (and access the OS system files), I pretty much followed all the details presented by Charlie White as described in his article "Windows XP crashed? Here's help" (quick-link here: http://www.tunexp.com/faqs/windows_xp_crashed_heres_help/ ).
In summary, the instructions he provides allow you to effectively perform a manual system restore on your machine.
So, now in the future, if your machine fails on boot-up, don't fret! First try to force a "manual system restore"... If all goes well, you should have your machine back up/running in no time!
N.B. All the details in Charlie White's article are correct except a small detail in Part 1 where you grab the original system repair files out of the "c:\windows\repair" subdirectory: Specifically, on my machine, the "c:\windows\repair\system" file was actually called "c:\windows\repair\system.bak" (note the ".bak" suffix). As such, the line where he says to
"copy C:\windows\repair\system C:\windows\system32\config\system",
should actually read:
"copy C:\windows\repair\system.bak C:\windows\system32\config\system"
I got the same problem than Russ and Snowy winter, but first the LSASS.EXE system error was : "an invalid parameter has been given to a service or a function", and after triing unsuccessfull F8 options, it became "when triing to update a password this backstatus means that the value given as password is not good" (I translate because I'm french and use a french version of XP).
I tried to install/restore XP, but at the end, when it reboots, I allways got that last message.
I cannot log into my system. I have NO access to the XP desktop.
You must turn off Win XP feuture "safe login" i think its called like this. But never mind. Use linux NT recovery diskete for it there it is one of the menu items. So and one thing else if you have your system disk connected to some off board or special raid IDE controler, you may need to reconnect it to that one on your mother board.
I recently had the same issue with lsass.exe. I had to install Windows ontop of my old windows to recover my files and then reinstal a fresh copy of Windows over the existing partition (I am not an IT guy so I doubt I get the language correct - I have to spend a lot of time trying to fix these types of things when they happen). Did anyone find out why this was happening? I understand that lsass.exe is legitimate - not some type of worm or virus. I have yet to figure why this happened but I would like to know so I can prevent it in the future.
I have the same problem! After booting up I get the message: isass.exe system error object name cannot be found.
I have tried booting up in save mode. Same error. Also tried running the rescue disc but then I have to fill in a password to go on but I have never made one so that's really weird. This means I cannot log on.
Sorry for not mentioning it. It's XP indeed with SP2 running (well...at least it did). Your link looks like the same error. Unfortunaly I am not member of that site so I cannot read the answer. and subscribing for 100 dollars is a bit much for me. Could you please email the answer or post it here? I would be very grateful.