Well i got the same problem, but i found some solution - when dialog box jump up (60s) hit go, start, or whatewer ther is , go to run program and write there "shutdown -a".
The other solution is firewall, when it load swiftly the lsa...never turn of your cpu, if you simply disable the firewall,well...you know what.

Hi Mischa Haring,
Sorry for the delay in replying to your comments Jan23 Mischa .. You are correct there is a subtle difference between lsass.exe and Lsass starting with upper case "L". Unfortunately I cannot find my post of way back last year but the lower case was something to do related to a worm, ..The upper case is not the suspect one to do with a worm if I remember correctly , but can cause malfunction under certain circumstances which some HWA members have experienced
I have searched again MS to find out "which was which to no avail" However there are some details in this
link (if I get the copy and paste right this time) which may give some room for thought;

http://support.microsoft.com/default.aspx?scid=kb;en-us;324049

Kind Regards
Take Care
Vic UK ..PS to Mischa
.hope my copy and paste works this time....I was on the Laptop on the way back from visiting
my family on the continent when I posted the earlier one here and "dropped a clanger"..fingers crossed.or as we say "Ich drücke die Daumen". ) )

Hi Mischa,

As what i could see from this thread, it seems that you are having a very frustrating experience with your computer. Yes, it's really very frustrating if you cannot even go to recovery console to just back up your data. A clean reinstallation of your operating system (WindowsXP) is not a good idea. It happened to me once where i have to sacrifice my pictures and musics just resolve my problem but I'm not gonna let that happen again. I'm working as a technical support representative in one of the leading computer manufacturers in the US. I've encountered this kind of issue several times and we end up reinstalling the operating system, but I would only suggest that if you do not have any important data saved in your computer.
Just to ask you, do you have your data saved under My Documents folder? and do you have a password when you log in to Windows? If your answer is YES, saved in My Documents and NO for no password for login, you might want to reinstall Windows to another folder and from there, you could access your old files. Just follow the steps below:

Restart the system. Make sure you boot to CD-ROM with your Operating System CD. press the spacebar at the press any key to boot from CD prompt. The Windows XP Setup screen appears, and loads files. At the Welcome to Setup screen press the <Enter> key to install Windows XP. At the Windows XP Licensing Agreement screen, press the <F8> key to accept the license agreement. Press the <Esc> key to install a fresh copy of Windows XP. Now look for a partition that says NTFS or the one that has a C: Highlight that partition and press enter to install At the caution screen, continue setup by pressing the <C> key.If leave the current file system intact (no changes) is highlighted, press enter to continue. If leave the current file system intact (no changes) is not highlighted, use the arrow keys to choose leave the current file system intact (no changes), then press the <Enter> key to continue. At the CAUTION: A WINDOWS folder already exists, press the <Esc> key to use a different folder. At the Setup needs to copy Windows XP files, type .001 to change it from \windows to \windows.001. and then press the <Enter> key to continue. The setup program will now copy files to your system. After the files have been copied, a message appears and notifies you that the computer will be restarted. When the computer restarts, the following message may appear: Press any key to boot from the CD. Do not press any keys when this message appears and allow the operating system to load. After the computer has booted completely, open Windows Explorer by right clicking the Start button and click on Explore. On the right hand pane, you'll see your folders. like Mischa's documents. Just transfer your data to the new My Documents folder. After you have copied the need files from your previous installation of Windows XP, you will need to delete the old copy of Windows XP and repair the boot.ini. Click Start, My Computer, double click Local Disk C:, you may have to click Show the contents of this folder, highlight the folder named Windows and then press the <Delete> key, confirm the folder delete by clicking yes. When complete click on the X in the upper right hand corner to close Local Disk C: Then click Start, Run, type Msconfig and press the <Enter> key. Click the Boot.Ini tab, click Check All Boot Paths button, and at the System Configuration window, click the Yes button, then click Apply button and the Close button. You will be prompted to restart the system. After you reboot you will get a message about using System Configuration Utility this is normal, check don’t show this message or launch the System Configuration Utility when Windows Starts and then click OK.

Maui!

Thanks for your post! I wish you were here a month ago. It's still a mystery to me how this error could occur. Do you know what's the cause of that problem?
Maybe you didn't see my latest posts, but I don't mind telling you again, it might help others to save their data and get there machines up and running again.
After many hours of searching and the tip from good 'ole Russ to go and see an expert, a friend of my girlfriend managed to make a backup of my most important files (still dunno how he did it, but he did it!) and reinstalled XP, but I'm pretty sure he installed it on top of the first version because now I have to choose which of the two XP's I want to have launched when I boot up. At least I don't have a problem to get in Windows anymore and all of my files are intact. But that's the good part...
It took me almost a whole day to install all of my programs. Most of the time I was busy installing the virusscanner and the servicepacks and updates of XP. I also installed Spybot Search & Destroy and Lavasoft Ad-Aware (a strong advice from MS before installing SP2). I let it run and found some suspicous files and had them removed.
I don't know if the problems I have now are caused by Spybot or that the two versions of XP makes conflicts but my problems for now are:
- after windows is loaded I get a pop-up saying: "In system settings protector has occurred a problem and had to be shut down, excuses...etc.". Looking more inside the problem it says: signature of error: Appname: teatimer.exe AppVer: 1.3.0.12, ModName: kernel32.dll, ModVer: 5.1.2600.2180, Offset: 0001eb33. If I look deeper inside the errorreport I get a very long list of errors in all sort of modules and a context of a thread. If I choose for “find errors” it don’t do it. Note: I found out that teatimer.exe is part of the Spybot program. I put the back
- another problem is that after installing outlook 2003 and trying to make a new account I get the errormessage: “Error …because there is a problem with the registry or installation. Start Outlook again and try again. If the problem exists install Outlook again”.
- after a fresh boot up the internet connection fails after a while (15 min. or so) although the connection looks normal. I have checked all the settings with exact the same type of notebook which is also running with wireless Lan.

Maybe you can give me a good advice what to do and maybe you know what caused the new errors (Spybot, double XP, both?).
I am doubting to begin with a clean start and reinstall XP again but then properly. I have a backup of all of my important files now, but I hope there is another way (so I don’t have sit down a whole day and install all of the programs again).

Maui, thanks for your concern and your help, at least to others

Mischa

Hi Mischa,

Yup! It's because of the double XP. Your registry got mixed up there. I would recommend a complete clean reinstallation of your WindowsXP. Now that you could get your files, now's the right time for a complete reinstallation. Besides, when you start your computer, you get the chance to choose what WindowsXP to logon to, only means that you still have the previous copy of the corrupted Windows. If you have virus on that previous windows, it will just jump over to the new copy and destroy the registry as well. Better make a backup of your files and reinstall Windows. Good Luck!

Hi,

I've been following your posts and it appears I am suffering from the same problem. I am able to access the recovery console. I haven't worked out what to do from there. What do I do from there to gain access to my desktop again?

Thanks

Sean

Maui,

You are a hero! I managed to do a total reinstall of windows XP. First of all I was a bit scared to get rid of the earlier installed XP-versions but I have everything running real good now without any errors. Including all XP updates (incl. SP2 which took most of the time), Norton virusscanner updates and Office it only took 3 or 4 hours to get everything installed. Internet is doing fine without any interruptions.

Thanks a lot Maui and also Russ of course.

The only question that's still bothering me is: was the problem that I had caused by a virus or by corrupt windows software or HP soft-/hardware? Maui do you, or anybody knows?

I will make a new post for people who have the same problem as i did to give a better overview. Except the way this friend of my gf made a copy of my files will be a mystery for now. Hope to find out soon.

Mischa

HI Mischa,

Sorry to reply just now. Congratulations for resolving your issue at last. Regarding your questrion whether the problems was caused by a virus or hardware, hardware has nothing to do with lsass.exe corruption. To give you a brief description about this problem, click this link http://www.2-spyware.com/file-lsass-exe.html. Hope this would this would help you. I'm so happy for you by reinstalling the Operating System on your own. So long for now, it's nice chatting with you. Hope to hear from you soon.

Likewise Maui and thanks for your nice words.

I doubt if the problem I had was caused by a virus though. In your link to the article I read that in case being infected you get a message that the PC will close in 60 sec. I never had that. In my case I booted up one day and this damned little box appeared....and the recovery-function didn't work cause I had to fill in my password while I never created one. Anyway, besides that I had my virusscanner, SP's and updates of windows allways up to date. Russ here had exactly the same problem with the same brand notebook: HP. I think if I remember well I saw at least one post on the help-board of HP that also mentioned the same problem. To my opinion it's just the machines of HP that are not build properly, but maybe that's easy saying.

Dear people, I said in my earlier post that I would try to make a complete new post about this problem to give more overview. I found out that it is very difficult to write it since there are many different ways the error occurs and the question if it's a virus or a corrupt system is still hanging. Anyway, I hope that in this whole stack of posts you can find the solution to your problem with Isass.exe
I am working on the question how to simple make a backup of your files if you cannot get in windows because of this problem. I'll be back....

I think I have the same virus, but I can`t turn my computer on! I never got that 60s warning, but instead, whenever I try to turn on my computer, I get this "lsass.exe system error" warning. Then it says it`s something wrong with a service or function (not compleatly correct translation from Norwegian). When I press OK, the computer shuts down and starts all over again. I don`t have any files I really need, so does anyone knows what I should to?

Hej! Caroline
As MIscha says there are so very many variants in which this lsass worm appears,

Look at this link, scroll down the page and you will see the "warning box", and see if it is the same .
Copy and paste the link to see details of how to remove the worm IF it is the same as your problem

http://www.onlinepcfix.com/virushelp/sasser.htm?OVRAW=Lsass&am...C=standard

IF it is the same Warning...scroll to the end of the page, and there you will see a removal tool link.

Please read all the posts, as some have some relevance to the problem..
Hope this helps

Best Wishes
Farvel...for now
Take care
Vic UK.

For Sean and Caroline!

Hi there! Victor's right! There are several reasons why lsass.exe gets corrupt. But if your computer won't start Windows anymore and gets an error lsass.exe - access denied, it's bad news, basically you can't download fixes on the internet anymore.
My suggestion is, boot with your WindowsXP cd. As soon as you have Welcome to Setup, press <R> for repair and it will start the Recovery Console. If it asks you which Windows installation, press 1. For administrator's password, just press <ENTER>. From the command prompt, type chkdsk /r. Normally, this would run 30-45 mins. After the process, type EXIT and press <ENTER>. Your computer will restart and at this point you don't have to boot to CD, just let your computer start and see whether you'll get to the desktop. If it gets to the desktop, observe your system whether it will create any other error messages.
I can't guarantee this would fix the problem, but there's nothing wrong if you'll try first, besides, this process will not erase anything on your hard drive. Pls update me for any development.

Hi!
Last night, I tried to re-boot my computer. I did like you sugested Maui, but when I tried to repaire the problem (I pressed the "e" button) my computer said it couldn`t. So, instead i managed to make a new windows XP! tried to get the documents I wanted copied to my new verson, but I couldn`t do that without copying most of my programs. I don`t really need those document, so tried to just delet the old one. But I have no idea how to do that! Does anybody know? And in my new version of Xp, I didn`t get all my programs, like the dvd program... I`m afraid if I do manage to delet my old verson, my dvd program willl be lost.

And thanks for all the help, everybody!

Caroline

Hi all, My name is Paul and I think I can solve your Lsass.exe problem quite painlessly.
At least this method worked for me very well...

First of all, NO this is NOT a virus causing this error!! Although it could possibly have been caused by the improper removal/cleanup of some virus that exploits Lsass.exe.

***Okay, here’s what’s happening.

Lsass.exe or Services.exe run what are called ‘services’, think of them as mini-programs, (not entirely accurate but it will do for this example).

For some reason one (or more) of those services gets altered to not run as a Shared process.
Here is the same sentence for you techies:
The “TYPE” data value of a shared process has been changed from 0x20 (shared memory) to 0x10 (protected or separate memory).

***And Here’s How to Fix it.

First we have to get into Safe Mode with Command Prompt.
Wait! Before you say you cant get there just keep reading…
Boot your computer tapping the F8 key till you get the startup menu.
Select “Safe Mode with Command Prompt”
Somewhere along the line you will get the Object Name Not Found error.
When it comes up, stop don’t acknowledge the error, go drink a coke or whatever and just let it set for about 5 or 10 minutes.
NOW acknowledge the error and you should be able to continue. (Cross fingers here)
Once you get to the prompt you are gonna build a little batch file that uses SC.exe that is intrinsic (built-in) to WindowsXP.

At the prompt type CD\ and press enter. That puts us at root level.
Now type Edit and press enter. That opens the EDIT program and will allow us to start building the batch file. Type it just like it is below…


@echo off
cls
setlocal
Call :Tag1 Eventlog
Call :Tag1 HTTPFilter
Call :Tag1 KDCSVC
Call :Tag1 Netlogon
Call :Tag1 NTLMssp
Call :Tag1 PlugPlay
Call :Tag1 PolicyAgent
Call :Tag1 ProtectedStorage
Call :Tag1 SamSs
Endlocal
Goto :finished
:Tag1
set svc=%1
for /f “Tokens=*” %%a in (‘sc query %svc%^ | Find “TYPE”^ | Find /v “20”’) do (
@echo %%a
SC config %svc% type= share
)
:finished


Now….click on “file” then select “save as”
And give it a name like FixLsass.bat

You MUST specify .bat at the end. And press enter.

Now….click on “file” then select exit.

You should be back at the command prompt.

Now type FixLsass and press enter.

When it finishes running type EXIT at the prompt and watch it reboot

Pat yourself on the back for a job well done!

Now there IS ONE small catch here…sometimes WindowsXP will have to be Re-Activated, but I think that’s a small price to pay for this fix!

And best of all, your programs and data are completely UNaffected!

Well, I hope this fixes the problem for you... Feel free to call it "The Paul Process"
Smiles,
Paul

Wow Paul,

That sounds like a 6 minutes job (5 min. for getting the coke and 1 for fixing it ;-). Wish you were here a month ago. If it works like you say I think a lot people will thank you. The ever growing list of people who post here says there are more and more people suffering from it.

For the record: I have had contact with the friend of my girlfriend and finally I know what HE did to solve the problem. For people who just come walking in: - problem one: lsass.exe error...(object can't be found blabla)...problem 2: you cannot run rescue disc because repair function asks for password (which you probably never created). So you are stuck now. A total reinstall of windows will overwrite all of your precious files and important data. Ok here's the solution and if I remember well, it's been posted here earlier but like I've promised I will tell what a friend of my girlfriend did to solve the problem. Reserve some time for doing this, because this is reparing it the long way, but for a non-expert an easy way to do it.

Step 1:
Boot from your operating system CD and you'll see the blue screen with Windows Setup. Just let it load all the files and just hang on. After loading you have 3 options: press option 1 (Enter), for reinstalling Windows.
After that, press F8 to accept the license with Windows. After a short while you will get three options again:
Install windows in the same partition as where your old one is. At this point I'm not sure what your machine asks after this, but at some point it will say that another version is already being installed and it will ask if you are sure to install another one extra. Answer this with yes. I think somewhere down the process it will ask for a name for the Windows folder. The exsisting Windowssytem uses the name Windows probably so give it the Winxp for example. After finishing the whole installation (might take a while!) the machine asks to boot up again. After the reboot you will be asked to choose which windows you want to start. Choose the first one and windows will be started. Be sure your internetconnection is NOT being established because we don't need it for now and IF there is a virus on your machine you might be spreading it so unplug your connection for safety. There's no need to install updates etc. This is the first part and if everything went ok you will be in your fresh created windows as a part of another version and we will go to the next step.

Step 2.
Now you can have acces to all your important data and files as before the crash. You might have to search a bit because things might be on a different location on your harddrive but believe me, it will be there somewhere (try the funtion Find if it's really hard to find) Burn what you want to keep on a CD or on floppies. If a burnprogram is not available, install it.
(Here ends the story of what the friend of my gf told me, step 3 and 4 is what I did with the help from Maui)

Step 3.
Since your windows is running again you might think you're done. Bad news. If you will go on working you will find a whole lot of errors down the line after trying to install different programs and updates. So, what you have to do is to start with a clean disc. You have all your important files on a disc so nothing to lose.
Boot up from your operating disc again and go back to step 1 untill the point after accepting the license of Windows. This time you ask for the third option and press D. Now it will fragmentate your partition. Now it's childplay and you can finish the installation. After the final reboot you will be in a clean windows and everything will work properly.

Step 4.
Make sure you have a virusscanner installed. Then make connection to internet and run all the updates. Then run all the updates from MS. Then all the software you want to have installed. Now you want to have your files back on your computer of course. Be sure that you check all of the data with a virusscanner. I am saying this, because it is still not sure what the cause of the Isass.exe error is. If it's all safe you can copy it to the files where they used to be located.

Well, that's it. I took a lot of space here, but I think it will make life easier for the non-experts among you. Good luck and have fun with your new windows!

Mischa

hi everyone, i get the same error and have read the thread however my system restore has been off for a long time so i wanted to know which option were still viable and which is the best for me

Ok, just fixed the problem on my XP machine. Forget the recovery console and all its problems. Get BartPE. This thing is super simple to use, though a little scary.

http://www.nu2.nu/pebuilder/#download

also download the stinger plugin. It's free.

I was getting the "Object name" problem after using AVG to fix a computer that has the SASSER worm identified in a bunch of _up.exe files

What you want to do after you get Bart running on the damaged machine is backup the SYSTEM, DEFAULT, SAM, SOFTWARE, and SECURITY files from the \WINDOWS\SYSTEM32\CONFIG directory. Copy them anywhere you want. You never know.

At this point I used the stinger plugin and repaired all the sasser files. Alot of them were in the restore points. I also ran the symantec FXSasser.exe tool just to be sure.

Then I used Bart to copy an old restore point over the system files. The restore points are in your "System Volume Information" directory. Drill down til you get to the RP## directories. Start looking in the SNAPSHOT subfolders for dates that are before the problem ocurred. A couple of days should be good. Once you find them, copy the
_REGISTRY_USER_.DEFAULT
_REGISTRY_MACHINE_SECURITY _REGISTRY_MACHINE_SOFTWARE
_REGISTRY_MACHINE_SYSTEM
_REGISTRY_MACHINE_SAM
somewhere else. In the copied folder (not the restore point folder) rename them to their base names (same as the ones you copied out of the windows\system32\config folder). This was slow on my machine but be patient. Once done, copy them all into the \windows\system32\config directory. Restart.

If that doesn't work, you can always use Bart to copy your backed up system files to their original location and be no worse off than before. Try other restore points too.

***EDIT: Problem #3 mysteriously ceased to occur after several attempts (including running the CD through linux). Disregard the post. Sorry.***


Hello,

I experienced most of the problems described in this topic but my situation seems to have evolved into a disturbing dead-end. I can't even reinstall my Windows XP now!

Here's how it went.

Problem #1
Windows XP wouldn't start thanks to a missing or corrupt \windows\sytem32\config\system file.

No problems there, I just replaced it by the \windows\recover\system.bak (yes, .bak, there was no \windows\recover\system oddly) in the recovery console.


Problem #2
On restarting the system now the problem was that nasty lsass.exe error about the password not being valid (nothing about object not found though - my Windows is in Portuguese, btw).
Like Mischa, I could no longer access the recovery console since they now asked for a (non-blank) password!
Fortunately for me I could (and still can) access all the files of my windows partition through my linux partition so no problems there. But there are a lot of GigaBytes involved to backup so I still tried to fix the windows partition this time through the automatic repair (still using the windows xp installation cd).

After the automatic repair ended I restarted the computer and tried to run Windows XP. A screen informed that "The configuration program is restarting......" and soon afterwards the same lsass.exe error appeared! I gave up.

Problem #3 - *THE* problem
Now, on trying to access the Windows XP installation menu, I boot through the CD but it keeps thinking and thinking (showing a plain black screen)!
What's happened???


PS: Paul's method couldn't be applied here because even without acknowlodging the error the computer restarts by itself.

Thanks in advance.
Miguel

When I try to start up my computer I receive the following error message:
"lsass.exe - System Error Object Name not found." If I then click on OK the computer restarts.

I've tried looking for help online and there seems to be a lot of confusion with lsass being a "real file" or a virus. I do not believe this is the virus because everything I've seen regarding the virus from Symantec leads me to believe that I should be able to at least load up win XP. Unfortunately, I have been unable to load win XP.

I have tried loading in Safe Mode; Safe Mode with Command Prompt; and Last known good configuration. None of these work. Each time the same error message pops up.

I have also tried Repair with the Windows XP disk; however, because of my Raid setup (Raid 5 with a Promise Raid card), the computer fails to find any hard drives, "Setup did not find any hard disk drives installed in your computer."

I have also read the suggestion to install win XP on top on the existing faulty win XP, which supposedly would allow me to save / backup some files that I really do not want to lose. However, when I select "To set up Win XP now, press ENTER" I get the same message, "Setup did not find any hard disk drives installed in your computer."

As I mentioned, there are specific files that I would like to save without giving up and reinstalling winXP.

Also, because I have Raid 5, could I remove a hard drive and hook it up as a slave drive to another computer and access the files that way?

I appreciate any help.


I have an Asus SK8V motherboard.
AMD 64 FX-51
Memory = Corsair PC3200 2x512megs
Saphire ATI 9800 Pro XT
3 SATA Western Dig HDs
Win XP SP1

So this is what I did to resolve the

lsass.exe system error (parameters error) Having been told that I had to physically remove the disc and then format this is what I actually did.

1 I installed a parralel installation of XP Home. I did this by booting from the cd and choosing not to repair but to reinstall but then chose to have the installation in addition to the original installation. During this the setup warned me this was not ideal as they should be on different partitions. However my second partition was so small it had to go on the same one.

2 Having managed to install a second version I booted it but it would of course not access the files stored as the previous user name that I had had on the first o/s so I logged in on the 2nd o/s as administrator and went to the directory in Users and changed the ownership. To do this you have to be in safe mode and logged in as adminsitrator. By right clicking the folder and going to security and then advanced you can (when a dialog says you do not have permision) choose to own the folder.

3 I lifted all my files off the system. I was lucky I have a home network but you could do it on a CD

4 I am now formatting my hard drive for a clean install.

Good luck

I made this up from bits I found scattered round the net.

John