OT: lsass.exe - system error

jrazz wrote on 1/11/2006, 7:07 PM

I have a laptop that is driving me crazy as it will boot up and then pop up the above error with the only option being clicking okay. Once clicked it reboots to the same message. I tried safe mode, safe mode command prompt, as well as using the xp install disc to attempt a repair to no avail. I would like to replace the corrupt file, but I can't get into the C:\windows\windows system32 folder and read and write on an NTSF drive. I spent 3 hours online with hp chat and the only advice they could give me is to do a clean install. I refuse. I would like to use the recovery console, but I do not know the Adminstrator password to get in to access the C: drive. I did not set one- yes I am sure- it came set up with windows out of the box and believe me, if it would have asked me to set a password, I would have left it blank as I hate situations like this. I think if I can get into the recovery console, or a dos prompt that will allow me to read/write on NTSF drives that I can boot up from, I think I can fix it.
I did a lot of searches on Google for this and found some fixes but all the fixes I found reference an article that is no longer on the web (or on the given link) so I only have half the puzzle filled in, but I think I know enough about copying and pasting files from a command prompt that I should be able to fix it.
If anybody has any tools that can accomplish this or if anybody has dealt with this problem before, please respond. By the way, this is not the virus that looks like the above referenced system error file.
Thanks for any help,

j razz

Comments

Rogueone wrote on 1/11/2006, 7:15 PM

You can make a bootable floppy with NTFS read/write permissions:

http://bootdisk.com/ntfs.htm

If you can get a version of the file that isn't corrupted, say possibly from another computer, copy it to a floppy, boot with the NTFS one, and it should let you copy it over

~Ben~

gdstaples wrote on 1/11/2006, 7:17 PM

Have you tried NTFS 4 DOS?

http://www.ntfs.com/products.htm

You can create a boot CD-ROM or disk that allows you access to your NTFS volumes. You can then replace files.

Duncan

fldave wrote on 1/11/2006, 7:41 PM

Sasser Worm exploits lsass.exe. If you can't access your System32 folder, may be the cause. You might try System Restore to a point prior to you having the problem.

Sounds like a virus.

http://www.symantec.com/avcenter/venc/data/w32.sasser.g.html

Edited: Sorry, just read the last sentence where it is not the virus. Can you be sure? If you can't access your System32 folder and you could before, then that is viral activity.

jrazz wrote on 1/11/2006, 7:57 PM

Yeah, I am sure. I'm sure that it is not a virus b/c it is a "by the book" error of a corrupt Isass.exe file, not the sasser variant with an uppercase I instead of the lowercase l "Isass.exe" I cannot access the windows system32 folder as I cannot find a DOS program which will allow me to write. A bunch will allow me to read, just not write. I cannot access windows at all past the error message as nothing else loads exept the background and the error message which you are forced to press okay. I will give one of the DOS programs recommended on here a shot, but I am pretty sure both are read only. Thanks for the posts though and I will keep you updated!
j razz

gdstaples wrote on 1/11/2006, 8:03 PM

I have used NTFS-4-DOS and it is both read/write.

jrazz wrote on 1/11/2006, 8:37 PM

I got it. I installed windows again in a seperate directory which I called windows1 and used it to access the files and folders I need from the drive. Now, I can copy and paste the file over and erase one instance of windows. Thanks for the help and suggestions. I will download the ntfs-4-dos as i am sure it will come in handy for future use!

j razz