Help? Lsass.exe shutdown and XP installation freeze

[wh666-666]

Howdy all,

Just fixing a computer at the moment for a friend but having a few problems. In the first place the desktop PC had slowed right down and the computer would stay connected at all times to the access point but you could only get 10 mins or so of browsing out of it and then no browsers would work (although AV server would connect so its just browser related).

For the record this problem isnt on any other computer in the house using the sam AP.

At first it appeared that it was zonealarm which a relative installed without permission which wouldnt uninstall either and kept coming up with errors. Had to eventually delete all zonealarm reg files and app files. Also found a trojan called trojan horse generic3.nxb (process a0024931.exe) active and quarauntined. Did a google search but only one french page shows up (which i dont understand at all) and i cant find any other related material, could it be a worm acting as a trojan dropper? Deleted all the trojans but after a few restarts and progress I got a lsass error with the immenent shutdown. Searched sharkies previous threads but the system was so frozen i couldnt get in to run to disable system shutdown using the switch option before reboot, arghhhhhh!

Instead thought id try a repair to xp pro sp2. Copied the files initially from cd boot and rebooted where the HDD should kick in and install everything over the next 1/2 hour. Instead the timer just freezes (although all the imagery rotates) just no HDD activity or installation progress.

Instead i whacked in a spare old hdd (that i was using as a paperweight) and installed xp from the same disc no probs. At the moment my paperweight is the master and the affected HDD is hooked up as the slave so im just bombarding it with av/spware scans using superanti, CA, avg, xoftspy, but plese feel free to recommend any programs good at removal in the trojan field.

With it being someone elses data a reformat is a very last resort option so other suggestions appreciated first please.

Thankoo in advance fellow sharkies.

[wh666-666]

Nobody yet ?!?!?


Anyway quick update, hooked it up as a single drive after scanning it as a slave. Finally managed to complete the XP installation after praying it would complete and screaming at microsoft!

Sometimes it wont post and boot and gets stuck on the bios screen, other times it will load in to windows. Thinking a cmos reset?? Still yet to test whether the internet will stay browsing over long periods or not.

PSU is fully tested and Power Good. Might try a quick memtest although i dont imagine this being a problem.

Arghhhhhh i hate undocumented trojans!!!!

[proxops-pete]

have you ran memtest to make sure the memory is still good before installing XP?

[Dant27]

I have been having the same problem.

I believe mine was caused by an external hard drive but I can't be 100% sure. I have however managed to find a roundabout way to get the computer to log on again! (See below for instructions)

http://www.elpassoblog.com/lsassexe-...hutdown-error/

Also, you mentioned running a memtest in the above post. I'm having a few other PC problems that could possible be memory related, could you point me in the right direction with regards to a memtest?

Cheers,
Dan

[wh666-666]

Thanks guys. I was going to do a memtest, just to rule it out even though i changed the psu and memtested it about a year ago but now it wont get past post

Checked jumpers/ribbons so at the mo im just flashing the bios by leaving the battery out for a good long while and then jumping it as well, then if it posts il be able to boot memtest.

Ive recommended to the person linux. Usually i dont like doing so to people who cant even work XP properly but it will probably be alot more fool proof. As for the sites they go on ....... I dont wanna know !!

You can download memtest by clicking the linky below dant27. Once downloaded burn the iso to disc using nero/sonic/etc and boot. Let it run for a few hours doing multiple passes. If any errors show up then your ram is defective or incorrectly installed.

[wh666-666]

http://www.memtest86.com/memtest86-3.3.iso.zip

[Dant27]

Thanks for the link, I'll download and try it out tonight!