Whoa - I seem to have hit another wird problem on one of the machines I reformatted a month or two back..... See the attached screenie - notice it is taken in SAFE MODE - now this error dialog pops up just as you would expect the Windows logon screen to come up (it is enabled).... and then if I click OK the machine goes back to POST!! I can put in an XP CD and get to the Repair environment - and I have found LSASS.EXE in the i386 directory on the CD and it is way earlier than the one on the C: drive with totally different size - anyway not sure if I can copy from recovery console or what..... Anyone out there help? BTW I am aware this looks like Sasser, but trust me this machine was up to date with AV.... Anyway I would need to get to XP or somesuch to run the Sasser removal tool I guess? Or is there another way? As an aside in desperation I tried a Knoppix bootable CD and that would not finish and get to run either! Does this indicate machine has died? Weird since I can see XP logo screen and "loading" progress bar and it was OK yesterday!