• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

LSASS.EXE reposting machine

Mainframeguy

Debiant by way of Ubuntu
#1
Whoa - I seem to have hit another wird problem on one of the machines I reformatted a month or two back.....

See the attached screenie - notice it is taken in SAFE MODE - now this error dialog pops up just as you would expect the Windows logon screen to come up (it is enabled).... and then if I click OK the machine goes back to POST!!

I can put in an XP CD and get to the Repair environment - and I have found LSASS.EXE in the i386 directory on the CD and it is way earlier than the one on the C: drive with totally different size - anyway not sure if I can copy from recovery console or what.....

Anyone out there help?

BTW I am aware this looks like Sasser, but trust me this machine was up to date with AV.... Anyway I would need to get to XP or somesuch to run the Sasser removal tool I guess? Or is there another way?

As an aside in desperation I tried a Knoppix bootable CD and that would not finish and get to run either! Does this indicate machine has died? Weird since I can see XP logo screen and "loading" progress bar and it was OK yesterday!
 

Attachments

Mainframeguy

Debiant by way of Ubuntu
#2
OH yes and I should also say that if I try an XP repair installation it copies the files - goes back and reposts for setup and then brings this file up again while it is trying to setup XP!

So looks like I am truly stuffed - anyone think of any other ideras before I reformat and loose the data?

(and yeah I know I could get drive out and put it elsewhere to try to get data!)
 

Mainframeguy

Debiant by way of Ubuntu
#3
OK final bump on this thread - in a few hours time that drive is coming out for data delving and it is (I think) going to be the recipient of a complete reformat and re-install of XP-Pro, for it's sins.... If I had more time I would get a new drive - anyone have opinions on that? IE could the HD be going bad? It is approaching three years old and that machine has thrown up regular weird messages about replacing bad registry files and such-like....

Replies tonight of any kind much appreciated.....
 

ep0niks

OSNN Junior Addict
#4
It could be..

Try to run diagnostic software from manufacturer on it, it won't damage your data.

I had trouble back then, i plugged the hd into my main box and simply by running partition magic it solve the errors on the disk.

Also check your IDE cable.. sounds weird but i've been messing with a box for a couple hours to make the damn thing work, at the end i was desperate and i had some new cable around so i swapped them and.. TADAM
 

Mainframeguy

Debiant by way of Ubuntu
#7
small update.... taken data off drive in second rig - drive appears good - but would love opinions on what to do with drive whilst it is out of the SMFF host where it had problems?

Chuck in bin and clone replacement?

Chuck and reformat virgin replacement?

Keep an low level format?

Keep an simple refomat/install?

as I say any advice welcome - this is a right b****r! (Pardon my French!)
 

Mainframeguy

Debiant by way of Ubuntu
#10
OK - time for thread to die - just finished all necessaries to restore HD and machin to active life - including copying all the original contents of bad HD across network to new one....

Presently running driveimage backup of new HD....

only one strange thing - seems the 160 GB Maxtor I bought is only recognised as a 120?

Weird, but irrelevant - I only bought that sive because the 40 GB drives thay had were at an outrageous price!.... also I have a flash USB drive thingummy = works fine, but not recognised by this machine (methinks it is a USB 1 issue?) Anyway have a USB 2 low profile card on order now, since I spent all this money and time to keep machine alive it better live wnough for the Winfast TV USB device I bought as a Christmas prezzie!
 

bush dogg

OSNN Senior Addict
Political User
#11
The 160G recognized as a 120 could be the bios needs updated.

My board will only recognize a 120G drive on the IDE with the bios I have but theres a bios update so it can see the full 160 (that I don't need because my drives or on a promise card and happy with that)

So might check for a bios update?
 

Members online

No members online now.

Latest posts

Latest profile posts

Perris Calderon wrote on Electronic Punk's profile.
Ep, glad to see you come back and tidy up...did want to ask a one day favor, I want to enhance my resume , was hoping you could make me administrator for a day, if so, take me right off since I won't be here to do anything, and don't know the slightest about the board, but it would be nice putting "served administrator osnn", if can do, THANKS

Been running around Quora lately, luv it there https://tinyurl.com/ycpxl
Electronic Punk wrote on Perris Calderon's profile.
All good still mate?
Hello, is there anybody in there? Just nod if you can hear me ...
Xie
What a long strange trip it's been. =)

Forum statistics

Threads
61,962
Messages
673,240
Members
89,015
Latest member
loxioalix