Unsolved
This post is more than 5 years old
5 Posts
0
79274
The Dreaded "lsass.exe system error" - One More Time
Equipment: Dell Inspiron 8200 (notebook)
OS: Windows XP Professional originally with SP1, updated to SP2 (all updates applied)
Error message: "lsass.exe system error An invalid parameter was passed to a service or function"
It's a case of bad news sprinkled with just a bit of good news.
First the bad news -
The computer will not boot into any mode without the LSASS error message appearing and then rebooting. On initial power on, the computer will start the boot mode and the Windows XP logo will come up (with the "progress bar" ) only to be followed by the LSASS error message; at this point, if I click on the error message's OK button, the computer will reboot itself and repeat the same routine. If I hit F8 (during the initial boot phase) and try to go into any one of the 6 or so selections (to include Safe Mode), I still get the LSASS error message and reboot sequence. In other words, I cannot even get into the Safe Mode.
I have the Dell Windows XP SP1 CD that came with my computer and tried the "repair" function, only to get the same LSASS error message. Same thing with floppy boot disks from Microsoft.
Finally, I thought that I might have a "corrupted" lsass.exe file. I "expanded" the "lsass.ex_" file from the Dell Windows XP CD and copied the expanded file over to the System32 and i386 folders on the notebook (see "some good news" below.) Still get the LSASS error msg.
Now for some good news, such as it is.
I took the hard drive out of the notebook. I can hook it up with a USB cable to my desktop (a brand new one week old Dell XPS-410 with Vista. (The non-functional notebook made me do it!)) and the desktop can read / write to the notebook's hard drive. I used the desktop's anti-virus program (McAfee with current AV updates) to scan the notebook hard drive - no viruses were detected. I had originally thought I might have been infected with the "isass" virus as the symptoms seemed about the same but apparently not. And inasmuch as I can read the notebook hard drive, I was able to pull off the few files needed that I had not recently backed up.
I have "Googled" LSASS, isass, system error, etc. 'til my eyes are crossed. I'm working my way through building an "Ultimate Boot CD for Windows" (UBCD4Win) to see what happens and have thought about trying out Linux also. Final solution may be to do a clean install of Windows XP and reload the drivers and programs.
At this point I'm open to suggestions (i.e., a not so hidden plea for help!) As I said, I can read / write to the hard drive via the desktop computer and I don't mind poking around.
Thanks.
- Paul in norther Virginia
tgsmith
2.9K Posts
0
March 14th, 2007 01:00
In this folder you will see folders named RP0....RPnn. Find the one with the highest number.
These are your System Restore points. In the highest numbered folder you will see a folder named snapshot. In this folder are registry hive files which you need to recover your system:
_registry_user_.default
_registry_machine_security
_registry_machine_software
_registry_machine_system
_registry_machine_sam
Create a subdirectory; i.e, d:\Windows\TMP. Copy these files to the TMP subdirectory. Rename them:
default
security
software
system
sam
Note: Be sure to lose the period (.) in the file named _registry_user_.default
Delete the files in the d:\windows\system32\config subdirectory with the same names.
Tony
mombodog
12.7K Posts
0
March 14th, 2007 02:00
mombodog
12.7K Posts
0
March 14th, 2007 17:00
tgsmith
2.9K Posts
0
March 14th, 2007 17:00
tgsmith
2.9K Posts
0
March 14th, 2007 17:00
plg3
5 Posts
0
March 15th, 2007 00:00
plg3
5 Posts
0
March 17th, 2007 12:00
mombodog
12.7K Posts
0
March 17th, 2007 20:00