The lsass.exe file is a legitimate Windows file. Unfortunately, computer viruses including the Sasser worm and other Trojan horses have spoofed the lsass.exe name, so it is also possible that you do have an infection. Either way, we have some work ahead of us.
To make matters more confusing, lsass.exe and isass.exe are often confused. The words look the same, right? One starts with a lower case “L” while the other starts with an “I.” Microsoft’s legitimate file starts with a lower case “L.” The file starting with an “I” has been identified with computer viruses.
First, let’s see if we can’t get Windows to start. From there, we’ll try to solve the lsass.exe error.
Using System Restore from the Command Line
First, let’s try to do a System Restore from the command line prompt. First, reboot your computer into Safe Mode with Command Line Prompt by pressing F8 as you computer begins to load (before you see the splash screen). You’ll see a list of Safe Mode options. Pick the one that says, “Safe Mode with Command Line Prompt” and press Enter. Choose the Administrator account if prompted. If you’ve never set a password for this account, leave the password field blank. The command line prompt should appear.
Now, type in the following:
C:\windows\system32\restore\rstrui.exe
Press the Enter key.
You should now be able to restore your system to an earlier point, before the lsass.exe system error began.
Running a Bootable Antivirus Product
Because lsass.exe is associated with computer viruses, we should rule out an infection - especially if your error message features the spelling that starts with an “I.” If you were able to boot up your PC after using System Restore, update your computer security software and run a complete system scan. If you were not able to restore the system and are still faced with the lsass.exe password error, you will need to run a bootable antivirus product from a floppy, CD, or USB drive.
In order to obtain a bootable antivirus product, you will need access to another computer. From there, download and an ISO file of BitDefender Rescue CD and copy it to a CD. This CD is now a bootable BitDefender rescue CD. Insert it into your computer’s CD drive and boot up. Your computer should detect the bootable files on the CD and launch the BitDefender antivirus tool. If a virus or worm was responsible for this lsass.exe error, the antivirus product should detect and remove it for you.
Using Recovery Console to Restore Corrupt Registry
If the System Restore from the command prompt and antivirus scan procedures didn’t work, read this Microsoft Knowledge Base Article. The “lsass.exe system error: When trying to update a password the return status indicates that the value provided as the current password is not correct” is a symptom of a corrupt lsass.exe file. If you believe this applies to your situation, consider following the steps detailed by Microsoft. This is a complex operation that should not be followed if your operating system is an OEM-installed system. It also only applies to Windows XP.
The lsass.exe file is associated with numerous computer problems; many extremely complex. Consider professional assistance if you cannot get to a System Restore point of if the bootable antivirus scan doesn’t detect a known virus infection.
Celeste Stewart | April 7th, 2009
You can leave a comment, or trackback from your own site.
