LSASS.EXE error, What do I do? Computer doesn't work at all...

[meishjennie]

Everytime I start my computer this comes up:

Lsass.exe - Application Error
The instruction at "0x00401082" referenced memory at "0x00000000." The memory could not be "written".
Click on OK to terminate the program.
Click on CANCEL to debug the program.

I tried both and for each option, the screen goes blank. I can't do anything. What can I do to fix this? Is this a virus or is something wrong with my computer? Thanks so much!

[JohnL369]

I have the exact same experience. I hope someone is reporting this as a possible virus. Based on the similar problem reports I have found on the web, it looks like this just came up.

[meishjennie]

ok. i tried rebooting my computer in "Last Known Good Configuration" and it worked. Right now, I'm scanning my computer. But is this enough? Do I need a specific program?

[jdon]

im having this same exact problem on my dell laptop. If anyone finds anything out on how to fix it please let me know.

[mrlithium]

I work in a PC repair store.

2 Computers came were brought in within 15 minutes of each other

Dell 4700
Dell 3000

Both have the error
lsass.exe - Application Error
"The instruction at "0x00401082" referenced memory at "0x00000000". The memory could not be "written".

I thought this was quite unusual, would like to know how to fix this if this is a new virus or worm, i see a few people have affected Dells, maybe its a dell thing?

[JohnL369]

My daughter has a Gateway Tablet and has the same problem. She finally got logged on using the "F8" last successful method, but a virus scan was negative. This really just seems to have popped up and it seems to be moving fast.

[cr888]

I'm having the same experience on a Dell laptop. I'm unable to reboot successfully using any of the options within F8. Has anyone found another solution?

[ajcurtis84]

Booting using the previous known good configuration did work.

I am doing a scan with AVG and have found a Vundo.CP trojan horse. I am not sure if this is causing the problem. I will let you know when everything is cleaned up.

[KenDodd]

Booting using the previous known good configuration did work.

I am doing a scan with AVG and have found a Vundo.CP trojan horse. I am not sure if this is causing the problem. I will let you know when everything is cleaned up.

How do you reboot with a previous known good configuration if the screen is black and the computer will not do anything?

[KenDodd]

Ok ...figured that out...and was able to boot up with last known good config...now scanning with AVP to see if it finds anything.

[postalpeg]

how do you reboot when the screen goes black?

[Masanko0631]

Hey, Exact same problem here - Except I noticed the virus before the critical shutdown that wouldn't let it boot up again.

The virus would close any internet browser that I opened (be it firefox or IE) before it could open. I ran a full system scan with symantec (last update december 13th 2008) and it found nothing, so I decided to try a system restore to earlier that day. During the reboot for the system restore I got the black screen with the error message that neither ok/cancel would let the computer start up. The computer wouldnt boot in safemode, but could only boot through "last known good configuration" (one way to get to the menu for last known good configuration is to turn your computer off during the boot up but before the error message, although I'm not sure how good that is for your computer)

After getting it rebooted I ran symantec again and this time it found Trojan.Vundo, but after running vundofix.exe (the fix for vundo that is supplied by symmantec) nothing happened. The virus also does not seem to have the characteristics of vundo and if it was vundo symantec should have found it before the reboot. I think either a) the virus is using vundo as a fake name or b) the virus installed vundo as like an extra virus with it, but it doesnt seem like vundo is the main cause of the problems here.

I'm currently checking every forum I can for an antivirus program that could work, if anyone uses hijackthis they could try to find the problem by comparing hijackthislogs from before and after the virus.

I'll post here again if I find a fix or any more information and I hope some of the information I've provided helps.

[cohen]

Masanka - Pls create your own thread.

postalpeg - What do you mean you screen is blank???? I may have a solution for you.

Cohen

[postalpeg]

I meant to say goes black. It will say click on ok to terminate the program / Click on cancel to debug the program. Then the screen goes black and I can do nothing else.

[Masanko0631]

I posted all of that because I believe my problem is the same as the one dicussed in the thread, I just had more info on the problem.

I got the exact same LSASS.EXE error with the exact same memory references and I also found trojan.vundo on my computer after I finally got it to boot back up, I just went into more detail on the symptoms I noticed before that point as no one seems to be talking about what else the virus has done aside from stopping the computer from booting.

I only posted here as I thought the info I provided could possibly be helpful to anyone else with the problem.

ZZzzZzzZzZ...

[cohen]

I meant to say goes black. It will say click on ok to terminate the program / Click on cancel to debug the program. Then the screen goes black and I can do nothing else.

I just noticed your post count.... if you are having problems, can you pls create your own thread with a HJT log, and then we can help you.

Thanks,

Cohen

[Masanko0631]

Postal, you can get the computer to boot up by holding the power button during the XP load screen before you get the error.

The next time you boot the computer after that manual shut down you should come to a screen that says "windows was not shut down normally" or whatever and you have the option to run it in safemode or run with last good known configuration.

Select last good known configuration and it should boot up, at least it worked for me... but the virus problems still persist and symantec can only find trojan.vundo.

[jkb3d]

i am having the very same problem, however i still get the application error when trying to run in last known good configuration.
Also I have a biochemistry final tomorrow...not a good night. thanks for your help

[cohen]

jkb3d - Pls create your own thread stating your problem.

Thankyou,

Cohen

[wulfman66]

I'm having the exact same issue on my other computer. It just started a couple of hours ago. Does anyone know how to fix this issue?