Windows Won't Open

[wmc1956]

I have a serious issue with our computer! We had CA Internet Security Suite on it but I uninstalled it. I wanted to run a scan because we were having issues with a Google redirect virus. But when I opened it all I got was a blank white box.

So I uninstalled it was going to reinstall it. That was a couple of days ago. Today we started getting a box that would pop up and say it was "XP Antispyware 2012" and it wanted to do a scan and sell us software I guess. So I downloaded CA Internet Security Suite and installed it again. When it finished installing I rebooted the computer.When it restarted I got a box that said "Isass.exe Application Error: The application failed to initialize (0x000005). Click OK to terminate the action." When I click ok all I get is a black screen with the cursor. I tried restarting in Safe Mode and in Last Known Good Configuration but it does the same thing.

I called tech support for CA and they said I should call a local technition to restore the computer to an earlier date or something like that. Because of limited finances that isn't an option right now so your help would be greatly appreciated!

The computer in eMachines w6409 with Windows XP.

[gerbil]

Hi. It's not a good idea at all to attempt to install an AV service on an infected computer... its files may get damaged before it has a chance to protect itself. You need to attempt a couple of online scans first... eSet, Kaspersky etc. If you cannot get online with the sys then a downloadable Kaspersky scanner might help. All free; choose from:
==Kaspersky Online Scan, from http://www.kaspersky.com/virusscanner -the downloadable virus scanner tool is on this page, also.
==Eset Online Scanner using IE only: http://www.eset.com/online-scanner
==Pandasoftware ActiveScan using IE or Firefox from http://www.pandasecurity.com/activescan/index/
==Bitdefender Online Scan using IE only: http://www.bitdefender.com/scanner/online/free.html
- post the results, please.
Finish up with this scan:
==Malwarebytes' Anti-Malware from: http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html
or: http://www.besttechie.net/tools/mbam-setup.exe
=Dclick that file, mbam-setup.exe, to install the application,
-ensure that it is set to update and start, else start it via the icon, and UPDATE it.
Select "Perform QUICK Scan", then click Scan; the application will guide you through the remaining steps.
ENSURE that EVERYTHING found has a CHECKMARK against it, then click Remove Selected.
If malware has been found [and removed] MBAM will automatically produce a log for you when it completes... do not click the Save Logfile button.
Examine the log: if some files are listed as Delete on Reboot then restart your machine before continuing.
Copy and post that log [it is also saved under Logs tab in MBAM].

[wmc1956]

We have another computer so I am downloading Kaskerpsky and then I'm going to try running on the infected computer. Thank you for your reply!

[wmc1956]

Ok, I'm confused. How do I use Kaspersky once I've downloaded it unto a flash drive? How do I use it on the infected computer when Windows won't open?

[gerbil]

Ah. Your lsass.exe file in system32 is corrupt. There are a couple of options for you to choose from:
-use the Recovery Console to copy the lsass.exe file from C:\windows\system32\dllcache\lsass.exe to \system32
-use the Recovery Console to expand the file from the installation cd as follows:
C:\>Expand X:\I386\lsass.ex_ C:\Windows\system32 X would be your cd drive as seen by the RC. The command Map in the RC will show you the cd drive letter [it may not be what you think it is].
-connect the hard drive to your other computer to copy in a fresh lsass.exe; source as before is system32/dllcache/lsass.exe on that drive, or perhaps from the other system. This option is useful if you don't have either a cd or the RC on your machine. The RC is started by running Setup via the cd, then choosing the repair or recover option by pressing R.

[flagstar]

If your infected computer has working CD-Rom at least, then try to create Kaspersky Live CD instead. If you have already have Kaspersky running on other computer, open KAV and search for 'Create Rescue Disk', it'll burn a live cd for you and once done, insert it into the infected computer and reboot.

Follow all the instruction on the screen. Then open KAV scan and start scanning. This might take a while...

or use Malwarebytes software as Gerbil suggested. Mostly it'll find almost all infection and removed it immediately... You just need to download, install and run either quick or full scan...