lsass.exe (not quite related to the virus)

[sleepytoes]

arghhhh... you will probably laugh after reading this. my flatmate did.
after much frustration (and obviously a lack of brains) with the sasser worm, i fixed it with the tool from symantec, but also managed to delete lsass.exe. (talk abt having "itchy" fingers). now i can't get past the blue screen that appears up after windows starts up. this is probably happening because of the deletion of lsass.exe. does anyone know how i can replace the file it without reformatting?

[Tweaker]

Hello sleepytoes, welcome to CTH.

Not exactly sure if this is what your referring to, but give it a look over.


If not here is another link that might shed some light on your problem.


http://search.support.microsoft.com/...edSearch_Query

[sleepytoes]

Thanks. Will keep looking into it. Tried the first link and it seems like the Directory Service Repair Mode thinks the system is "safe" and sends me straight into another blank safe mode screen. I think I will send it in for servicing and let you know what the problem was (just for interest sake).

[sleepytoes]

come to think of it. maybe it's not lsass.exe that's causing the problem...

[Murf]

lsass or lsass.exe
Process Name: Local Security Authority Service
Description: Windows Local Security Authority Server Process handles Windows security mechanisms. It verifies the validity of user logons to your computer or server. Technically, the software generates the process that is responsible for authenticating users for the Winlogon service.
Company: Microsoft Corp.

Look HERE it is part of the service pack, maybe download and install replaces it.