Highly Trusted On Firewall? Svchost.exe And Lsass.exe
Dec 19, 2005
I've been getting a lot of generic process win32 problems to do with lsass.exe and svchost.exe and im wondering if this has anything to do with it.
In my ZoneAlarm Firewall program control, I have 'Generic Host Process Win32 Services' SVCHOST.exe as a very high trust level. The settings look like this:
Access
Trusted - Yes
Internet - Yes
Server
Trusted - Yes
Internet - No
As for 'LSA (Shell Export Version)' LSASS.exe it also has a very high trust level and the following settings:
Hardware: Compaq Presario x1000, Win XP Home SP1, 1.4 Ghz, 512 Ram.
Symptom: Lsass.exe is using about 60%, and svchost.exe is using about 40% (they move around up and down but are always using 100% together). Recently the computer semi died (after the login screen it would blue screen). I repaired to OS (the reinstall option for windows that leaves data and programs intact). Have chkdsk the HD (found and repaired errors), ran a defrag, ran diagnostics on the HD and RAM (all clean), and the computer still moves at a crawl. I've found a lot of articles about LSass.exe causing problems with win 2k domain controllers, but this is not win 2k, is not a domain controller, and is in fact not even on a domain. HijackThis log is clean as a whistle
I've been getting a message from 'startup mechanic' to advise me that program 'uuespo' c:windows/system32/uuespo.exe is attempting to run at system startup. I checked the description and it's meant to be a nuisance program that changes your IE homepage so I disabled it and deleted the file from the above path. when I right click 'start' and 'search' nothing happens, the same with left click 'start' 'search'. If I right click a folder in windows explorer and select 'search' nothing happens, but I can open windows explorer, then select search,but this only allows me to search the whole drive. So in my haste I deleted 'uuespo.exe' from the recycle bin. The program still seems to be install somewhere tho and startup mechanic is still flashing up messages telling me it's trying to register at startup. I'm also having problems within Internet explorer since this all started, in that it won't open pop-up screens from trusted sites.
I am trying to see if this cleaner is a trustes program that i could use because it found alot of regisrty stuff and i didn't want to do anything unless people were absolutly sure it doesn't mess up my comp here is the link if this is a trusted program thanks in advance for whoever answers this.
I went to a lot of trouble establishing a list of Trusted Sites in my security configuration. Now every time I want to enter one of these sites, windows tells me that one of my trusted sites (identifying it) wants to enter, should I let it? Does anyone know why this happens - what is the point of making a list if I am being asked anyway each time.
When trying to insall DirectX I get an error message stating "A cabinet file necessary for installation cannot be trusted. Please verify the Cryptographic Services are enables and the cabinet file certificate is valid."
I am using eTRust EZ firewall and just recently started having problems with it and the effect on my pc. First, it wouldn't let me select allow or ask under the access internet or trusted column under the program control. Now, it won't let me access the internet if the program control is turned to low, medium, or high. The only way for anything to get to the internet is if the setting is turned off
Archived from groups: microsoft.public.windowsxp.security_admin (More info?) Whenever I have blackwidow.exe running on this one particular PC, (other machines are fine) then lsass.exe goes to 100% and evrything runs very slowly.
Even if the app is just sitting idle, no network, no activity this will happen.
cpu usage sits at around 90-100% at times. lsass.exe 50% and gcasServe.exe 45% are using this percentage. this causes my pc to reboot.i noticed that when i shutdown windows anitspyware i no longer experience the problem.how could this be solved while running win-anitspyware
When I try to bootup a popup box with lsass.exe Application Error shows itself then when I click "OK" it is still there thus I have two popup boxes with the same message then I click "OK" again and all I have is a black screen and my curser.I reboot but turning the power off/on then I go to safe mode where I have no taskbar or icons and cannot use Ctlr+Alt+Del to bring up Task Manager.
My firewall settings are greyed out and a banner says some functions controlled by group policy but I have a home computer and no network administrator. I tried resetting the firewall setting and it didnt seem to work
I connect to the internet thru a router with a built in firewall.(turned on) I am also running a software firewall with comodo. Do I need the comodo firewall Every new update version of the comodo firewall seems to mess one thing or another up on my old winXP machine.
Windows XP Home running McAfee Security Center, which is not managing Security Center, and McAfee Personal Firewall is not installed.All Windows Critical Updates are applied.Windows Security Center says the Windows Firewall is off, Windows Firewall says it is on.
I have a WinXP Pro machine that I just had to do a repair install of XP SP2. All works fine until I run windows updates. The first thing windows updates will do is update itself. But then it will not install any other updates. I found a forum on this and started the following services:
Then I ran windows update again. This time I chose custom updates and started installing only a few updates at time to try to narrow down the offending one. When I got to the ones listed below and restarted my pc, I started getting errors that lsass.exe and services.exe failed to initialize properly (0xc0000096). Here are the last updates I installed:
I am going to try another repair install and update up to KB930178 but would appreciate any assistance in determining why these updates cause the lsass.exe and services.exe errors when restarting after they are installed.
Im asking help for anyone who know's to remove lsass.exe virus. This virus i driving me crazy, my flash usb create folders that i didn't create by my self and i can't delete the folder's even the folder's i create by my self. I click on folder and i go SHIFT+DELETE the folder hide ones and in 5 seconds he show again. And in my friend computer the folder convert in folder.exe so i can't open it.I tried to repair with COMBOFIX but didn't repair nothing.So i have format my usb and when format is done show a error table wich is like this:
Line 0 (file"C:winlsass.exe"): for$j = 1 to $filelist[0] for$j = 1 to $filelist^error error: subscript used with non-array variable
I will really apressiate any help cuz this virus has ifected my Computer too and i'm going crazy.
I have an XP machine that while booting, after the Windows XP Logo with the blue bar under it shows, receives a message box titled "lsass.exe - Application Error" with the message "The application failed to initialize properly (0xc00000ld). Click on OK to terminate the application." This occurs twice and then just sits on an empty black screen. It never reaches the login screen. I have tried booting to safe mode and the last good configuration and they both experience the same thing...
BACKGROUND: Got the computer with the problem from brother in law who lives hundreds of miles away. He had fixed it and was selling it. It was clean and in good working order except for the following: No boot disk provided. DVD & CD drives wouldn�t initialize automatically. Had to manually go find what you want to play and work with it til it played. Audio CDs would play. DVD never played dvds. Windows Media Player would not play FLV videos or MPEG4, MP4 videos, only avi. An error would come up saying there were not the correct codecs. By choice, this computer & our home does not have internet access, so I couldn�t go d/l drivers or fixes directly to computer. Using my laptop and a flash drive, I d/l GOM Player and installed it on his computer, and it would say the same thing. So I d/l codec packs using the same method. I ran Trend Micro scans on all files before putting them on the flash drive. They were either clean or cleaned. (It said this was cleaned : Locked successfully Troj_Gen.C33L9) Another something came up and quickly said something was successfully ignored.) This was before there was a problem. Began to install Klite_Codec_Pack_580_Mega. Checked all the boxes so all the codecs could run. It started installing lots, then toward end it got an error message saying it couldn�t register some big long numbers. I assumed it needed the internet to continue. It gave the choices to Abort, Retry, or Ignore (recommended). Each button produced the error message above and when you pushed OK it just looped. My husband restarted the computer thinking it would fix it and it began the problem stated at the beginning....
Ive read a million topics on this but almost all of them deal with OBVIOUS solutions to the problem. Well I've already updated my OS (newest security patches, service packs, etc...), Antivirus,adware removal...etc... and for about 30mins after a restart, the lsass.exe system process eats all my cpu power. Once its done my system runs like a charm, but those 30min restarts are a waste of time. It is really starting to annoy me. No this is not a virus (according to AVG, McAfee, etc...) problem, or an Adware (spybot,adaware) problem. It is the legitimate system process eating my resources.
When the computer tried to load into Windows I get a message saying that the WLDAP32.dll file is missing and that I need to install it. The computer will not load into any mode, including the Safe Mode. I then tried to load the file from the XP install disc and was told on a blue screen that Windows had to shut down due to not wanting to damage the computer. So, I cannot load into Windows in any mode and I cannot get the file from the Install CD.
Just bought a pre-owned Dell Inspiron 6000D, running XP. On first power-up, after what appears to be a normal boot-up, it displays a message window headed "lsass.exe System error". The error description says, "When trying to update a password this return status indicates that the value provided as the current password is incorrect." It never asks for a password to be entered, so this is puzzling.
Recently I had a BSOD problem 0x000007b after running ComboFix and so I ran a repair XP SP2/3 and the Blue Screen is gone but now during the Repair steps screen (The light blue screen with Step 1, Step2 and the Ads on the right for the various programs) I get lsass.exe Invalid Parameters Passed and a prompt "Ok" which reboots my computer.
I'm running xp home edition on my dell system. When I tried to boot up, the screen went black and I got the system error message. From there you can only click ok, the system reboots and goes thfough the same process. It also does it in safe mode. I've tried to use "the last known working configuration" from the f8 screen, same thing.I was going to try a repair install, but for some reason I have a xp pro disk, not home edition. Can I do a repair using this disk (it's a dell disk)? Or am i going to have to wipe everything out and install xp pro to get the system to work.
Ok I'm getting this message now saying that something called lsass.exe is causing my pc to just shutdown while I'm right in the middle of something. And, earlier today I deleted some registries by mistake and computer just went haywire. I think for the most part I got them fixed but now pc freezes up and some sites take forever for me to load or certain programs like musicmatch radio and mtv.com.
I have a new system at home which I am getting ready to roll out. I have always used Norton Security on all my PCs prior to using XP Pro. This new system has XP Pro. Should I , or maybe should I say can I run both Norton and XPs firewall with no problems Don't want to keep paying for annual subscription updates to Norton, if I don't have to
I have Windows XP and have the windows firewall on. I also have Norton 2005 Systemworks. Funny thing happened, I turned off the windows firewall under control panel, windows firewall. But when I open control panel, security center, it says there is a firewall on. I don't beleive I have a firewall with Norton Systemworks
I have a friend who has a problem with his laptop. It has no floppy drives, has a DVD RW drive, and plenty of storage space.Enough background; the pr Running XP Home edition SP1 his computer will not boot far enough for one to log on, Any safe mode or other wise. The error message is that lsass.exe System Error: "Object not found." He can click on OK or the X and the system reboots to run through the loop again. I've read that an executable has to be run to enable a service needed... however I can't run that from the command prompt offered on the recovery console of the XP Home cd. (someone else's CD since his version is OEM and there is no cd that he has).
I went to bed 2 nights ago with a statistical program running on my computer. I woke up the next day to find a black screen with a small window with an error message. It said: "lsass.exe - System Error" "Object Name not found." When I click OK, the computer tries to restart.it shuts down, but then when trying to reboot it comes back to the black screen with the error message.
When I start my computer svchost one of the many goes crazy pushing CPU up to 100% and it's mem usage to about 90k. At the same time, wuaclt goes up to about 30k, which is also not normal.
