LSA shell problem

[ohheckyeah]

and corrupted Event Viewer Log.

I don't know what happened but I am having a problem with a LSA shell problem and sometimes the computer shuts down right after start up and I receive a LSA shell encountered a problem error message.

I went to the event viewer and the System event log was corrupted.

Any ideas?

[ChromeFoundry]

1. What version of Windows?

Are you connected to a domain or just a workgroup?

Any errors in the event logs would be helpful. May want to clear the System log and reboot.

[ohheckyeah]

2. I'm running Windows XP.

I've run a virus scan, Malwarebytes, SuperAntiSpyware and now a special Stinger scan.

The event log was corrupted.

[ChromeFoundry]

7. Sounds like you had a failed uninstall

of the LogMeIn service...

Download the AutoRuns.exe found in the download link:
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

Run AutoRuns.exe and search for the following application names:
LMIinfo, LMIMaint, Lmimirr, LMIRfsClientNP, LMIRfsDriver, And LogMeIn

Disable any that you find...Reboot.

If you want to play Magellan - you can right-click "My Computer" -> "Manage" -> Devices
Show hidden devices if there are any hidden.
Right-Click on the LogMeIn device, "Uninstall"

That should get you back where you need to be.

Scan for viruses, malware, etc...
Get a copy of CCleaner and clean up the system.
Get a copy of Defraggler and let it run over night.

[ohheckyeah]

17. I bet that's it.

I think I did uninstall Log Me In.

The link above doesn't work.

I found a LogMeIn kernel error and deleted it.

I'll let you know what happens.



WELL, that wasn't the problem. The problem seems to be with something Ace Utilities is deleting from the registry. I restored the last registry items deleted and restarted without getting an error.

I've never had problems with Ace Utilities before and maybe it's just a fluke and completely unrelated. I don't know.

So confused. I'm thinking seriously about wiping the hard drive and reinstalling an OS.

[ChromeFoundry]

19. his is the link to the actual download

of the system internals utility:

http://download.sysinternals.com/Files/Autoruns.zip

[ohheckyeah]

20. The help file in that doesn't work.

What is it for? My system is getting ready to shut down.

[BlueJazz]

3. You're infected...maybe sassar virus.

LSA (Local Security Authority) is a valid process but when it shows up as LSA Shell (export version) it's a worm.

There's lots of ways to fix it...the easiest is put your drive on another computer as a slave and run anti-virus stuff through it.

[ohheckyeah]

4. Not easy when you have no idea what you are talking

about. Sorry.

Here's the error I'm getting in the event viewer:

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 4/26/2011
Time: 8:20:50 PM
User: N/A
Computer: DESKTOP
Description:
The LogMeIn Kernel Information Provider service failed to start due to the following error:
The system cannot find the file specified.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

I ran the special tool for that worm and it wasn't found.

[ohheckyeah]

5. How can that be

when it was created in 2004?

I don't see a Local Security Authority file in Windows System 32 but I do see the export version.

[BlueJazz]

6. Thanks....anyway....you WERE corrupted. Still....Do what Techs do......

...not what non-tech people do.

Non-tech people spend hours and hours fretting and searching for solutions to computer system file corruption.

Techs save the files....wipe the disk...install OS...put files back and programs (if possible) in 1/2 the time that others spend seaching for answers that may or may be right.

If you have expensive programs and/or no disks for such programs then try to fix the computer the slow, drawn-out way.
otherwise...Get her done in 2 hours and enjoy life.

[ohheckyeah]

8. I'm not saying you are wrong

but I'm asking how that file can be the problem when it was created in 2004. I can't find any lsass.exe file except for the export version.

I would be happy to wipe the disc if I knew how.

Not everyone has your level of expertise....I obviously don't.

[BlueJazz]

9. Viruses come in many "Flavors". some change a dll (Dill) file just enough to...

...mess with You/Computer. They can change a file without changing the Header (Header has the file size, date and many other attributes.)
Some ADD to a system configuration and do other wonderful things! (Kidding)

Best bet on some systems is to really just start over and clean out everything.

What Brand and model computer do you have?
Maybe I can "Walk you" though the setup or at least tell you what to do. :) :)

[ohheckyeah]

10. Thanks very much.

I don't mean to be difficult. I'm just freaked out. I have $2000 worth of Adobe Software on this computer which means I have to deactivate it all and hope that it reactivates when I reinstall it.

I have a Dell Dimension 3000 and I'm running Windows XP, Home Edition, Service Pack 3. I have the Windows XP disc. (Paid extra for it when I got the computer.)

I need to make sure I have everything backed up to the external hard drive before I do anything. Should I back up anything on a flash drive as well or is the external good enough?

Thanks for the help.

[BlueJazz]

11. More later but for now...Never, EVER back-up on just one thing.

:)
I have horror stories of clients "Getting their files reinstalled" and finding out that those
Adobe Audition 3 files are "Kinda' corrupted. :)

The odds are high that one back-up source is fine and if you want to save a few songs and old pics...fine.
Anything else....He'll get you! (Murphy's Law) :)

[ohheckyeah]

12. Okay.

I'll work on that tonight.

I wonder why none of the virus programs can find the sasser worm that would cause this?

[BlueJazz]

14. Depends on their updates and IF it was a variation of sassar.

Also...lately there are new worms/viruses that are updated versions of old favorites.
Can be hard to catch.

[ChromeFoundry]

16. Because it is probably not a virus

LogMeIn has a lot of issues when you attempt to uninstall it. See my post 7.

Or, you can always try to scavenge what you can from your system and restore/reinstall... good luck with that. It will probably run quite fast with all that missing software.

[BlueJazz]

13. Shouldn't have any trouble reactivating Adobe. I've done mine twice.

There are ways to fix your problem without reinstalling everything but I hesitate to try to show you via Web.

Actually, it will be an easy thing to do with your install disk.

You can look at this:

http://support.microsoft.com/kb/978307

[ohheckyeah]

15. If I upgrade to

Windows 7 would I follow basically the same procedure? If I have to install an OS why not upgrade?

[Earth Bound Misfit]

26. You won't find Windows 7 drivers for your PC

http://support.dell.com/support/downloads/driverslist.aspx?c=us&l=en&s=gen&os=WW1&osl=en&catid=&impid=&SystemID=DIM_CEL_3000

[ohheckyeah]

18. That's good to know.

That's the main reason I've hesitated to upgrade to Windows 7.

[BlueJazz]

21. First, you'd have to increase your ram...which is no big deal nowadays.

Prices on ram is fairly cheap.
Later....
Just looked up specs on your 3000...
256 ram ...too Low
40 gig hard drive...getting WAY too old.

MY opinion if you want to move up to Windows 7...buy another Computer
The reasons
Memory cost 80-100 dollars
Windows 7 100
hard drive 75-100

You're getting into the realm of the price of a new unit like this>

http://www.compusa.com/applications/SearchTools/item-details.asp?EdpNo=7203491&Sku=SYX-3087

But of course, I don't know your financial situation...so ??????

[ohheckyeah]

22. I have 2 GB

of RAM. I upgraded to that a year or so ago. And I have a 500 gig hard drive that I put in about the same time.

[BlueJazz]

23. Oh...Very Cool and good for you. No problems then.

:)

[ohheckyeah]

24. That's one reason I hate to ditch this computer.

I put in a new graphics card, 2 gb of ram and a 500 gb hard drive.

Evidently there is a problem with using a keyboard during the repair process from the XP disc. I don't know how to fix that but I'm working on it.

*sigh*....at least the computer started today and has shut down on me so far.

[BlueJazz]

25. "keyboard during the repair process from the XP disc."

That's a common "thing"

USB is not installed yet.
I keep an old non-usb keyboard around just for installing Windows. :)

[ohheckyeah]

27. I could probably scrounge one up somewhere.

Since I restored the registry in CCleaner the problem seems to have gone away. We'll see.

My husband told me to go ahead and buy a new desktop. I work from home on it and use it for graphics and Photoshop and it would be nice to upgrade. Just how far I am going to upgrade is the question. I'm looking at:

OS Genuine Windows® 7 Home Premium, 64Bit, English
Processors Intel® Core™ i7-2600 processor(8MB Cache, 3.4GHz)
Memory 8GB DDR3 SDRAM at 1333MHz - 4 DIMMs
Video Card ATI Radeon HD 5450 1GB DDR3
Hard Drive 1TB - 7200RPM, SATA 3.0Gb/s, 16MB Cache
Optical Drive Blu-ray Combo Drive (8X BD-R, DVD+/-RW) with DVD+R double layer write capability
Sound THX® TruStudio PC™
Speakers Bose Companion 2 Series II Multimedia Speaker System
Wireless Dell 1501 Wireless-N PCIe Card

What ya think?

Question.....does most 32 bit software run on a 65 bit Windows 7 OS okay? I think my CS5 Web Premium software has both on the install disc but am not positive. The only other important program I have is Quark XPress and I don't know if it will run on the 64 bit. Do you know?