HELP : laptop boot issue (lsass.exe 0xc0000008 error)

harris1986 · 17 Aug 2006 at 11:40

Ok guys my mum and dad's laptop has gone screwy and everytime i boot it up i get to the logon screen and receive a error message:

lsass.exe - System Error
Security Accounts Manager initialization failed because of the following error: The handle is invalid, Error Status: 0xc0000008. Please click OK to shutdown this system and reboot into Safe Mode, check the event log for more detailed information.

i have read that i need to do a os repair for my laptop using the laptop os disk! after inserting the disk i try to click repair and it asks for a administrator password? i have no idea what this is and it hasn't been changed from default but i don't know what the default pass is, does anyone know?

if anyone could help with either the problem, or let me know what the default admin password is would be really really helpfull

TheVoice · 17 Aug 2006 at 12:01

Have you tried just pressing Enter at that password screen?

harris1986 · 17 Aug 2006 at 12:04

yeah tried that to no avail

, it wouldn't be too bad if i could get into my desktop but i can't get there due to the problem so i can't even create a new password!

Tetras · 17 Aug 2006 at 13:42

Default administrator password is blank (i.e. nothing, not b l a n k), maybe someone entered password or something like that, just to get out of the install screen.

kitten · 17 Aug 2006 at 14:42

Is the machine up to date regarding OS patches?
boot into safe mode - without network. whilst in safe mode remove or disable network cards. Reboot system and if you can get in, scan for virii / trojans. This error CAN occur because of worm infection trying to exploit lsass.

Trigger · 17 Aug 2006 at 15:26

How many 's'es has lsass got- 2 or 3?

harris1986 · 17 Aug 2006 at 18:00

kitten said:
Is the machine up to date regarding OS patches?
boot into safe mode - without network. whilst in safe mode remove or disable network cards. Reboot system and if you can get in, scan for virii / trojans. This error CAN occur because of worm infection trying to exploit lsass.

it has 3, it's lsass.exe and kitten i can't get into desktop this is the problem, as the error screen comes up before i get to log on and no matter what mode i boot in i can't bypass it, think it's going to have to be a reformatt

which sux lol

Trigger · 17 Aug 2006 at 18:21

Looks like it's a format then. BTW, when I said how many 's'es, I mean at the end because lsasss.exe is a virus whereas lsass.exe is a legit windows process

kitten · 17 Aug 2006 at 19:03

OK If your current install is important and you want to try and recover it or any data on the partition before you re-format. There is a real useful Linux boot disk which contains all you need to recover data from an unbootable OS.

http://www.e-fense.com/helix/

You don't need much linux skill to use it, it is GUI based and it contains some hardcore tools. A bit more than general computer knowledge is required to use it fully. You could play around and scan the drive for virii with this disk. Even attempt to replace lsass or stop its execution by renaming it. Windows will replace the file when booted from a backup store. you can also edit windows registry and change passwords

I'm sure there are other free tools that will help too, depends how important recovery is to you.

I presume you tried the "Last known settings that worked" option.

good luck

ps helix is a downloadable iso image so u need to be able to write this to a CD