Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Svchost.exe application error leading to lsass.exe error


  • Please log in to reply
9 replies to this topic

#1 SirSkip

SirSkip

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:52 PM

Posted 05 May 2010 - 08:28 AM

I recently got a computer from a friend. He was having issues and just decided to buy a new one and give me his.

When I start the computer and it gets to the windows accounts logon page I have a svchost.exe Application error
The Instruction at"0x75099b19" referenced memory at "0x00000000". The Memory could not be written. Click ok to
terminate the program. If I click ok, that error goes away and lsass.exe error comes up. Lsass.exe has terminated unexpectedly
with the status code 1073741819, and then the computer restarts. Now if I don't close the svchost error and just let it
sit there, then I can do whatever I want on the computer, just have a little annoying popup there.

Any help would be appreciated, I have been trying to figure this out for about a week now.

EDIT: Moved from XP forum to more appropriate Am I Infected ~ Hamluis.

Edited by hamluis, 05 May 2010 - 01:34 PM.


BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:09:52 PM

Posted 05 May 2010 - 12:09 PM

Try running http://www.malwarebytes.org/mbam.php and http://www.superantispyware.com and post the results here. You might be infected.

#3 SirSkip

SirSkip
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:52 PM

Posted 05 May 2010 - 01:02 PM

Malwarebytes' Anti-Malware 1.46


Database version: 4069

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

5/5/2010 1:38:23 PM
mbam-log-2010-05-05 (13-38-23).txt

Scan type: Quick scan
Objects scanned: 134029
Time elapsed: 8 minute(s), 50 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


---------------------------------

SUPERAntiSpyware Scan Log


Generated 05/05/2010 at 02:01 PM

Application Version : 4.36.1006

Core Rules Database Version : 4852
Trace Rules Database Version: 2664

Scan type : Complete Scan
Total Scan Time : 00:27:53

Memory items scanned : 641
Memory threats detected : 0
Registry items scanned : 5858
Registry threats detected : 0
File items scanned : 14198
File threats detected : 1

Trojan.Agent/Gen-Nullo[Short]
C:\SYSTEM VOLUME INFORMATION\_RESTORE{D2598C00-6081-4B4D-91DD-C7DF36031B61}\RP11\A0017875.EXE



#4 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:09:52 PM

Posted 05 May 2010 - 01:11 PM

Can you perform a complete scan with Malwarebytes.

#5 SirSkip

SirSkip
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:52 PM

Posted 05 May 2010 - 01:46 PM

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4069

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

5/5/2010 2:44:41 PM
mbam-log-2010-05-05 (14-44-41).txt

Scan type: Full scan (C:\|)
Objects scanned: 169272
Time elapsed: 31 minute(s), 6 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\All Users\Documents\Desktop\PS-CS3_mokia\Adobe_Photoshop_CS3\Msvcrt.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Documents\Desktop\PS-CS3_mokia\Adobe_Photoshop_CS3\Shfolder.dll (Trojan.Agent) -> Quarantined and deleted successfully.


#6 SirSkip

SirSkip
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:52 PM

Posted 05 May 2010 - 02:56 PM

when i boot into safe mode, after about 30 seconds the computer restarts. im ran numerous virus scans, and malware bytes removed the last ones i could find. I have done some research but i can't really find anyone having a similar problem

#7 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:09:52 PM

Posted 06 May 2010 - 05:18 AM

Just a quick question is your copy of Photoshop Legit?

#8 SirSkip

SirSkip
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:52 PM

Posted 06 May 2010 - 08:18 AM

im not sure. i got it from a friend of mine and havent been able to really use it. i would really like to just reinstall windows, ive got the cd with service pack 3 that ame with my desktop, i just cant do it because my cd rom doesnt work right

#9 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:09:52 PM

Posted 06 May 2010 - 01:15 PM

I would go and buy a new CD/DVD Drive, and just reinstall windows. I wouldn't use that copy of Photoshop, and tell your friend that they ruined your computer.

#10 SirSkip

SirSkip
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:52 PM

Posted 06 May 2010 - 03:48 PM

alright, i figured thats what it would come to. I appreciate the help. I mean it was a free computer so 50-60 dollars for a new drive isnt to bad, just wanted to see if it could be fixed as is or not. thanks again




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users