Found a working sollution at
http://computing.net/windowsxp/wwwbo...rum/46198.html
Had to make a few variations on that post but the idea was the same so you should be able to work this out yourself too.
If I'm correct what this does is simply a system restore but then not only once like the bootup choice let's you do but up to 4 times (in my case).
If anybody thinks this is not so, please let me know.
And if this little bit is the sollution for you, please post a message here.
and now the texst just in case the other site goes down
Quote:
Name: TripleA
Date: October 27, 2002 at 02:21:16 Pacific
Subject: Fix for lsass.exe & related errors.
OS: Windows XP
CPU/Ram: Any
Comment:
After leaving my PC to download overnight, i rebooted in the morning only to get and error similar to:
"lsass.exe system error - invalid parameters passed to function or service"
I thought WTF? and after a few reboots i knew it was screwed. My guess is that someone has hacked me (for what reason i will never know) or i had been infected with some kind of p00fter virus.
Now this got me angry. But most of all i wanted to use my PC again, without having to fdisk, format etc.
So i traced the problem back to a few of XP's startup files which are loacted in windows\system32\config. Now these files contain information about your software, user accounts, and many other things. This is why you are unable to alter or modify them from within windows itself.
BUT this is where you have to be tricky. You could either get your hands on another Hard Disk with XP, or use something like ntfsdos. Basically you will need something that can read your Hard Disk.
Anyway after fooling around for a bit i came across a folder that i had never really taken much notice of. Its:
c:\System Volume Information
This is a hidden and protected folder that amazingly enough keeps what are know as system restore points for you. Basically it takes note of nearly everything you do.
In this folder there will be some wierd looking folders like:
_restore{87BD3667-3246-476B-923F-F86E30B3E7F8}
if you browse through these you will find other files named something like RP01 or RP35, etc...
Bascially find the one with the highest number and in it will be another folder named snapshot, and in this folder are the files which you need to recover your system:
_registry_user_.default
_registry_machine_security
_registry_machine_software
_registry_machine_system
_registry_machine_sam
copy these files to a temp directory and rename them to:
default
security
software
system
sam
now you will need to delete the offending files in c:\windows\system32\config and replace them with the new files.
If you get the same error go back and choose another folder (the RP01 etc) to restore from.
After doing so you will be able to boot up and use your PC again.
|