Keep getting lsass.exe status code 128 which shuts down my system after being online

By chadk
Jan 16, 2006
Topic Status:
Not open for further replies.
  1. lsass.exe keeps coming back after I have done gdisk... rebuilt the system twice. Put symantec anti-virus on before I went online and have current virus defs. Checked symantec's removal tool section and only found W32.Sasser removal tool. Ran removal tool and found nothing!!! Tried running AD-Aware and Spybot and doesn't find lsass.

    Help!
  2. howard_hopkinso

    howard_hopkinso Newcomer, in training Posts: 25,948   +19

    Hello and welcome to Techspot.

    "lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC/Server. It generates the process responsible for authenticating users for the Winlogon service. This process is performed by using authentication packages such as the default Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates inherit this token. More info

    Note: The lsass.exe file is located in the c:\windows\System32 folder. In other location, lsass.exe is a virus, spyware, trojan or worm!

    Regards Howard :wave: :wave:
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.