Article ID: 951025 - View products that this article applies to.
This article has been archived. It is offered "as is" and will no longer be updated.
On a Microsoft Windows 2000-based computer, a service appears in Event Viewer that is called "Local security authority sub system (LSASS)." This is not a valid Microsoft service. The service does not start in Windows 2000, and you receive the following error message:
Additionally, the Server service and the Workstation service may not start.
The specified file could not be found
This problem occurs because the computer is infected by one of the following kinds of software:
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756To resolve this problem, remove the dependency on the LSASS service for the Server service and for the Workstation service. To do this, follow these steps:
(http://support.microsoft.com/kb/322756/ )How to back up and restore the registry in Windows