This article has been archived. It is offered "as is" and will no longer be updated.
On a Microsoft Windows 2000-based computer, a service appears in Event Viewer that is called "Local security authority sub system (LSASS)." This is not a valid Microsoft service. The service does not start in Windows 2000, and you receive the following error message:
The specified file could not be found
Additionally, the Server service and the Workstation service may not start.
This problem occurs because the computer is infected by one of the following kinds of software:
The software may cause the Server service and the Workstation service not to start.
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows
To resolve this problem, remove the dependency on the LSASS service for the Server service and for the Workstation service. To do this, follow these steps:
Click Start, click Run, type regedit, and then click OK.
Locate and then click the following registry subkey: