[bouznk]

D:\i386>dir /p
the volume is drive d is xpsp1a_eng_per
the volume serial number is

directory of D:\i386\p
no matching files were found

[Advertisements]

drop the /p and just type dir then.

[diabillic]

drop the /p and just type dir then.

[bouznk]

alright i found it lsass.ex_

[bouznk]

whats next

[diabillic]

expand lsass.ex_ c:\windows\system32\lsass.exe

If the above does not work, try the full path

expand d:\i386\lsass.ex_ c:\windows\system32\lsass.exe

Edited by Cilix, 03 June 2009 - 06:18 PM.

[bouznk]

its saying the same thing unable to create file lsass.exe . 0file<s> expanded

[diabillic]

Hmm, since you cannot boot to Safe Mode and cannot replace the file via the recovery console the next step would be do a repair install of windows.

Please follow this guide and let us know when it is complete. After repair, lets boot to Safe Mode and get rid of Comodo.

http://michaelsteven...rinstall.htm#RI

[bouznk]

will i lose all my stuff

[OpenOutcome]

I'm pretty sure the problem is:
That lsass.exe is being blocked by the firewall, so no matter how many times you expand or replace lsass from the boot cd, it will still be blocked. I'm still trying to figure out how to get to the comodo interface without being able to logon.

When you normally start the computer, and the message comes up, you can't use ctrl + alt + delete can you?

-Jason

[bouznk]

after the windows logo it goes to a black screen with mouse cursor theres no message and no i cant use ctrl alt delete

[diabillic]

I'm pretty sure the problem is:
That lsass.exe is being blocked by the firewall, so no matter how many times you expand or replace lsass from the boot cd, it will still be blocked. I'm still trying to figure out how to get to the comodo interface without being able to logon.

When you normally start the computer, and the message comes up, you can't use ctrl + alt + delete can you?

-Jason

Yes your probably right.

Lsass.exe creates the access token for logins, so without it running you wont be able to login period. A repair install appears to be the best course of action right now. And no, you will not lose any information if you follow the link I posted and do a repair install.

[OpenOutcome]

Not that I am a super hacker or anything.. but what about a live cd of linux or something. You can access the windows files on the hd, and delete, or change them. If you could get into your comodo files, maybe there's a way to disable or delete the part that is blocking lsass.
Would probably mess up comodo.. but if you just copied the files you delete onto a cd, and then replace them while your on, and make sure you DISABLE the lsass blockage..

Or you could just repair install.. idk.

[bouznk]

well im using a xp home ed cd but im using xp pro will this still work

[diabillic]

Not that I am a super hacker or anything.. but what about a live cd of linux or something. You can access the windows files on the hd, and delete, or change them. If you could get into your comodo files, maybe there's a way to disable or delete the part that is blocking lsass.
Would probably mess up comodo.. but if you just copied the files you delete onto a cd, and then replace them while your on, and make sure you DISABLE the lsass blockage..

Or you could just repair install.. idk.

Well, unless you knew EXACTLY where they were, including the registry. Also, it may wrap itself into some crucial .dll files used by Windows so deleting the wrong thing will completely hose it and require a repair anyway or even a new install.

Using an XP Home CD should not make a difference.

[bouznk]

alright im at the screen where it gives 3 choices to press enter, c , or d

C: partition1 [ntfs] 76309mn
unpartition space

what do i use