Re: LSA Shell (Export Version) Message: "LSA Shell encountered a problem Windows is shutting down and must be restarted"

From: Michael Solomon \(MS-MVP Windows Shell/User\) (user_at_#notme.com)
Date: 04/29/04 

Date: Thu, 29 Apr 2004 13:22:16 -0700

I actually ran across that site when I was try to run this down for you and
it was one of the reasons I made this suggestion. When a lot of people are
suddenly experiencing the same issue a virus is the first thing to suspect.
I had no way of knowing you had already done so nor from your original post
did I have any idea of what you had already done.

Regardless of virus scans run by others, I still felt it was a good first
approach as one of the next steps is to possibly modify the registry. I'd
prefer not to start with that.

If this is a relatively recent issue, the next thing to try would be a
System Restore back to a time prior to when this began. It only restores
the system state and settings. Start\All Programs\Accessories\System
Tools\System Restore

If that fails, the following assumes you have an actual XP CD as opposed to
a restore CD or
restore partition supplied by your PC manufacturer.

Go to Start, type sfc /scannow in the run box and press enter. Note, there
is a space between sfc and the forward slash. You will be asked for your XP
CD. Be aware, upon inserting the CD the XP setup screen may appear, this is
not a part of sfc /scannow, rather it is being invoked by autorun. Simply
minimize the screen and allow sfc to continue.

If that fails, here's something I found on Google from Shain Wray of the
Microsoft PSS Security team:

It is possible that the registry ACL for the key Lsa may not be set to the
default.
The default ACL for the key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
is:

Administrators Read & Full Control
Authenticated Users Read
CREATOR OWNER (*SPECIAL*) Full Control to Subkeys only
Server Operators Read
SYSTEM Read & Full Control

Before attempting the above, I'd suggest exporting the registry key by right
clicking the key and selecting export in case you need to bring it back into
the registry. NOTE: you access the registry by going to Start and typing
regedit in the run box.

You should also make sure your data is backed up as well. 

-- 
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/
"Eden V" <anonymous@discussions.microsoft.com> wrote in message 
news:8FF27EB9-8B43-4BBF-9CD9-23AD6735ABF5@microsoft.com...
> Michael,
>
> If you take a look at the link below, you'll see that several other folks 
> have suffered with the same problem.  Just like them, the very first thing 
> I tried was running the virus scan which came up empty handed, ("no 
> viruses found").  It's very frustrating having my computer reboot over and 
> over after just a short time.  I hope to find a solution for this soon. 
> I'm told that it's a known problem with Windows XP.
>
> http://www.computing.net/security/wwwboard/forum/11377.html
>
>     ----- Michael Solomon (MS-MVP Windows Shell/Us wrote: -----
>
>     There are a few possibilities here but to be safe, you should start by
>     making sure your antivirus software is up to date and run a scan on 
> your
>     system.  Also, download, install and run Ad Aware:
>     www.lavasoftusa.com.
>
>     If they come back clear, post back and we'll start looking into other
>     possibilities.
>
>     -- 
>     Michael Solomon MS-MVP
>     Windows Shell/User
>     Backup is a PC User's Best Friend
>     DTS-L.Org: http://www.dts-l.org/
>
>     "Eden V" <anonymous@discussions.microsoft.com> wrote in message
>     news:A834453C-A592-415E-AA08-140EAA8E78E9@microsoft.com...
>     > Just a couple months ago, I installed Windows XP.  Now all of a 
> sudden,
>     > I'm getting an error message in a warning dialogue box which says, 
> "LSA
>     > Shell (Export Version) encountered a problem".  There is s small 
> countdown
>     > within that dialogue box giving me 45 seconds to save things so that
>     > windows will restart.
>     >> Now, each time I turn on my computer, withing 10 to 20 mins. I get 
> this
>     > same error message and my computer shuts down and restarts.  There 
> is no
>     > way to stop it from shutting down and it's intensely frustrating!
>     >> Can anyone tell me how to fix this problem?
>
>
>

Relevant Pages

  • RE: Error 1406
    ... please post the screen capture of the error message: ... >the Windows operating system. ... >Microsoft document drticle number Q236592, ... >Do not use the registry key given in the Microsoft ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Networking, registry and more problems!
    ... "Windows cannot display the Properties of this connection. ... use System Restore to restore Windows to an earlier time ... The Magnuson-Moss Warranty Act ... "One of the files containing the system's Registry data had to be ...
    (microsoft.public.windowsxp.general)
  • Re: IRQ BSOD
    ... service was still using the registry during log off. ... The memory used by the ... Windows cannot unload your classes registry file - it is still in use by ... You receive a "Stop 0x0000000A" error message in Windows XP ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: windows cannnot find the rundll32.exe
    ... Prepare System Restore" error messages in Windows XP ... Important This article contains information about modifying the registry. ... you may receive the following error message: ... the article in the Microsoft Knowledge Base: ...
    (microsoft.public.win2000.printing)
  • Re: Im an idiot with a recovery console
    ... There is no Registry modification thing in Recovery console but if you ... Windows XP but no Microsoft programs are working with the afore ... use the generic restore system in XP thats all turned off but I know ... I started an XP installation i have on a seperate ...
    (microsoft.public.windowsxp.perform_maintain)