Jump to content

Lsass.exe


rikkkki

Recommended Posts

Yes, the mouse is "glitchy" to say the least. Everytime it starts acting up I go into the properties and reclick the button selection "close application"( for the middle button) and click OK and then it works again, for awhile. Also, I keep getting that system error that a "Human Interface Device,,,,,, failed to connect"(or something like that) I think I posted it once a while back

BTW I will look for that bootlog. txt :oops: :oops:

did you reboot after changing the reg entries, then hit f8 then select boot logging?

Link to comment
Share on other sites

  • Replies 615
  • Created
  • Last Reply

Top Posters In This Topic

Right now, but I did find yesterdays bootlog. Is that enough or do you want a fresh bootlog after rebooting now?

Fresh would be better.  The changes you made might have an effect on the bootlogging but is supposed to increase the information in your event logs.  After the reboot, look at each log carefully to see if the error is caught in there, with more info.  Hopefully! :)

BTW:  I'd wait on ripping your cd drives out until we see whats in the logs and possibly the mouse replace, if you're going to do it.

Link to comment
Share on other sites

Here is the last entry:

Service Pack 2 7 14 2005 18:08:22.500

Loaded driver WINDOWSsystem32ntoskrnl.exe

Loaded driver WINDOWSsystem32hal.dll

Loaded driver WINDOWSsystem32KDCOM.DLL

Loaded driver WINDOWSsystem32BOOTVID.dll

Loaded driver ACPI.sys

Loaded driver WINDOWSsystem32DRIVERSWMILIB.SYS

Loaded driver pci.sys

Loaded driver isapnp.sys

Loaded driver ohci1394.sys

Loaded driver WINDOWSSystem32DRIVERS1394BUS.SYS

Loaded driver pciide.sys

Loaded driver WINDOWSsystem32DRIVERSPCIIDEX.SYS

Loaded driver viaide.sys

Loaded driver MountMgr.sys

Loaded driver ftdisk.sys

Loaded driver dmload.sys

Loaded driver dmio.sys

Loaded driver PartMgr.sys

Loaded driver sfsync02.sys

Loaded driver VolSnap.sys

Loaded driver atapi.sys

Loaded driver disk.sys

Loaded driver WINDOWSSystem32DRIVERSCLASSPNP.SYS

Loaded driver fltmgr.sys

Loaded driver sr.sys

Loaded driver KSecDD.sys

Loaded driver Defrag32b.sys

Loaded driver Ntfs.sys

Loaded driver NDIS.sys

Loaded driver sfhlp02.sys

Loaded driver sfdrv01.sys

Loaded driver nv_agp.sys

Loaded driver Mup.sys

Loaded driver SystemRootSystem32DRIVERSamdk7.sys      Mobile Power driver for AMD Athlon

Loaded driver SystemRootsystem32DRIVERSusbohci.sys

Loaded driver SystemRootsystem32DRIVERSusbehci.sys

Loaded driver SystemRootsystem32DRIVERSNVENET.sys

Loaded driver SystemRootsystem32driversnvax.sys

Loaded driver SystemRootSystem32DRIVERSimapi.sys

Loaded driver SystemRootSystem32DRIVERScdrom.sys

Loaded driver SystemRootSystem32Driversincdrm.SYS

Loaded driver SystemRootSystem32DRIVERSInCDPass.sys

Loaded driver SystemRootsystem32DRIVERSnv4_mini.sys

Loaded driver SystemRootsystem32DRIVERSserial.sys

Loaded driver SystemRootsystem32DRIVERSserenum.sys

Loaded driver SystemRootSystem32DRIVERSparport.sys

Loaded driver SystemRootSystem32DRIVERSi8042prt.sys

Loaded driver SystemRootSystem32DRIVERSkbdclass.sys

Loaded driver SystemRootSystem32DRIVERSaudstub.sys

Loaded driver SystemRootSystem32DRIVERSrasl2tp.sys

Loaded driver SystemRootSystem32DRIVERSndistapi.sys

Loaded driver SystemRootSystem32DRIVERSndiswan.sys

Loaded driver SystemRootSystem32DRIVERSraspppoe.sys

Loaded driver SystemRootSystem32DRIVERSraspptp.sys

Loaded driver SystemRootSystem32DRIVERSmsgpc.sys

Loaded driver SystemRootSystem32DRIVERSpsched.sys

Loaded driver SystemRootSystem32DRIVERSptilink.sys

Loaded driver SystemRootSystem32DRIVERSraspti.sys

Loaded driver SystemRootsystem32DRIVERSrdpdr.sys

Loaded driver SystemRootSystem32DRIVERStermdd.sys

Loaded driver SystemRootSystem32DRIVERSmouclass.sys

Loaded driver SystemRootSystem32DRIVERSswenum.sys

Loaded driver SystemRootSystem32DRIVERSupdate.sys

Loaded driver SystemRootSystem32DRIVERSmssmbios.sys

Loaded driver SystemRootSystem32DriversNDProxy.SYS

Did not load driver SystemRootSystem32DriversNDProxy.SYS  central driver for running residential dsl

Loaded driver SystemRootsystem32DRIVERSusbhub.sys

Loaded driver SystemRootsystem32driversnvapu.sys

Did not load driver SystemRootSystem32Driverslbrtfdc.SYS  Toshiba Libretto floppy controller

Did not load driver SystemRootSystem32Driversi2omgmt.SYS  I2O Utility Filter  Not sure about this one... need more research

Did not load driver SystemRootSystem32DriversChanger.SYS  SCSI CD-ROM Driver

Did not load driver SystemRootSystem32DriversCdaudio.SYS  CD-ROM Audio Filter Driver

Loaded driver SystemRootSystem32DriversFs_Rec.SYS

Loaded driver SystemRootSystem32DriversNull.SYS

Loaded driver SystemRootSystem32DriversBeep.SYS

Loaded driver SystemRootSystem32driversvga.sys

Loaded driver SystemRootSystem32Driversmnmdd.SYS

Loaded driver SystemRootSystem32DRIVERSRDPCDD.sys

Loaded driver SystemRootSystem32DriversInCDfs.SYS

Loaded driver SystemRootSystem32DriversInCDrec.SYS

Loaded driver SystemRootSystem32DriversMsfs.SYS

Loaded driver SystemRootSystem32DriversNpfs.SYS

Loaded driver SystemRootSystem32DRIVERSrasacd.sys

Loaded driver SystemRootSystem32DRIVERSipsec.sys

Loaded driver SystemRootSystem32DRIVERStcpip.sys

Loaded driver SystemRootSystem32DriversaswTdi.SYS

Loaded driver SystemRootSystem32DRIVERSnetbt.sys

Loaded driver SystemRootSystem32vsdatant.sys

Loaded driver SystemRootSystem32driversws2ifsl.sys

Loaded driver SystemRootSystem32driversafd.sys

Loaded driver SystemRootSystem32DRIVERSnetbios.sys

Did not load driver SystemRootSystem32DRIVERSprocessr.sys  Processor Device Driver

Did not load driver SystemRootSystem32DriversPCIDump.SYS  cant find info on....  More research needed

Did not load driver SystemRootSystem32DRIVERSredbook.sys  Redbook Audio Filter Driver

Loaded driver SystemRootSystem32DRIVERSrdbss.sys

Loaded driver SystemRootSystem32DRIVERSmrxsmb.sys

Loaded driver SystemRootsystem32DRIVERSipnat.sys

Loaded driver SystemRootSystem32DRIVERSwanarp.sys

Loaded driver SystemRootSystem32DriversFips.SYS

Loaded driver ??C:Program Filesewidosecurity suiteguard.sys

Loaded driver SystemRootSystem32DriversAavmker4.SYS

Loaded driver SystemRootSystem32DRIVERSusbprint.sys

Loaded driver SystemRootSystem32DriversLHidUsb.Sys

Loaded driver SystemRootsystem32DRIVERSLHidFlt2.Sys

Loaded driver SystemRootSystem32DRIVERSmouhid.sys

Loaded driver SystemRootsystem32DRIVERSLMouFlt2.Sys

Loaded driver SystemRootSystem32DriversCdfs.SYS

Did not load driver SystemRootSystem32DRIVERSrdbss.sys  Redirected Drive Buffering SubSystem Driver

Did not load driver SystemRootSystem32DRIVERSmrxsmb.sys  Windows NT SMB Minirdr

Loaded driver SystemRootSystem32DRIVERSmrxdav.sys

Loaded driver SystemRootSystem32DriversParVdm.SYS

Loaded driver SystemRootSystem32DriversaswMon2.SYS

Loaded driver SystemRootSystem32DriversDefrag32.SYS

Loaded driver SystemRootSystem32DRIVERSsrv.sys

Loaded driver SystemRootsystem32driverswdmaud.sys

Loaded driver SystemRootsystem32driverssysaudio.sys

Loaded driver SystemRootsystem32driverssplitter.sys

Loaded driver SystemRootsystem32driversaec.sys

Loaded driver SystemRootsystem32driversswmidi.sys

Loaded driver SystemRootsystem32driversDMusic.sys

Loaded driver SystemRootsystem32driverskmixer.sys

Loaded driver SystemRootsystem32driversdrmkaud.sys

Did not load driver SystemRootsystem32DRIVERSipnat.sys  IP Network Address Translator

Loaded driver SystemRootSystem32DriversHTTP.sys

Loaded driver SystemRootSystem32DriversaswRdr.SYS

Loaded driver SystemRootsystem32driverskmixer.sys

Whew.... I'm not sure if some of these need to be loaded or not, but it could be any one of them IF they are supposed to load.  Have you had trouble burning cd's?

  Noted each with info on what they do or are.... 

EDIT:  How do your event logs look?

EDIT2:  Check this out.....  About the redbook.sys entry........  http://www.greatis.com/appdata/n/r/redbook.sys.htm

Maybe the issue?

Here is another troubleshooting tip I just found, if you want to try it. I believe you can add these thru the control panel>system icon then  startup,.....

add the following options to the BOOT.INI line:

/noguiboot /sos /bootlog

These turn off the graphical screen, display each driver as it loads, and save a bootlog to %WINDOWSntbtlog.txt

I must sign off for now.  Beddy-bye time

:haha: :haha:

Will be back tomorrow.  Good luck and have a good evening!  :):icon_salut:

Link to comment
Share on other sites

Thats good that the mouse is behaving itself.  I'm takin gthe night off.  Porbably hav another of those headaches tomorrow..... oh well..............  :icon_shaking:  (extreme DT's ?)  :haha: :haha:  If you didn't try ms antispyware, give it a go.  It's helping me with this pos hp I'm working on.  I hate to say.....  But, then again who better to clean a faulty, hacker available system up better than the company that wrote it?  :haha: :haha: :evil6:  Have a good night and will be back tomorrow.  :icon_salut::headbang:

EDIT:  Being an idiot, I think, with the help of my brother, I figured out where the MS dude is going with the parallel install.  If you do the install, the original will not have any running process.  So, if it is a virsus, etc. you will be able to scan with impunity through the old installation, catching the bug.  Won't help with registry issues (bad driver, etc.) but maybe the dude has a way to check that?  Might want to inquire MS further on where he's going with the install, at least......

time to get  :icon_shaking:  :haha: :haha: :haha:

Link to comment
Share on other sites

Understood cak46. I guess I could use a break today myself. One long, boring post and I'll stop for the night. ;)  I got rid of my nasty neck strain that I had EVERYDAY by getting a good pillow  :idea: :idea: I think that was ultimately causing the weekend headaches. I will soon find out

BTW: Last night I noticed that the 3rd (wheel) button mostly doesn't work as long as the error is on the screen  :!: :!: HMMMMMM, and today when I first booted up I decided to try the button to see if it was still true. Guess what happened?? About 1 minute after "desktop" I hit the button and the error went away  :!: :!: And I wasn't anywhere near the error(with the cursor) AND the machine did NOT reboot. HMMMMMMMMMMMX2. If you don't wait at least 5 min before clicking OK on the error it always reboots.Sooooooooooo I went back into my events and noticed the time between error popup and the "Human Interface Device Access" error(mouse maybe?), and it's 33 seconds. Now I know these events are acutally backwords if we want to blame the HID for causing the popup error, which would make good sense to me, BUT the popup is first and then the HID is 33 secs after. This is getting too wordy, sorry, but sometimes I don't even want to describe something cause it DOES get too wordy.

Well food for thought?  :roll: :roll: I did write MS last night and asked him about saving programs and settings, still waiting for reply

Sorry, I didn't understand the ms antispyware you were talking about.

BTW X2 PcRescue does NOT like my Logitech start-up reg entry at all. It comes up everytime I run the scan(as a Medium risk) BUT if I delete it, then I have a hell of a time getting it started. Tried that once. Not sure about that. Anyhow, this whole mess should make your head feel REAL GOOD  :headbang:  :evil6: :evil6:  :lol: Oh, sorry. Hope you have(had) a good time tonight(last night) for sure. Cheers, Dave :wave: :wave: :icon_salut: BTWX3 I just noticed that the popup error is NOT listed as an error but "info" instead, you know, no red X, just the icon with the i in the middle. I don't get that at all, and after all this time, I just now noticed it tonight :roll:

Not too wordy at alll!  I would say, dump the third party drivers, then the device, drop the 20 bucks of so and replace the mouse...  At the least try the system for a while with the other mouse. ...... could be the pop up is being triggered first for some reason, maybe by the HID error, but it shows itself first thru the other program (process).  Did you check logitech for an updated driver?  Maybe the original driver is glitchy.......  ( forgive me if I asked this before,, just too lazy to go back thru the thread to see.....) 

MS has a beta of antispyware out.  Pretty good.  I would suspect they are looking at entering the market.  Here is the link.  http://www.microsoft.com/athome/security/spyware/software/default.mspx

Who better to clean up their stupid mistakes with their os other than the os manufacturer?  :haha: :haha:

Heads doin' ok.  Hair of the dog........ :)  How 'bout yours?  Did the pillow do the trick?

Link to comment
Share on other sites

Hey Dude! Glad to hear you're OK. New pillow tonight  :!: It's a good one, too. Foam core, polyester on the outside.

Anyhow, I did a thorough remove of my printer to start with. then I did the same with my mouse. Then reinstalled my other mouse and used it for while.  :crybaby2: Error came up on every boot. After awhile I put the other mouse back(can't live without it) Trouble is it cost $50 and I just don't think at this time that it's the culprit. :roll: :roll: :?: Then I put the printer back in. I will check Logitech for any driver updates and try this MS link,,,,,,,,,,,,,,,,,,,,

Might be a pain, but uninstall the mouse again, then reboot using f8 bootlogging then install new drivers for the other mouse  then use bootlogging again after the replace to see if there are any difference.  I don't hate your wheel mouse, its just a suspect in the case.... :haha: :haha:

Link to comment
Share on other sites

Go ahead and reboot, then run it again to see if they are gone.  Got a sticky wicket on that hp POS that just refuses to comply.  The disturbing thing is that it is finding more crap on your system.  (Such as my situation with this HP.........)

Bootlog:  Scroll down and find the date and time that corrosponds with the boot you are interested in looking at. 

For example:

Service Pack 2 7 14 2005 18:08:22.500

Loaded driver WINDOWSsystem32ntoskrnl.exe

Loaded driver WINDOWSsystem32hal.dll

Loaded driver WINDOWSsystem32KDCOM.DLL

This is the last entry from your previous bootlog post  Look for the part at the top (in boldfaced with the date and time you are interested in) and copy down to the next entry that shows the same information ('cept date and time, of course).   

Link to comment
Share on other sites

I just did some self teaching on my bootlog stuff and now it makes sense,  I copied and pasted an example into notepad just for kicks.

Tomorow I'll take out drivers, reboot with f8 and then put in other dirvers and reboot with f8 and compare. Headache is coming up fast so I'll sign off for now and post tomorrow. Hope that pillow works. Until then, Cheers  :wave::icon_salut:

Link to comment
Share on other sites

Hey cak46. Jury is still out on the pillow. Had a headache when I got up today. :( :(  Went away, though. Now, here's the stuff about my 3 boots and the results. I fired up machine, then uninstalled the mouse and rebooted with f8. Then I saved and printed it out. Then after clearing out any left over shrapnel from the mouse, I rebooted with f8 and saved that too. Then after about an hour I put in my brand new(you're going to love this  :evil6:  :haha:) HP mouse  :headbang::!: :!: Ya, it's wireless no less. It's the only brand name at the store that looked legit enough. Besides it had a 3 button program so I didn't have to lose all my button functions(my Logi has 8 buttons, and I used them all) Then rebooted with f8 and saved that. The difference between all of these is minimal. First boot showed mouhid.sys loading 3 times and kmixer.sys loading twice. 2nd boot showed both loading once. Third boot showed the same with the exception of the 2 new mouse drivers>pelusblf.sys and pelmouse.sys. I sat here and manually went through every entry and checked them off 3 at a time so I wouldn't miss anything.

BTW Same pos error. Man, I'm telling ya THIS thing MUST be giving me the headaches  :roll: :roll:

BTW I figured out the bootlog thing, just delete the previous ones and the log has just the one entry, only about 12 KB's each  ;)

HP  :haha: :haha: :haha::evil6:

Did you plug the new mouse controller in the same port as the old?  Also, what type of port is it?  (USB, bus, serial)  Might want to shut down and try a diifferent port if its USB.  (One you have'nt used for the mouse before). 

Link to comment
Share on other sites

How'd it go?

Ya know, I wonder if when I "ended task" in task mgr and got the doom just once and THEN got the error that it may have corrupted something that we haven't worked with at all. :?::?:I have reinstalled many of my utilities and also added some new ones. But I'm sure there are a few that I have not touched. Not that there was anything wrong with them in the first place, just maybe they got screwed up after my "stupid".

Food for thought

Link to comment
Share on other sites

Ya know, I wonder if when I "ended task" in task mgr and got the doom just once and THEN got the error that it may have corrupted something that we haven't worked with at all. :?::?:I have reinstalled many of my utilities and also added some new ones. But I'm sure there are a few that I have not touched. Not there was anything wrong with them in the first place, just maybe they got screwed up after my "stupid"

Food for thought  :?:

BTW if you missed my "modify" above changing ports didn't do any good :(:cry:

Yup, missed it......  I looked back because I remembered something you had mentioned:

If you don't wait at least 5 min before clicking OK on the error it always reboots.Sooooooooooo I went back into my events and noticed the time between error popup and the "Human Interface Device Access" error(mouse maybe?), and it's 33 seconds. Now I know these events are acutally backwords if we want to blame the HID for causing the popup error, which would make good sense to me, BUT the popup is first and then the HID is 33 secs after.

Could it be part of the usb driver set instead of the mouse drivers?  I'll have to look into removing and restoring this.... not sure whether it can be done successfully or not. Meanwhile, can you go into device manager and look at the hidden devices to see if there are any old usb devices listed which aren't hooked up now?  (your old mouse, for example) If there are, go ahead and remove them. 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below.
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...