Error messages: LSASS.EXE and APPCOMPAT.TXT error 1073741819

Unknown

Hi guys,

I would sincerely appreciate any help or assistance you can offer on my PC problem. Thanks in advance

My problem started about 2 days ago when my Yahoo Messenger started popping error messages regarding my windows programand registry and then these error messages popped:

1. Error 1073741819

2. corruption error -89

3. Error Report: lsass.exe and appcompat.txt

4. My PC started counting down 60 secs and shuts down the computer on its own.

Here is the log file I gathered from HIJACKTHIS:

Logfile of HijackThis v1.99.1
Scan saved at 2:54:16 AM, on 5/14/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\System32\svhostcs32.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/ymsgr6/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/ymsgr6/*http://www.yahoo.com/ext/search/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/*http://www.yahoo.com
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_5_7_0.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [Windows Update System Shell] svhostcs32.exe
O4 - HKLM\..\RunServices: [Windows Update System Shell] svhostcs32.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Windows Update System Shell] svhostcs32.exe
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

I am not sure what it means but I would sincerely appreciate any help, I badly need it :bawling:

Thanks again and Regards,

Jenny
poshgal78

Shadow2018

Let's start by making sure we can view all files.

open my computer>tools>folder options>view.check show system files\folders>untick hide file extensions>click apply>click ok

Then delete these entries:
C:\WINDOWS\System32\svhostcs32.exe
O4 - HKLM\..\Run: [Windows Update System Shell] svhostcs32.exe
O4 - HKLM\..\RunServices: [Windows Update System Shell] svhostcs32.exe
O4 - HKCU\..\Run: [Windows Update System Shell] svhostcs32.exe


Then reboot into safe mode, tap f8 at start up.

Then delete these files/directories:
C:\WINDOWS\System32\svhostcs32.exe

Reboot into normal mode and run these online scans:
http://housecall.trendmicro.com/

http://www.pandasoftware.com/products/activescan/com/activescan_principal.htm

When you are finished please post a new log.

Shadow2018

Here are a couple of links to microsoft's website concerning your error issues:

http://search.microsoft.com/search/results.aspx?st=b&na=88&View=en-us&qu=appcompat.txt

http://search.microsoft.com/search/results.aspx?View=en-us&p=1&c=10&st=b&qu=lsass.exe+error&na=32&cm=512

poshgal78

Hi shadow2018,

Thanks for the clear instructions, I can't seem to find this file at my windows hidden files: svhostcs32.exe

I found these files though:

svchost.exe at this location: C:\WINDOWS\system32

SVHOSTCS32.EXE-22BAA97B.pf at this location: C:\WINDOWS\Prefetch

Do I need to delete these as well?

Jenny

Shadow2018

NO.
The svchost.exe in the sys32 folder is a legit OS file and necessary for your system to operate properly.

Delete this one though:
SVHOSTCS32.EXE-22BAA97B.pf at this location: C:\WINDOWS\Prefetch

Please post a new log when finished.