Faulting application lsass.exe and faulting module rpcrt4.dl
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Faulting application lsass.exe and faulting module rpcrt4.dl

 
Post new topic   Reply to topic    Windows Server Forum Index -> General Discussion
Author Message
Guest






Posted: Thu Nov 10, 2005 5:50 pm    Post subject: Faulting application lsass.exe and faulting module rpcrt4.dl Reply with quote

I have been getting a bunch of these errors in a row followed by a
winlogon error which casues the PC to reboot (see below) This is a
2003 Web Edition box with all patches and AV (do not have SP1) This PC
uses Application Center 2000. Have been unable to pinpoint what is
causing the issue.

Please advice


Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 11/10/2005
Time: 3:59:41 AM
User: N/A
Computer: SVRCORP-WEB-2
Description:
Faulting application lsass.exe, version 5.2.3790.0, faulting module
rpcrt4.dll, version 5.2.3790.137, fault address 0x0000bd7d.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6c 73 61 ure lsa
0018: 73 73 2e 65 78 65 20 35 ss.exe 5
0020: 2e 32 2e 33 37 39 30 2e .2.3790.
0028: 30 20 69 6e 20 72 70 63 0 in rpc
0030: 72 74 34 2e 64 6c 6c 20 rt4.dll
0038: 35 2e 32 2e 33 37 39 30 5.2.3790
0040: 2e 31 33 37 20 61 74 20 .137 at
0048: 6f 66 66 73 65 74 20 30 offset 0
0050: 30 30 30 62 64 37 64 000bd7d

Followed by

Event Type: Error
Event Source: Winlogon
Event Category: None
Event ID: 1015
Date: 11/10/2005
Time: 4:02:58 AM
User: N/A
Computer: SVRCORP-WEB-2
Description:
A critical system process, C:\WINDOWS\system32\lsass.exe, failed with
status code c0000354. The machine must now be restarted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Application Center
Event Category: Replication
Event ID: 5038
Date: 11/10/2005
Time: 4:02:58 AM
User: N/A
Computer: SVRCORP-WEB-2
Description:
__CLASS: MicrosoftAC_Replication_Session_General_Failed_Event
__SERVER: SVRCORP-WEB-2
ServerGUID: {FC1972AE-8BCB-4EEC-B585-3AB50801A70D}
EventId: 5038
GUID: {0AC99A21-C2C9-480C-9476-5FEABE3C9E30}
ReplicationID: Cluster Configuration Settings
ReplicationJobID: SVRCORP-WEB-2X1131616978X678160X1e91938
Status: 0x800706ba
StatusMessage: The RPC server is unavailable.
Target: SVRCORP-WEB-2
TimeGenerated: 11/10/2005 10:02:58 AM
Type: 1
DisplayName: Replication Session General Failed


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Back to top
Todd J Heron
Guest





Posted: Sat Nov 12, 2005 9:50 pm    Post subject: Re: Faulting application lsass.exe and faulting module rpcrt Reply with quote

<ryanl@mwd-inc.com> wrote...
Quote:
I have been getting a bunch of these errors in a row followed by a winlogon
error which causes the PC to reboot (see below) This is a
2003 Web Edition box with all patches and AV (do not have SP1) This PC
uses Application Center 2000. Have been unable to pinpoint >what is
causing the issue.

Probable reasons, listed in order of likelihood.
1) A worm such as blaster or a variant such a w32korgo has infected the
machine.
2) A hotfix is needed. See below.

Possible problems with Lsass.exe.

Windows Server 2003-Based Computer Becomes Slow and Unresponsive After
Running for Several Days:
http://support.microsoft.com/?scid=kb;en-us;821008

Computer Does Not Respond to Client Requests After Lsass.exe Stops
Responding:
http://support.microsoft.com/?scid=kb;en-us;821265

The Server Stops Responding and an Access Violation Occurs in Lsass.exe When
the Server Reloads Certain Policy Parameters:
http://support.microsoft.com/Default.aspx?scid=kb;en-us;826819

--
Todd J Heron, MCSE
Windows Server 2003/2000/NT; CCA
----------------------------------------------------------------------------
This posting is provided "as is" with no warranties and confers no rights
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> General Discussion All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB