Should I restore my system settings to a previous date?

Question

My computer was coming up with an error for lsass.exe, and restarting my computer repeatedly. On the last attempt it brought Windows up and is working fine, but I'm afraid that if I shut it down it will not come back up. Should I restore my computer to the date it last worked properly? Or will it potentionally mess my computer up further? I've run a virus scan, and it is not the virus. I believe it is a problem with the system settings. And will restoring it to a previous date more than likely fix the issues I am having?

Answer 1

lsass.exe is a windows system program that is needed by the PC to run correctly. The only reason you would be getting an error with it is due to a Trojan virus you have. The virus effects that file because it starts up with your computer and that file was originally for security.

Once a virus effects a system file like that, there really isn't much to do now except format your computer (erase everything and reinstall windows). You can try a virus scanner and try to get rid of the main part of the virus, then use a windows disk to reinstall of of the system files. Otherwise, I would be careful using you computer since that type of virus gets all personal information about you including social security numbers, credit card numbers, addresses, etc.

Answer 2

lsass.exe is runs a couple of your system services. It sounds like you may have gotten a file currupted which is causing this issue.

I agree with the others that using System Restore won't harm your system and very well may correct the problem. What it will do is take it back to a period before the file(s) become currupt.

There are other ways to deal with this, but using System Restore is a good first step. If it doesn't work you may need to do the "Repair" option for your OS. You do this using your Windows OS installation CD. It is not difficult, but if you are not very experianced it may be best to take your computer to a reputable repair shop and have them do it for you. There is no shame in having a technician repair your computer for you.

If System Restore does not work the first time it could be due to not going back for enough in time. You don't want to go too far back initially because all the Restore points between the date you pick and today will be deleted in the Restore process. If you go back too far you could reduce your ability to go back to another one.

So, if it doesn't work the first time try again. Go back another week, lets say, and see if that works. If not, try going back one more week. If all these fail then consider taking it to the reputable repair shop for assistance. You can even have a technician come to your home.

Also, how old is your computer? If it is still in warranty, you can get assistance from the manufacturer. I would contact them before the reputable repair shop, as they can not only walk you through a repair, they can assist you via Remote Assistance. In this situation they would log onto your computer, with your permission of course, and then take over and do the work. I have allowed both Dell and Panda to provide Remote Assistance. At any time you can stop the Remote logon and take back control of your system. Just ensure that anyone you allow this privelege is well known and somebody you fully trust. You can watch what they do as they do it.

Anyway, good luck and I am sure you will have this fixed with they System Restore point. Just make sure you go far enough back, but not too far.

Have a great day and weekend.

P.S. I just read what Big Ross had to say and he is only partially correct. lsass is a system service which runs several system services and also will be used by security software. However, an error does not automatically mean you are infected. As I said it could simply be a currupt file.

Also, there are other ways to get rid of an infection then reformating your hard drive and reinstalling your OS. That is a drastic measure you only use as a last resort. There are many websites which help people rid their systems of infections. Just put Hijack This into your browser and you will find many sites which volluntarily assist with infections, help you run the Hijack This tool, then help delete anything which needs deleting. It takes some work, but is well worth the effort.

A trojan is by defenition "hidden". It is difficult to locate. One thing which is an important step in ridding a system of an infection is disabling System Restore, then re-enabling it. This is because System Restore stores snap shots of your system at different points in time and this results in the trojan or other malware being stored with the snapshop of the system. However, you only disable System Restore towards the end because once you do this it deletes every Restore Point on your system and then begins creating new ones after it is re-enabled.

If System Restore fails to fix this you can try the Online websites devoted to assisting users in ridding their systems of malware infections. These people are all doing this volluntarily, so keep that in mind when working with them.

Good luck and have a great weekend.

Answer 3

I recommend you restore your computer, and your right it does have to do with the system setting.
Also according to the website below it is not a virus, but is registered as a downloader and a trojan. lsass.exe is a system process of the Microsoft Windows security mechanisms. It specifically deals with local security and login policies. This program is important for the stable and secure running of your computer and should not be terminated.

Answer 4

See what happens. You can always go into safe mode and restore from there if it does it again. Go into safe mode by tapping the f8 key on boot (startup)

But if your worried about it. It can't really hurt your computer to do a system restore encase your worried safe mode won't work.

Answer 5

using system restore should correct the problem.. try it out . if u suspect a virus then use system restore first. then disable it and run a through virus scan. the reenable system restore.

Answer 6

system restore doesn't cause any problem and you have option to switch back to your current settings. it first backs up the registry and then last selected configuration is applied. later on you can easily switch over if you find any further problem.