If you get the lsass.exe Operation Failed at Boot Time using XP, it would appear
you have been infected by the Sasser Worm or it's variants
(w32.sasser.[a-f].worm)and the w32.blaster.worm and it's variants.

Disinfection Mething
=======
1.) Disconnect your internet connection and boot to safe mode (through F8
on startup)
2.) Log into the administrator account and after the system is loaded press
crtl+alt+del to bring up the system task manager and look in proccesses for
any of the following:
a.)avserve.exe
b.)avserv2.exe
c.)[random five digit number]_up.exe
d.)skynet??.exe
and end task on any of them and then close the task manager
3.) msconfig: dissable any of the above programs from auto starting in the
startup tab and services tab
4.) regedit: search for any of the above programs in the registry and
remove thier keys (might be a good idea to create a backup copy of the
regisrty just in case)
5.) restart into normal mode and if you get the shutdown error use the
above "shutdown -a" to stop it
6.) enable the XP firewall (network connections and then properties on the
type of internet connection you are using and then advanced and check
"protect my computer...")
7.) reconnect your intenet and get the above mentioned security patch from
Microsoft
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx
8) Select the operating system type, in your case Windows XP
9) After the patch has been installed please update your system from the
site:
http://v5.windowsupdate.microsoft.com
10) Update you Antivirus definitions and do a full system scan.

Please also see "What You Should Know About the Sasser Worm"
http://www.microsoft.com/security/incident/sasser.mspx

back