Microsoft KB Archive/321024

= &quot;LSASS.EXE Terminated Unexpectedly with Status Code -1073741571&quot; Error Message when You Install BearShare =

Article ID: 321024

Article Last Modified on 10/30/2006

-

APPLIES TO


 * Microsoft Windows 2000 Professional Edition

-



This article was previously published under Q321024



IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SYMPTOMS
After you install an Internet-based file sharing program, such as BearShare, you may receive the following error message:

The system process LSASS.EXE terminated unexpectedly with status code -1073741571. The system will now shut down and restart.

If you restart the computer in Safe mode, you may receive one or more error messages similar to the following:

Svchost.exe has generated errors and will be closed by Windows. You will need to restart the program. An error log will be created.



CAUSE
This behavior may occur if you install the Internet-based file sharing program on a computer on which the Microsoft Winsock Proxy Client is installed. This behavior may be caused by a corrupted Winsock2 registry key.



RESOLUTION
To resolve this issue, remove the Winsock2 registry key, and then restart the computer. To do this, follow these steps.

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

 Click Start, and then click Run. In the Open box, type regedit, and then click OK. In Registry Editor, navigate to the following subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock2

 Right-click Winsock2, and then click Delete on the shortcut menu that appears. Click Yes to confirm the deletion of the key. Repeat steps 3 through 5 to remove the following registry subkeys (if present):

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Winsock2

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Winsock2

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Winsock2

</li> Quit Registry Editor.</li> Restart Windows normally.</li></ol>

<div class="moreinformation_section">

MORE INFORMATION
For additional information about BearShare, visit the following BearShare Web site:

http://www.bearshare.com

Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

The third-party products that are discussed in this article are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.

Keywords: kberrmsg kbprb KB321024

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.