"LSASS.EXE Terminated Unexpectedly with Status Code -1073741571" Error Message when You Install BearShare (321024)


The information in this article applies to:

  • Microsoft Windows 2000 Professional
This article was previously published under Q321024
IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SYMPTOMS

After you install an Internet-based file sharing program, such as BearShare, you may receive the following error message:
The system process LSASS.EXE terminated unexpectedly with status code -1073741571. The system will now shut down and restart.
If you restart the computer in Safe mode, you may receive one or more error messages similar to the following:
Svchost.exe has generated errors and will be closed by Windows. You will need to restart the program. An error log will be created.

CAUSE

This behavior may occur if you install the Internet-based file sharing program on a computer on which the Microsoft Winsock Proxy Client is installed. This behavior may be caused by a corrupted Winsock2 registry key.

RESOLUTION

To resolve this issue, remove the Winsock2 registry key, and then restart the computer. To do this, follow these steps.

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
  1. Click Start, and then click Run.
  2. In the Open box, type regedit, and then click OK.
  3. In Registry Editor, navigate to the following subkey:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock2

  4. Right-click Winsock2, and then click Delete on the shortcut menu that appears.
  5. Click Yes to confirm the deletion of the key.
  6. Repeat steps 3 through 5 to remove the following registry subkeys (if present):

    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Winsock2
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Winsock2
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Winsock2

  7. Quit Registry Editor.
  8. Restart Windows normally.

MORE INFORMATION

For additional information about BearShare, visit the following BearShare Web site:

http://www.bearshare.com

Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

The third-party products that are discussed in this article are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.
Modification Type:MajorLast Reviewed:10/21/2003
Keywords:kberrmsg kbprb KB321024
©2003 Microsoft Corporation. All rights reserved.