Stopping and disabling these 2 services doesn't help. The lsass.exe now shows in tasklist as PID 512 with service as N/A. UPHClean still shows lsass.exe as being the problem.
Where do I go from here to solve this?
XP Pro SP1, all updates except SP2. Current AVG, Spybot, and Ad-Aware scans.
For about 2 weeks my applications event viewer has been giving the usernv eventid 1517 error on every shutdown or restart. I don't remember installing anything except windows critical updates and avg updates. I haven't made any changes in Services.
In my quest to discover what process is causing the hang-up, I installed UPHClean and set it to just report. It reports the problem is lsass.exe (516) HKCU(0x3d8)
File search shows lsass.exe in C:\Windows\system32 C:\Windows\ServicePackFiles\i386 and C:\Windows\system32\dllcache. AFAIK this is as it should be.
Tasklist /svc shows lsass.exe running ProtectedStorage and SamSs. Both of these services are set to Automatic and Running, which, to my knowledge, is how they have always been.
I'm at the end of my knowledge skills now. What do I do from here to discover which of these processes is causing the error and how to fix it?