Suddenly we have started facing one issue with our Windows XP SP3 clients. The issue is, we are not able to login on XP clients with domain user credentials. This results in an error “invalid access to memory location”.
Suddenly we have started facing one issue with our Windows XP SP3 clients. The issue is, we are not able to login on XP clients with domain user credentials. This results in an error invalid access to memory location.we are getting events The security package Kerberos generated an exception. The package is now disabled. The exception information is the data.The Security System could not establish a secured connection with the server cifs/rsi-dc11.tata.com. No authentication protocol was available.The Security System could not establish a secured connection with the server cifs/rsi-dc11.tata.com. No authentication protocol was available.12 people got this answerI do too
November 10th, 2009 5:22pm

Strange I suddenly had a user on my domain have this same issue. System won't let you log on as local admin once you get this error message. If you reboot it will let you log on local but if you log out try and log on the domain get the error it won't let you log back in local. I'm installing all Windows updates now to see if the problem persists. I'll post back and let you know the outcome. System is also running SP3. Installed all Windows update and it did not fix. Unjoined from domain, removed computer from AD re-added system to domain - did not fix. Running system file checker now
Free Windows Admin Tool Kit Click here and download it now
November 12th, 2009 4:24pm

We are having the same issue. 4 machines in my department and about a dozen others in the enterprise. John
November 14th, 2009 12:43am

Same issues I am having now on our corp domain which started last week, Monday 09 Nov 2009. Affecting several workstations at an average of 1 machine per day. Same symptoms on LSASRV - Kerberos. Tried the below actions but with no success: 1. Microsoft Update 2. Forced GPUpdate 3. Remove & rejoin the machine to the domain 4. Remove and reinstall AV package 5. SFC /scannow 6. XP repair installation All the above actions failed to solve this issue... Finally, deciding to reformat the system drive and reinstall a fresh XP resolved the issue. But I would not want to accept this as a valid solution particularly in my OU with 200++ workstations. Hope we can get the whats & whys of the "mystery" from the MS guys the soonest...
Free Windows Admin Tool Kit Click here and download it now
November 16th, 2009 12:49pm

Having this same issue here, so far on 4 different machines. One other symptom... Malwarebytes will not run on these machines. It will install properly, but when it is run, it closes in a few seconds. This has led me to believe it is some sort of infection, however I have not been able to locate anything.
November 16th, 2009 11:09pm

Hi Guys, I had the EXACT same problem here on a Dell E6400. I spent a lot of hours trying to fix it and eventually had success. The last few things I tried seemed to do the trick: - Disable smart card, fingerprint reader - Bypassed WSUS and went straight to Windows Update site - Downloaded and installed a new driver for the smart card reader - Downloaded and installed these patches (I haven't yet looked thru the details of each one): KB943649 907417 943973 961118 905474 909520 963707 974331 968389 975467 971513 973475 975958 973443 973704 969947 890830 976749-IE7 I also re-enabled smart card and finger print reader, and rebooted about 20 times to ensure it was all working properly. Hopefully that will help someone out there. BTW sorry I accidentally marked the post above mine as an answer...wasn't sure how to undo this. Cheers
Free Windows Admin Tool Kit Click here and download it now
November 17th, 2009 2:59am

I am having a similar issue - invalid access to memory location on login attempts- Malwarebytes runs for like 2 seconds, then closes. Anybody else able to get this fixed?
November 17th, 2009 6:11pm

4 machines showing this issue at my site. 2 had Acr****.Tmp files in UserTemp that were created by what appears to be a web based exploit attacking known adobe acrobat vulnerabilities that can be seen by a crashing AcroRd32.exe. the other 2 appeared to have IE crashes then thesame logonissues started. 1 machine downloaded a virus Backdoor.bot as (win\sys32\~.exe). I have no idea what these malicious .pdfs are doing once they attack kerberosbutI think they are tryinggain privleges to a system account,soI'mwiping systems and starting clean until the virus scanners start protecting from this exploit.Edit: forgot to add that the AcroRd32.exe errors with 0x2d828acd consistently in case that helps anyone and upgrading acrobat to latest version is required.
Free Windows Admin Tool Kit Click here and download it now
November 17th, 2009 10:17pm

For a temporary work around, unplugging the cable and logging in with cached credentials worked in my case...
November 23rd, 2009 5:01pm

Yeah, unpluging works for me too. Still not sure what is going on. Spybot found some things on my computer... And now Malwarebytes works for me.
Free Windows Admin Tool Kit Click here and download it now
November 25th, 2009 12:52am

Here is what has worked for me. I got this from another thread I was monitoring. 1- Slave the infected drive 2- install Dr.Web anti-malware( download here: http://www.freedrweb.com/download+cureit/ ) 3 - do a custom scan on the slaved drive. 4- It should find the culprit(s): A0000258.exe + beghrt.tmp 5- after quarenting them we put the drive back and rebooted and everythigs seems to be acting normal. We use symantec corporate here. I did not get a chance to try it. Symantec did detect the A000xxxx.exe during the scan by drweb. Also the said file seemed to exist in the restore system file. Not sure how the virus works, but after cleaning with drweb, the machines work as normal. John
December 1st, 2009 8:09pm

I was able to resolve this by booting to the Ultimate Boot CD and running Avira AntiVir against the drive.... it found a Trojan located in a users' Temporary Internet Files. Once that was deleted, everything went back to normal.I don't recall the name of the Trojan, but on the two systems that were experiencing this issue, the Trojan was identified was different, so there may be multiple variations.HijackThis, Malwarebytes and Symantec Endpoint were all unable to find anything.
Free Windows Admin Tool Kit Click here and download it now
December 9th, 2009 7:52pm

Yes its a virus issue found some qdjs.tmp in userprofile temp directory & system restore, scanned with DR web & kaspersky http://devbuilds.kaspersky-labs.com/devbuilds/AVPTool/ it was able to remove the virus , I submitted the virus to symantec & now its detecting as infostealer.
December 18th, 2009 7:08am

I had similar problems. All of a sudden I could no longer backup to my network storage drive and when configured connect to a "shared folder" on PC number 2 running win XP Home even though PC # 2 could view other PC's shared folders. When I clicked on the folder I was prompted to enter a password even though I had not set a password and nor was my "Guest" log-on account open.1) Make sure file sharing enabled, (Vista or win 7 is slightly different process)2) Create the home network via contol Panel<>network conenctions.3) When creating home network make sure all are on same workgroup (not win 7 "homegroup"). If any already created check, change workgroup names to match as necessary.Once I did the above things worked better but still I could not access (open) shared folders on PC #2 from PC #1 (both running win xp home sp3). I could however see & open PC #1 share folder from PC#2!!!!Fix: I had updated my Norton Antivirus 2009 to 2010 @ same time as updating Ghost 14 to 15.... Remove all Norton products using the Norton software removal tool. And guess what, I could see one of my two shared folders on PC #2 from PC # 1.I did the following: Start<>Explore all users, I selected PC #2 shared folders and disabled files sharing, I then re-enabled file sharing on same share folders and all worked again without trouble. Boy do I hate Norton. I had had, Norton tech remote support try to fix it......Something in Anti Virus 2010 was blocking the conenction but why it asked for an unassigned password is Nortons guess.Just one final thing, on PC # 1, I had to delete the two PC's in "my networks". The PC auto updated a little later and refreshed the connections. All working great.I'm no PC wiz kid, I work with PC's as part of my job. How ever it just amazes me how a simple networking idea can be so complicated with so many solutions and ideas all worthy of trying (as I did). And yet it all boils down to the simple things.T
Free Windows Admin Tool Kit Click here and download it now
December 29th, 2009 12:27am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics