离乐园

症状：

安装Windows更新KB956572重启后出现下述现象：

lsass.exe应用程序错误（应用程序正常初始化（0x0000033）失败。

导致WindowsXP无法正常启动，不能进入桌面，安全模式亦无法进入桌面。

解决：

将下面文本存为restore.bat，拷贝到故障计算机中（至于拷贝的方法，可以用WinPE，或者DOS下的USB驱动），运行。

DEL  "c:\windows\system32\dllcache\wmiprvsd.dll"
DEL  "c:\windows\system32\dllcache\wmiprvse.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\ntkrnlmp.exe" "c:\windows\driver cache\i386\ntkrnlmp.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\ntkrnlpa.exe.000" "c:\windows\driver cache\i386\ntkrnlpa.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\ntkrpamp.exe" "c:\windows\driver cache\i386\ntkrpamp.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe.000" "c:\windows\driver cache\i386\ntoskrnl.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\pdh.dll" "c:\windows\system32\pdh.dll"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\rpcss.dll" "c:\windows\system32\rpcss.dll"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\sc.exe" "c:\windows\system32\sc.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\advapi32.dll" "c:\windows\system32\advapi32.dll"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\lsasrv.dll" "c:\windows\system32\lsasrv.dll"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\ntdll.dll" "c:\windows\system32\ntdll.dll"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\ntkrnlpa.exe" "c:\windows\system32\ntkrnlpa.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe" "c:\windows\system32\ntoskrnl.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\services.exe" "c:\windows\system32\services.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\advapi32.dll" "c:\windows\system32\dllcache\advapi32.dll"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\fastprox.dll" "c:\windows\system32\dllcache\fastprox.dll"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\lsasrv.dll" "c:\windows\system32\dllcache\lsasrv.dll"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\ntdll.dll" "c:\windows\system32\dllcache\ntdll.dll"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\ntkrnlmp.exe" "c:\windows\system32\dllcache\ntkrnlmp.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\ntkrnlpa.exe.000" "c:\windows\system32\dllcache\ntkrnlpa.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\ntkrpamp.exe" "c:\windows\system32\dllcache\ntkrpamp.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe.000" "c:\windows\system32\dllcache\ntoskrnl.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\pdh.dll" "c:\windows\system32\dllcache\pdh.dll"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\rpcss.dll" "c:\windows\system32\dllcache\rpcss.dll"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\sc.exe" "c:\windows\system32\dllcache\sc.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\services.exe" "c:\windows\system32\dllcache\services.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\fastprox.dll" "c:\windows\system32\wbem\fastprox.dll"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\wmiprvsd.dll" "c:\windows\system32\wbem\wmiprvsd.dll"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\wmiprvse.exe" "c:\windows\system32\wbem\wmiprvse.exe"
COPY  "C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.txt" "C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.tag"

其中C:\为默认的故障系统系统盘盘符，在某些PE系统中会将故障系统系统盘盘符改为D:\，请酌情更改。

原因：

未知，可能是某些杀毒软件/防火墙之类导致更新未能成功安装。

解决之后可以考虑进入安全模式重新安装此补丁。