Re: Unable to remove the Lsass.exe

From: Bryan Probst (bryanprobst_at_knology.net)
Date: 05/14/04 

Date: Thu, 13 May 2004 16:41:03 -0700

My friend’s computer has been infected with this virus. The problem is, is that the computer starts, shows logo, brings up an lsass.exe error message about a password and then shuts down. We cannot get to a screen to run anything. Startup disk do not work and neither did a reformat. Any suggestions. Thanks BRYAN PROBST
     
     ----- Carey Frisch [MVP] wrote: -----
     
     The "Lsass.exe" is a critical Windows XP system file.
     Do not attempt to delete it!
     
     lsass.exe - Process
     http://www.liutilities.com/products/wintaskspro/processlibrary/lsass/
     
     Follow these directions to remove "The Sasser Worm" from your computer:
     http://www3.telus.net/dandemar/sasser.htm
     
     [Courtesy of MS-MVP Jupiter Jones]
     
     --
     Carey Frisch
     Microsoft MVP
     Windows XP - Shell/User
     
     Be Smart! Protect your PC!
     http://www.microsoft.com/security/protect/
     
     ----------------------------------------------------------------------------
     
     "Rishi Flower" <rajsingh49@hotmail.com> wrote in message:
      news:cca001c4393b$e90fd880$a101280a@phx.gbl...
     
     | Hello People,
     | I know my computer is infected with some kind of virus or
     | worm. I have winodws XP Home, and I have Norton Anti Virus
     | 2003, and Norton Internet Security 2003. When I do a
     | system scan or use the tool to delete the sasser worm it
     | does not detect anything. But when I do a Ctrl+Alt+Del, I
     | see the Lsass.exe running in the background. I am unable
     | to stop the process.
     | Please help
     

Relevant Pages

  • Re: Interface Problem !
    ... Ramesh - Microsoft MVP ... Windows XP Shell ... What You Should Know About the Sasser Worm and It Variants: ...
    (microsoft.public.windowsxp.basics)
  • Re: Internet Explorer Scripts Error
    ... > Ramesh - Microsoft MVP ... > Windows XP Shell ... > What You Should Know About the Sasser Worm and It Variants: ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Toolbar customization returns to default after logging out/in
    ... Ramesh - Microsoft MVP ... Windows XP Shell ... What You Should Know About the Sasser Worm and It Variants: ...
    (microsoft.public.windowsxp.customize)
  • Re: Norton Anti Virus 2004
    ... Sorry to hear that the Norton Anti Virus didn't protect ... your dad, James. ...
    (microsoft.public.windowsxp.basics)
  • Its not sasser worm but still computer restarts
    ... sasser worm. ... I already checked for malicious viruses from microsoft site. ... also check my computer regularly using norton anti virus which is always ...
    (microsoft.public.windowsxp.general)