Help lsass.exe Have you managed to removed this from a machine - GoFuckYourself.com - Adult Webmaster Forum

X

ListYourPorn

Confirmed User

Join Date: Jan 2004

Posts: 791
Share

Post
#1

Help lsass.exe Have you managed to removed this from a machine

10-20-2004, 01:47 PM

Hi having some issues with our kids machine, when you log onto the interenet bang on two mins thew machine starts to shut shut down staing lsass.exe as the error.

I have searched the web but keep finding lots of people who have not solved the problem, we are at our wits end - we formated the the HD and rebuilt the machine, as soon as we hit the web the same issue occured!

any pointers would be well recevied :-)

Sex Add your sites Click Here
Tags: None
cezam

Confirmed User

Join Date: Jun 2003

Posts: 1363
Share

Post
#2

10-20-2004, 01:58 PM

Process File: lsass or lsass.exe
Process Name: Local Security Authority Service

Description:
lsass.exe is a system process of the Microsoft Windows security mechanisms. It specifically deals with local security and login policies. Note: lsass.exe also relates to the W32/Windang.worm which spread via floppy disk drives. Please review file path for clarification of this.
Comment
cezam

Confirmed User

Join Date: Jun 2003

Posts: 1363
Share

Post
#3

10-20-2004, 02:00 PM

btw, public ip? firewall up and running?
Comment
kmanrox

aka K-Man

Join Date: Oct 2001

Posts: 29295
Share

Post
#4

10-20-2004, 02:00 PM

i had this fucking problem, formatted C: and reinstalled everything.... it STILL was fucked up...

I never got to the root of the problem other than to think it was some kind of a nast virus =-/

take it to a local computer shop i'd suggest.

Crypto HODLr
Crypto mining
Angel investor
Comment
irishfury

Confirmed User

Join Date: Aug 2003

Posts: 2611
Share

Post
#5

10-20-2004, 02:02 PM

what version of windows?

Trust no one there all snakes
Comment
Sosa

In Tushy Land

Join Date: Oct 2002

Posts: 40149
Share

Post
#6

10-20-2004, 02:05 PM

do your windows updates if you can, I can't remember what virus that is but I think it was one of them not too long ago.
Comment
frish

Confirmed User

Join Date: Aug 2004

Posts: 335
Share

Post
#7

10-20-2004, 02:06 PM

Originally posted by kmanrox
i had this fucking problem, formatted C: and reinstalled everything.... it STILL was fucked up...

I never got to the root of the problem other than to think it was some kind of a nast virus =-/

take it to a local computer shop i'd suggest.

there are many tools surviving windows...

1. www.free-av.com - free antivirus
2. www.agnitum.com - free firewall
3. http://www.lavasoftusa.com/software/adaware/ - ad-remover
4. http://www.safer-networking.org/en/index.html - search and destroy
5. ...

after all these prevention - format c: and get linux

SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, then you may use a 624x80 instead of a 120x60.
Comment
tootie

Confirmed User

Join Date: Jun 2003

Posts: 6041
Share

Post
#8

10-20-2004, 02:07 PM

DOS won't eradicate the file because it's a Windows virus/worm. But Linux will since you mentioned you don't have a problem with formatting the drive.

Burn a simple copy of Linux with one of your other computers and use the Linux CD to FDisk and format with the Linux ext2fs.

Then you should be able to install Windows with no problems.
Comment
Nicky

Too lazy to set a custom title

Join Date: Mar 2003

Posts: 30071
Share

Post
#9

10-20-2004, 02:08 PM

Maybe it has to do with the isp or your router/switch ?

gfynicky @ gmail.com
Comment
Project-Shadow

Confirmed User

Join Date: Feb 2003

Posts: 7340
Share

Post
#10

10-20-2004, 02:08 PM

Sasser....

http://www.microsoft.com/downloads/d...displaylang=en
Comment
Sosa

In Tushy Land

Join Date: Oct 2002

Posts: 40149
Share

Post
#11

10-20-2004, 02:08 PM

Originally posted by Project-Shadow
Sasser....

http://www.microsoft.com/downloads/d...displaylang=en

there ya go
Comment
Magg

Confirmed User

Join Date: Feb 2004

Posts: 4467
Share

Post
#12

10-20-2004, 02:09 PM

Its a trojan... why is everyone jumping to the FORMAT solution?

This takes all of 2 minutes to fix...

www.google.com

type in the file name, then 'shutdown' or some shit like that, look for the patch that fixes it.
Comment
kmanrox

aka K-Man

Join Date: Oct 2001

Posts: 29295
Share

Post
#13

10-20-2004, 02:10 PM

Originally posted by frish
there are many tools surviving windows...

1. www.free-av.com - free antivirus
2. www.agnitum.com - free firewall
3. http://www.lavasoftusa.com/software/adaware/ - ad-remover
4. http://www.safer-networking.org/en/index.html - search and destroy
5. ...

after all these prevention - format c: and get linux

i use AVG paid antivirus... at the time i was using norton system works 2003....

i have lavasoft and also spybot... i also use norton internet security/firewall... none of these helped me prevent/fix the lsass.exe problem i had...

Crypto HODLr
Crypto mining
Angel investor
Comment
irishfury

Confirmed User

Join Date: Aug 2003

Posts: 2611
Share

Post
#14

10-20-2004, 02:10 PM

It's prolly the sasser worm do a net stat and look for traffic coming in off port 445, 5554 and 9996...if you can get the latest windows update it should fix the problem long enuff for you to remove the virus

Trust no one there all snakes
Comment
irishfury

Confirmed User

Join Date: Aug 2003

Posts: 2611
Share

Post
#15

10-20-2004, 02:17 PM

(With system Restore turned OFF) I reboot the machine. and it will stop the shut down from happening so you can clean the pc

Trust no one there all snakes
Comment
Magg

Confirmed User

Join Date: Feb 2004

Posts: 4467
Share

Post
#16

10-20-2004, 02:21 PM

If youre getting an error and it says "system will shutdown in balh 25 seconds, blah"

this is what i do when i fix pc's with that shit so i have time to work on it..

go to

Start > Run > type in "shutdown -a"
Comment
zzgundamnzz

Confirmed User

Join Date: Apr 2002

Posts: 6102
Share

Post
#17

10-20-2004, 02:23 PM

First are you using a bootleg copy of windows? Virus Might be included with your windows installation

Before you go about formating and installing you should patch your windows...
Comment
ListYourPorn

Confirmed User

Join Date: Jan 2004

Posts: 791
Share

Post
#18

10-21-2004, 07:26 AM

Originally posted by Magg
If youre getting an error and it says "system will shutdown in balh 25 seconds, blah"

this is what i do when i fix pc's with that shit so i have time to work on it..

go to

Start > Run > type in "shutdown -a"

This is the solution to the issue according to other sources, I was passed this by another board member -

Isasse - solution

Im due to try this tonight, Its a pucker copy of windows home addition - whats really anoying the machine was clean we connected to the web an within 1 second this error came up -

Im going to contact the ISP also - thanks for the input, if the above solution solves the problem I will let you know.

Sex Add your sites Click Here
Comment
GoLiaT

Confirmed User

Join Date: Mar 2002

Posts: 1130
Share

Post
#19

10-21-2004, 07:41 AM

Originally posted by ListYourPorn
Hi having some issues with our kids machine, when you log onto the interenet bang on two mins thew machine starts to shut shut down staing lsass.exe as the error.

I have searched the web but keep finding lots of people who have not solved the problem, we are at our wits end - we formated the the HD and rebuilt the machine, as soon as we hit the web the same issue occured!

any pointers would be well recevied :-)

i had the exact same problem
when you formated the pc and rebuilt it, did you do the windows
update thingy ?
after i did that the problem went away
i still have lsass.exe i the process register though
but i have no more troubles

"where ever you go..there you are."
Comment
SlutFinder

Confirmed User

Join Date: Oct 2003

Posts: 2273
Share

Post
#20

10-21-2004, 07:46 AM

yeh sounds like sasser

my two solutions..

Get a huge electro magnet and destroy every spec of data on your HD before a reformat

OR

Buy a new HD..

Legit mailing and optin databases -
Adult,Casino&Pharmacy.
ICQ: 272-745-001 - EMail:[email protected]

Adult payments allowed! on your site or between webmasters! www.YowCow.com
Comment
ListYourPorn

Confirmed User

Join Date: Jan 2004

Posts: 791
Share

Post
#21

10-21-2004, 08:07 AM

Originally posted by GoLiaT
i had the exact same problem
when you formated the pc and rebuilt it, did you do the windows
update thingy ?
after i did that the problem went away
i still have lsass.exe i the process register though
but i have no more troubles

from whatI have read the lsass.exe l - being a 'L'
is windows security file that is required and if you delete it the OS wont work.

We tried to do the updates but it wont stay connected long enough though hopefull the above comment on how to stopthe shut down should give me the time to fix the issue - only time will tell.

Sex Add your sites Click Here
Comment
GoLiaT

Confirmed User

Join Date: Mar 2002

Posts: 1130
Share

Post
#22

10-21-2004, 08:14 AM

Originally posted by ListYourPorn
from whatI have read the lsass.exe l - being a 'L'
is windows security file that is required and if you delete it the OS wont work.

We tried to do the updates but it wont stay connected long enough though hopefull the above comment on how to stopthe shut down should give me the time to fix the issue - only time will tell.

1. get a connection to the net , without opening a browser
2. use the shortcut to windows update above the run button

"where ever you go..there you are."
Comment
ListYourPorn

Confirmed User

Join Date: Jan 2004

Posts: 791
Share

Post
#23

10-21-2004, 08:15 AM

Originally posted by GoLiaT
1. get a connection to the net , without opening a browser
2. use the shortcut to windows update above the run button

thats another point for some reason on windows xp home addtion - it wont allow me to right click and create short cuts from the programme menu.

Sex Add your sites Click Here
Comment
Brad Gosse

Confirmed User

Join Date: Jan 2002

Posts: 2616
Share

Post
#24

10-21-2004, 08:16 AM

Sounds like the blaster worm. You can DL the removal tool from Nortons site.

Free Clipart
Comment
Bama

Confirmed User

Join Date: Nov 2001

Posts: 2727
Share

Post
#25

10-21-2004, 08:22 AM

lsass - lsass.exe - Process Information
Process File: lsass or lsass.exe
Process Name: Local Security Authority Service

Description:
lsass.exe is a system process of the Microsoft Windows security mechanisms. It specifically deals with local security and login policies. Note: lsass.exe also relates to the W32/Windang.worm which spread via floppy disk drives. Please review file path for clarification of this.

Author: Microsoft Corp.
Part Of: Microsoft Windows Operating System

System Process: Yes
Background Process: Yes
Uses Network: No
Hardware Related: No
Common Errors: N/A

Security Risk (0-5): 0
Virus: No
Spyware: No

If you go to http://www.liutilities.com/products/...rocesslibrary/
it gives you a good idea of what's supposed to be running and what is not.

Last edited by Bama; 10-21-2004, 08:23 AM.
Comment
HammerTime33

Confirmed User

Join Date: Sep 2004

Posts: 498
Share

Post
#26

10-21-2004, 08:24 AM

No need to format with this trojan.

When it starts to count down,
click start/run/type system -an and hit enter.
This will stop the count down then goto microsoft.com
search for sasser removal tool.
Download it, restart pc in safe mode "F8" during startup
then run the tool in safe mode
resatart pc again
Get a FREE antivirus proggy such as AVG (www.grisoft.com) update it and run it restart and do it again.
Comment
GoLiaT

Confirmed User

Join Date: Mar 2002

Posts: 1130
Share

Post
#27

10-21-2004, 08:26 AM

Originally posted by ListYourPorn
thats another point for some reason on windows xp home addtion - it wont allow me to right click and create short cuts from the programme menu.

you dont make the shortcut
the shortcut is already there after the install
go to run - then at top the the first menu , right above the run button is windows update

"where ever you go..there you are."
Comment
jimmyf

OU812

Join Date: Feb 2001

Posts: 12651
Share

Post
#28

10-21-2004, 08:51 AM

Originally posted by Magg
Its a trojan... why is everyone jumping to the FORMAT solution?

This takes all of 2 minutes to fix...

www.google.com

type in the file name, then 'shutdown' or some shit like that, look for the patch that fixes it.

yep that's what i did
http://securityresponse.symantec.com...imos.worm.html
W32.Nimos.Worm is a network-aware worm that captures keystrokes and passwords, and then sends them to the attacker.

This worm is written in Microsoft Visual Basic and is packed with PEBundle and ExeStealth.

Epic CashEpic Cash works for me
Solar Cash Paysite Plugin
Gallery of the day freesites,POTD,Gallery generator with free hosting
Comment

Previous template Next

Working...