Virus Help: lsass.exe - GoFuckYourself.com

Focus Adult Milo · 05-02-2004, 07:00 PM

Ok, maybe someone in here would be kind enough and do a favour to a south american kid (me) finding out how the fuck
to remove this virus off my computer.

Tried eveything, at least 3 antivirus programs, FixBlast, anti-trojan software, etc, etc and i cant remove it. I had the Blaster
once on my PC and i removed it somehow, and installed the patch back then...

Now i have the same thing going, the little hahahahahaha popping up saying that the system will shutdown in 60 seconds bullshit..
And i can´t remove it! it says something about hahahahahahas/system32/lsass.exe been hahahahahahahad...

I am clueless.. since i can´t identify it as which virus it is...

Can someone throw me a rope here? i am drowning in a sea of removal tools.

tootie · 05-02-2004, 07:01 PM

http://securityresponse.symantec.com...oval.tool.html

ztik · 05-02-2004, 07:04 PM

thats not a virus...

http://www.liutilities.com/products/...library/lsass/

tootie · 05-02-2004, 07:05 PM

Quote:

Originally posted by ztik
thats not a virus...

http://www.liutilities.com/products/...library/lsass/

No, it's not a virus, but the new Sasser worm causes uses the lsass.exe file to shut your system down over and over.

KRL · 05-02-2004, 07:08 PM

Don't delete that. Its part of the hahahahahahas operating system.

You have the Sasser Worm. There are two versions hitting the Net since Saturday. It can affect any computer just by being on the Net if you aren't behind a secure firewall. You don't have to download it, it comes into your PC automatically using a hahahahahahas exploit.

If you haven't updated with the latest critical patch your PC is vulnerable.

More info here:

http://us.mcafee.com/virusInfo/defau...virus_k=125008

http://us.mcafee.com/virusInfo/defau...virus_k=125007

gwilkins · 05-02-2004, 07:16 PM

If you google some of the symptoms you should find manual removal instructions (trendmicro is usually good). It will re-infect your machine if you don't patch your OS right away so make sure you install all the critical hahahahahahas updates

Here's a Trendmicro's removal instructions:

http://www.trendmicro.com/vinfo/viru...=WORM_SASSER.A

They have a free virus scanner that will remove it and find anything else.

05-02-2004, 07:00 PM	#1
Focus Adult Milo Registered User Join Date: Jun 2003 Posts: 15	Virus Help: lsass.exe Ok, maybe someone in here would be kind enough and do a favour to a south american kid (me) finding out how the fuck to remove this virus off my computer. Tried eveything, at least 3 antivirus programs, FixBlast, anti-trojan software, etc, etc and i cant remove it. I had the Blaster once on my PC and i removed it somehow, and installed the patch back then... Now i have the same thing going, the little hahahahahaha popping up saying that the system will shutdown in 60 seconds bullshit.. And i can´t remove it! it says something about hahahahahahas/system32/lsass.exe been hahahahahahahad... I am clueless.. since i can´t identify it as which virus it is... Can someone throw me a rope here? i am drowning in a sea of removal tools.

05-02-2004, 07:01 PM	#2
tootie Confirmed User Join Date: Jun 2003 Location: Planet Earp Posts: 6,041	http://securityresponse.symantec.com...oval.tool.html __________________

05-02-2004, 07:04 PM	#3
ztik Confirmed User Industry Role: Join Date: Aug 2001 Location: Nomad Posts: 5,196	thats not a virus... http://www.liutilities.com/products/...library/lsass/ __________________ .

05-02-2004, 07:08 PM	#5
KRL Entrepreneur Join Date: Oct 2002 Location: USA Posts: 31,429	Don't delete that. Its part of the hahahahahahas operating system. You have the Sasser Worm. There are two versions hitting the Net since Saturday. It can affect any computer just by being on the Net if you aren't behind a secure firewall. You don't have to download it, it comes into your PC automatically using a hahahahahahas exploit. If you haven't updated with the latest critical patch your PC is vulnerable. More info here: http://us.mcafee.com/virusInfo/defau...virus_k=125008 http://us.mcafee.com/virusInfo/defau...virus_k=125007 __________________ If you would like to develop your domains, you can lease inexpensive foreign labor from the leaders in the field at iWebmasters.com TO LOWER YOUR COSTS AND INCREASE YOUR PRODUCTION! * * * * * * * * * * * * Domains Adult News KRL's Newsletter Biz Tips Just Listed Domains

05-02-2004, 07:16 PM	#6
gwilkins Confirmed User Join Date: Feb 2004 Location: Vancouver, BC Posts: 744	If you google some of the symptoms you should find manual removal instructions (trendmicro is usually good). It will re-infect your machine if you don't patch your OS right away so make sure you install all the critical hahahahahahas updates Here's a Trendmicro's removal instructions: http://www.trendmicro.com/vinfo/viru...=WORM_SASSER.A They have a free virus scanner that will remove it and find anything else. Last edited by gwilkins; 05-02-2004 at 07:20 PM..