sasser

[robbiew1967]

i have two files in my system 32 folder one called lsasrv.dll and one called lsass they also appear in my task manager and i cannot end the process because it tells me that it is a critical process. i have already tried formatting my hard drive and reinstalling windows and the tools and patches from microsoft and norton and this again do not work does anyone have any idea how to get rid of these of the system

many thanks :) :) :) :)

[FastLearner]

Hello. lsass.exe is an important system file that should be located in the c:\windows\system 32\ folder. I would not delete it! The thing is a vulnerability in this file is what the Sasser worm authors exploited. You should first find out if you have the good lsass.exe or the infected one.

http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

[robbiew1967]

hi newbie

you sure do get around :) anyway i have used the symnatec tool adn it just comes up that it has found nothing so i am assuming that it is the good sasser if there such thing :rolleyes:

thank you newbie :D

[FastLearner]

Don't mention it, robbiew1967. Glad I could help. It wouldn't hurt anyway to run an online virus scan at HouseCall or BitDefender just to be sure. But it looks like the "sass" in the file name scared you a little bit! I'll admit, they do look somehow related, so don't feel too bad...:) Hope your WAN's coming along, as well!

Regards
-G

[robbiew1967]

thanks newbie

yes the wan is coming along great i have a friend of mine working with me to get get it up and running as i write this should all be done by the beggining of next week :) :)

regards A :)