| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 51701 | 2004-11-28 02:56:00 | lsass.exe = sasser ??? | anaroo (5044) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 297124 | 2004-11-28 02:56:00 | I run w2k and there is a file lsass.exe in winnt\system32. does it mean i have 100% sasser worm on my computer or...? i have tested it with AV Kaspersky and sasser removal tools but result has aways been negative. The file is still there and running... Thanks |
anaroo (5044) | ||
| 297125 | 2004-11-28 03:06:00 | Why not delete the file and reboot? If that does the trick then you have found the answer. If you want to put the file back just restore from recycle bin. | Berryb (654) | ||
| 297126 | 2004-11-28 03:09:00 | No! lsass.exe found in windows\system32 (or winnt\system32) is a Windows file (Local Security Authentication Server). Don't delete it. See here. Mike. |
Mike (15) | ||
| 297127 | 2004-11-28 03:15:00 | Well I was caught out there Mike. Not thinking straight today, you are correct and I should have known. To much alcohol last night I think!! | Berryb (654) | ||
| 297128 | 2004-11-28 03:29:00 | > Well I was caught out there Mike. Not thinking > straight today, you are correct and I should have > known. To much alcohol last night I think!! It happens :D Mike. |
Mike (15) | ||
| 297129 | 2004-11-29 02:43:00 | Thanks guys i will keep it running. | anaroo (5044) | ||
| 297130 | 2004-11-29 06:52:00 | disable from msconfig | Nighthawk (5846) | ||
| 297131 | 2004-11-29 14:00:00 | Anaroo, Did you used to work at MANCO? 2k can run up to 2 instances of ls, AT ONCE. Caution they are needed, but can be pirated/trojaned so must be checked carefully. If you google and M/S carefully, there are severall articles on this. D. |
drb1 (4492) | ||
| 1 | |||||