View Full Version : nimos (worm)Is it normal that it is inside Lsass?
zoorrozorrito
March 24th, 2004, 06:28 AM
I am using an antitrojan, "troyan explore", and it says thay nimus worm is inside Lsass.exe. But it has not created any registry key, as norton or mcaffe say. I say this becauses I have searched very well in my registry, that's why I say that if it is normal for nimos to be inside this one. I have scaned with bit defender, virus chaser, e-scan, panda and these antivirus don't detect this worm.
Is it a worm inside it?
thanks for answering.
Paul Wilders
March 24th, 2004, 06:46 AM
Please submit the file for a free online check over here (http://www.kaspersky.com/remoteviruschk.html). In case it comes up clean, this looks like a false positive from your antitrojan; contact your antitrojan vendor pointing this issue out.
regards.
paul
zorrozorrito
March 24th, 2004, 07:29 AM
I have sibmitted the Isass.exe file, and kaspersky says there's nothing there, so that probably it is a false positive as you say, thanks a lot ;D
It was very strange that the antitrojan says it is nimos and it didn't created registry. I think you are right, thanks a lot
Paul Wilders
March 24th, 2004, 07:31 AM
My pleasure ;). Please inform your antitrojan vendor.
regards.
paul
BigDaddy
April 17th, 2004, 05:14 AM
Just to inform you guys... a new backdoor is spreading named ISASS.EXE (capitals and mind the I in stead of the L) which is putting your pc to sending mails.
Paul
vBulletin® Copyright ©2000-2012, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2012, Wilders Security Forums