PDA

View Full Version : nimos (worm)Is it normal that it is inside Lsass?


zoorrozorrito
March 24th, 2004, 06:28 AM
I am using an antitrojan, "troyan explore", and it says thay nimus worm is inside Lsass.exe. But it has not created any registry key, as norton or mcaffe say. I say this becauses I have searched very well in my registry, that's why I say that if it is normal for nimos to be inside this one. I have scaned with bit defender, virus chaser, e-scan, panda and these antivirus don't detect this worm.
Is it a worm inside it?
thanks for answering.

Paul Wilders
March 24th, 2004, 06:46 AM
Please submit the file for a free online check over here (http://www.kaspersky.com/remoteviruschk.html). In case it comes up clean, this looks like a false positive from your antitrojan; contact your antitrojan vendor pointing this issue out.

regards.

paul

zorrozorrito
March 24th, 2004, 07:29 AM
I have sibmitted the Isass.exe file, and kaspersky says there's nothing there, so that probably it is a false positive as you say, thanks a lot ;D
It was very strange that the antitrojan says it is nimos and it didn't created registry. I think you are right, thanks a lot

Paul Wilders
March 24th, 2004, 07:31 AM
My pleasure ;). Please inform your antitrojan vendor.

regards.

paul

BigDaddy
April 17th, 2004, 05:14 AM
Just to inform you guys... a new backdoor is spreading named ISASS.EXE (capitals and mind the I in stead of the L) which is putting your pc to sending mails.

Paul