Wilders Security Forums  

Go Back   Wilders Security Forums > Other Security Topics > malware problems & news
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old November 14th, 2004, 03:20 PM
AUXHILLARYmikE AUXHILLARYmikE is offline
Infrequent Poster
 
Join Date: Aug 2004
Location: I live in Crosskeys near Cardiff in Wales. United Kingdom.
Posts: 12
Default lsass.exe /I use XPsp2home<ALL CLEAN?>

HI
Today i ran my taskmanager and noticed a process called lsass.exe using between 1.2KB to 1.7KB of memory(1.2 when pc is idle rising to 1.7 when connected).
A google told me this is a Worm! The thing is though, my pc(XPhome/SP2) is fully updated, patched, tweeked and running well! I use panda at present and my system is clean. I`ve ran scans by Trojan Hunter-Ad-aware6pro-spybotSD-Spysubtract-CWSshredder as an Administrator in normal and safe, all find zip. There`s no freezing or un-explained occurrences. So why is this program there? I`ve tried ending it but TM tells me it`s a crucial process.
Only thing i can think of is that around 12mths ago, before really realising what viruses/spyware was, my pc got infected by a virus of some kind. Looking back i remember the computer turning itself off, freezing and doing weird things etc. After which i ended up re-installing windows twice!!
Is there any way that this program is a remnant of that episode or is it getting ready to fry my pc. What should i do??
Thanks
mike (UK)
  #2  
Old November 14th, 2004, 03:26 PM
snowbound snowbound is offline
Retired Moderator
 
Join Date: Feb 2003
Location: The Big Smoke
Posts: 8,727
Default Re: lsass.exe /I use XPsp2home<ALL CLEAN?>

I have it too.

I'm sure it's just this,

http://www.liutilities.com/products/...library/lsass/


snowbound
  #3  
Old November 14th, 2004, 03:37 PM
AUXHILLARYmikE AUXHILLARYmikE is offline
Infrequent Poster
 
Join Date: Aug 2004
Location: I live in Crosskeys near Cardiff in Wales. United Kingdom.
Posts: 12
Default Re: lsass.exe /I use XPsp2home<ALL CLEAN?>

THANKS SNOWBOUND!! I feel a bit stupid now. Allthough, The link you provided is the same site that told me the process was a virus, after my first google search on the subject.
Thanks again.
mike(UK)
  #4  
Old November 14th, 2004, 03:51 PM
snowbound snowbound is offline
Retired Moderator
 
Join Date: Feb 2003
Location: The Big Smoke
Posts: 8,727
Default Re: lsass.exe /I use XPsp2home<ALL CLEAN?>

Your Welcome.

If i'm not mistaken, the sasser worm did exploit a problem in lsass.exe some time ago.


snowbound
  #5  
Old November 14th, 2004, 04:25 PM
Blackspear's Avatar
Blackspear Blackspear is offline
Global Moderator
 
Join Date: Dec 2002
Location: Gold Coast, Queensland, Australia
Posts: 15,114
Default Re: lsass.exe /I use XPsp2home<ALL CLEAN?>

Quote:
Originally Posted by snowbound
If i'm not mistaken, the sasser worm did exploit a problem in lsass.exe some time ago.
Indeed it did, generally this is the first thing pointed to with a lsass.exe error message, though as you have found, it is not always the case...

Cheers
__________________
"Illegitimis non carborundum"
translation:
"Don't let the bastards grind you down"
U.S. General Joseph W. "Vinegar Joe" Stilwell (1883-1946)
Two Photographers
 

Wilders Security Forums > Other Security Topics > malware problems & news « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 12:08 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums