Go Back   PCMech Forums > Help & Discussion > Networking & Online Security

Need Some Help? Type Your Keywords Here:

Reply
 
LinkBack Thread Tools Search this Thread Rate Thread Display Modes
Old 08-17-2004, 12:00 AM   #1
Member (7 bit)
 
Join Date: Apr 2004
Posts: 79
lsass.exe

After doing some research, I found out that I have a (or what I assume to be) Sasser. lsass.exe is running in my processes tab, too (which is sasser, isn't it?)

Anyhow, I've read that the typical thing that it does is restart your computer within 60 seconds. I'm not getting that, though. My problem: There is no explorer. No toolbar, clock, right clicking on the desktop, none of that.

Also, I can't seem to manage to get my computer to boot in safe mode. I try the F8 method, and all it does is ask me which item I want to boot first.

I've tried runnin Ad-Aware, but that was to no avail.

Thanks for your help
Captain A is offline   Reply With Quote
Old 08-17-2004, 12:04 AM   #2
Member (12 bit)
 
icallmedan's Avatar
 
Join Date: Mar 2003
Posts: 2,309
Send a message via AIM to icallmedan
Ad Aware wont help with viruses...you need to run Norton, or some other anti virus. If you dont have one. Grisoft publishes AVG, which is free. Just search goolge for AVG, or Grisoft.

**edit

http://securityresponse.symantec.com...imos.worm.html

There is how you can remove it...and info about it.

Last edited by icallmedan; 08-17-2004 at 12:08 AM. Reason: clarity
icallmedan is offline   Reply With Quote
Old 08-17-2004, 12:08 AM   #3
Member (7 bit)
 
Join Date: Apr 2004
Posts: 79
Is this what I want?

http://www.grisoft.com/us/us_remtext.php?id=bagbugnet
Captain A is offline   Reply With Quote
Old 08-17-2004, 12:15 AM   #4
Member (7 bit)
 
Join Date: Apr 2004
Posts: 79
That would be all good and dandy..if..I could find my start button, or go into safe mode
Captain A is offline   Reply With Quote
Old 08-17-2004, 01:06 AM   #5
Certified Audio Nut
 
Hi Ho's Avatar
 
Join Date: Jul 2003
Location: Washington State
Posts: 7,214
Send a message via MSN to Hi Ho
Take a look at THIS page. Scroll down to lsass.exe. There are three versions of it. One that you do not want to mess with and two that are viruses.
__________________
"I'm not lying. I'm writing fiction with my mouth." - Homer Simpson My Miscelaneous Gallery
ASUS P7P55D PRO / Intel Core i7 860 / 8GB Mushkin DDR3 1600 RAM / OCZ Vertex 2 120GB SSD / Seagate 1TB 7200.12 / Asus Radeon 5870 1GB / LG Super-Multi 22x SATA DVD-RW / Windows 7 Home Premium 64bit / Cable Modem / HT Omega Striker 7.1 Sound Card / FSP 700W PSU / Logitech MX1000 Wireless Laser Mouse / Asus 24" 16:9 LCD w/Webcam / Axiom Audiobyte 2.1 Speakers
Hi Ho is offline   Reply With Quote
Old 08-17-2004, 01:12 AM   #6
Member (7 bit)
 
Join Date: Apr 2004
Posts: 79
Ok, my conclusion is:

I don't have sasser afterall.

My explorer is still gone, even in safe mode.

Problems..problems..problems.
Captain A is offline   Reply With Quote
Old 08-17-2004, 01:14 AM   #7
Certified Audio Nut
 
Hi Ho's Avatar
 
Join Date: Jul 2003
Location: Washington State
Posts: 7,214
Send a message via MSN to Hi Ho
It sounds like you may need to do a repair install or a reformat.
Hi Ho is offline   Reply With Quote
Old 08-17-2004, 02:31 AM   #8
glc
Forum Administrator
Staff
Premium Member
 
glc's Avatar
 
Join Date: May 2000
Location: Joplin MO
Posts: 37,776
You are pressing F8 too early - you press it just before the XP crawl screen pops up. Have you tried doing a system restore back to a date when it was working right? (assuming XP on both comments.........you didn't specify)
glc is online now   Reply With Quote
Old 08-17-2004, 02:36 AM   #9
Member (7 bit)
 
Join Date: Apr 2004
Posts: 79
Blah! I ended up getting into safemode via msconfig, then restored back a couple days.

What a pain in the butt! Any idea on why I just lost..everything?
Captain A is offline   Reply With Quote
Old 08-18-2004, 07:28 AM   #10
Member (8 bit)
 
Join Date: Aug 1999
Location: Florida
Posts: 237
Send a message via AIM to revelation
You did not lose any of your data. You may have lost some settings or things that changed your computer in the last couple of days, but that was the idea of going back....

I used to disable that feature in XP because I thought it was a resource hog, I now leave it running because it may just save me from some frustration some time....
revelation is offline   Reply With Quote
Old 08-18-2004, 11:20 AM   #11
Certified Audio Nut
 
Hi Ho's Avatar
 
Join Date: Jul 2003
Location: Washington State
Posts: 7,214
Send a message via MSN to Hi Ho
The system restore feature has saved me many times. It really does work. I don't see why anyone would disable it with todays computers. There is plenty of hard drive space to go around.
Hi Ho is offline   Reply With Quote
Old 08-18-2004, 11:26 AM   #12
Member (12 bit)
 
Markoman01027's Avatar
 
Join Date: Jul 2002
Location: Easthampton, Massachusetts
Posts: 2,633
I have LSASS.EXE running but I do not believe that is the sassar worm. The file resides in \system32 and the other exe's of lsass relate to the service pack.

it is a system process--you don't need to worry about that one.
Markoman01027 is offline   Reply With Quote
Reply

Bookmarks

Still Need Help? Type Your Keywords Here:


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 12:58 PM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 PL2