Re: Sasser Virus

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: madmax (maxpro4u_at_nomail.afraid.org)
Date: 07/15/04 

Date: Thu, 15 Jul 2004 21:23:36 GMT

Stuart Hanley wrote:

> The Norton Antivirus website details the LSASS.EXE file
> that is running on my task manager as the SASSER WORM,
> however, when I find the source of this file, it tells me
> that its part of the microsoft service pack?
>
> Can anyone clarify this either way please?
>
>
LSASS.EXE is Local Security Authentication Server and it is in System32.
If you have it anywhere else get rid of it.
Is your system updated? There were more updates issued Tuesday.
See my site for malware scanners.
-max 

-- 
To help you stay safe see: http://www.geocities.com/maxpro4u/madmax.html
This message is virus free as far as I can tell.
Change nomail.afraid.org to neo.rr.com so you can reply
(nomail.afraid.org has been set up specifically for
  use in Usenet. Feel free to use it yourself.)

Relevant Pages

  • Re: ghost background program
    ... extract the files from the zip and place in your system32 ... Task Manager ~ Press Ctrl Alt Del and select "Task Manager" or Ctrl Shift ...
    (microsoft.public.win2000.general)
  • "svchost.exe in uppercase"
    ... Is the file svchost.exe still virus free if it is ... uppercase, in task manager? ...
    (microsoft.public.security.virus)
  • Re: "svchost.exe in uppercase"
    ... | Is the file svchost.exe still virus free if it is ... | uppercase, in task manager? ...
    (microsoft.public.security.virus)