virus attack?

[jouho]

---

hello guys,

everytime na magopen ko sa akong
computer naa mugawas
"Windows cannot fine 'C:\windows\system\|sass.exe'.blah..blah.."

unsa man ni xa?

kung virus, unsa man na anti virus pagkuha ani?
naka installed ko ug AVG free edition
pero dili nya jpon madelete..

help me..

thanx.

[DigiBoy]

1. have you tried locating the file and delete it from the location?
2. search the file in google to know if others encountered this same virus. (if ever it it)
3. if its a hassle, type msconfig in run, under startup tab, uncheck the file.... para dili na pirmi mu pop up inig on nimo sa imo computer

[rainfall]

pre,

this is probably not the same virus but...

my laptop is mostly use on presentations, so here's the thing... every time nga mg presentation mg plug gyud mi ug usb HDD from anyone lang gyud..
and mostly naa n cila virus and etc

so far i've seen RECYCLED and/or RECYCLER nga hidden folder and some .ini files

i have Symantec Antivirus to run, usually maka detect ciya but cannot delete due to "access denied or being used" of some sort even i locate the file itself and delete it manually

Naa kay idea ani bro kun unsaon ni pg fix?

TY

[softtouch]

lsass.exe is a system process of the Microsoft Windows security mechanisms. It specifically deals with local security and login policies. This program is important for the stable and secure running of your computer and should not be terminated.

Note: lsass.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.

Note: lsass.exe is registered as a downloader. This process usually comes bundled with a virus or spyware and its main role is to do nothing other than download other viruses/spyware to your computer. This process is a security risk and should be removed from your system.

lsass.exe should not be disabled, required for essential applications to work properly.

lsass.exe should be in windows\system32. Any other location might be a virus/trojan.

[ajol]

sasser worm

i think microsoft has a remove tool for it.

[ssworks]

sus bro kataw.an rna sa mga virus imo AVG na free edition, try nlang ug lain na anti virus or much better f u buy jd ug orig na anti virus.. ky lagi rjud ang free kysa sa gipalit ug nilibo..

[[DSX]]

looks like it was scheduled to run every boot up. most likely you can disable it under msconfig (start>run>msconfig>startup). If not then download hijackthis and look for that entry relating to |sass.exe and fix it.

[sleepydeepeyed]

use ccleaner to remove it.

[sauce016]

na ing ana pud akoa.. worm2007.exe naka ingon nacorrupt ako lsass.exe