"zacksmom" wrote:
> I am getting windows/system32/cwdykspyw/lsass.exe error when i start up my
> computer. It doesnt seem to effect anything but its very annoying.
Your machine infected and you need to run a thorough scan by doing the
following steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/supe...freevspro.html
http://www.malwarebytes.org/rr-update/rr-free-setup.exe
http://onecare.live.com/site/en-gb/d....htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
Run a scan from here on-line:
http://security.symantec.com/sscv6/d...d=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Run disk clean up on your Drive.
You can download this tool o run clean up:
http://www.ccleaner.com/download/bui...wnloading-slim
You can download this tool "AutoRuns for Windows"
http://technet.microsoft.com/en-us/s.../bb963902.aspx
And remove the entry from here:
Locate this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run = look in
the right pane/window and remove the entry for it
"C:\Windows/system32/cwdykspyw/lsass.exe".
Run disk cleanup and defrag in safe mode. Then run this command:
sfc /scannow
HTH.
nass
---
http://www.nasstec.co.uk
Similar Threads
