Hi Luv,
First of all, it is not a good idea to post to these groups with a valid
email address, as a worm called W32/Swen gets addresses from here.
Secondly, how do you know you are infected? Did you receive a notification
of infection from some antivirus program? As Carey suggested, try scanning
your machine to verify you do or do not have the virus. Then go to Windows
Update (
http://windowsupdate.microsoft.com/) and download the patch to
prevent further infection.
If you just have the symptom of it (LSASS.EXE shutdown notification), it is
possible that you are infected by one of the other worms that uses this
vulnerability.
Finally, please run this program:
http://www.spychecker.com/program/hijackthis.html
Generate a log by going to Options>Misc. Tools>Generate StartUpLog and then
post it here. We can isolate what worm is running on startup and then get
you disinfected from there.
Sincerely,
Benjamin "Trafton" Johnstone-Anderson
Microsoft MVP - Windows Security
Remove "SPAM" from email address to reply!
Security Manifest:
www.msmvps.com/trafton/