lsass.exe

[Guest]

i am getting the usual lsass.exe warning. i read how to prevent the shutdown
of the system and did so. this began immediately after i upgraded to XP from
ME. i had the firewall enabled and have current McAfee antivirus software
running. i have ran the stinger download from McAfee and used the detection
utility from microsoft. all have shown no sasser virus variants. i have all
current updates on the system up to SP2. i am at a loss as to what to do. any
suggestions?!?!

 

[Karl]

If you have Isass then : You have the Backdoor.Futro virus.

Note - do not confuse this with LSASS which will most times show as
"lsass" in your Task List where the first letter is in fact a lowercase
"L" rather than an "i".

For a list of processes, look here. Great site!
http://www.answersthatwork.com/Tasklist_pages/tasklist.htm


Quote:
Process File: lsass or lsass.exe
Process Name: Local Security Authority Service

Description:
lsass.exe is a system process of the Microsoft Windows security mechanisms.
It specifically deals with local security and login policies. Note:
lsass.exe
also relates to the Windang.worm, irc.ratsou.b, Webus.B, MyDoom.L,
Randex.AR,
Nimos.worm which spread via floppy disk drives, mass-mailing and
peer-to-peer
sharing. Please review file path for clarification of this.

Use Kazaa or Limewire? If you do, it could bhe the P2P worm, but if you did
an AV scan with a reputable company (Norton,McAfee) and you came up clean, I
would say that this is a OK process.

BMR777
www.rusnakweb.com