Error with Lsass.exe and ms04-011

[Guest]

I used Norton to deal with the Sasser Virus, i hope. But now I can't load
anything. Whenever I try I get "Windows cannot find
C:\windows\config\lsass.exe and a Rundll error: "error loading
C:\winnt\system32\pmkjg.dll Invalid access to memory location"

I looked it up on your help pages and tried to install the ms04-011 patch
for xp by the number of kb835732 but whenever i do it just says "access
denied" and uninstalls it. I tried looking up a solution to that, but all the
microsoft help pages said that youd get that message if you were running xp
from a windows 2003 machine and i'm not. I have no idea how to fix this or
even where else to look anymore. Even pointing me in the right direction for
where to look would be great. Thanks.

 

[Malke]

I used Norton to deal with the Sasser Virus, i hope. But now I can't load
anything. Whenever I try I get "Windows cannot find
C:\windows\config\lsass.exe and a Rundll error: "error loading
C:\winnt\system32\pmkjg.dll Invalid access to memory location"

I looked it up on your help pages and tried to install the ms04-011 patch
for xp by the number of kb835732 but whenever i do it just says "access
denied" and uninstalls it. I tried looking up a solution to that, but all the
microsoft help pages said that youd get that message if you were running xp
from a windows 2003 machine and i'm not. I have no idea how to fix this or
even where else to look anymore. Even pointing me in the right direction for
where to look would be great. Thanks.

It is unlikely that you had Sasser since it is so old. The pmkjg.dll
belongs to malware connected with the Vundo trojan. Your machine is
still not clean, although I don't know what you mean by "can't load
anything".

This is not Microsoft, btw - this is a newsgroup hosted on MS servers
offering peer-to-peer tech support for XP and the helpers are, with few
exceptions, all volunteers who don't work for Microsoft.

I'll give you general malware removal steps below but since I don't know
1) the actual state of your machine; 2) your level of computer skills,
I'm going to suggest that you either back up your data and do a clean
install of Windows or take the machine to a professional computer repair
shop (not your local version of BigComputerStore/GeekSquad). Please be
aware that not all local shops are skilled at removing malware and even
if they are, your computer may be so infested that Windows will need to
be clean-installed.

Do the preparatory steps here:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Then do the specific removal steps here:
http://www.elephantboycomputers.com/page2.html#Winfixer - Winfixer

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).


Malke

 

[Frank]

I used Norton to deal with the Sasser Virus, i hope. But now I can't load
anything. Whenever I try I get "Windows cannot find
C:\windows\config\lsass.exe and a Rundll error: "error loading
C:\winnt\system32\pmkjg.dll Invalid access to memory location"

I looked it up on your help pages and tried to install the ms04-011 patch
for xp by the number of kb835732 but whenever i do it just says "access
denied" and uninstalls it. I tried looking up a solution to that, but all
the
microsoft help pages said that youd get that message if you were running
xp
from a windows 2003 machine and i'm not. I have no idea how to fix this or
even where else to look anymore. Even pointing me in the right direction
for
where to look would be great. Thanks.

lsass.exe first letter (L, el) is a windows file. Isass.exe is a fraud
first letter (I, eye).