sasser is not ending

[matt]

Hi ;
I just noticed under task manager i have the lsass.exe file running with
1,696K.
When i heard about this lsass at the first time i have downloaded the
patches before the virus gets in my system.Also the removal tools.And made
the necessary Norton updates and run a system scan.

Everything is just fine, no virus found,no shutdowns, no errors... But this
lsass.exe uses the memory and the processor.

Tried to end the process but comes out as :
This is a critical process. Task manager cannot end this process

Tried to delete the file under system32 but comes out as :
Cannot delete lsass: Access denied
Make sure the disk is not full or......

And the application is dated as August 29, 2002


Regards

 

[Bre]

Hi Matt,
This is a valid system file. It verifies the validity of user logons to your
computer or server.

Bre

 

[John McGaw]

Hi ;
I just noticed under task manager i have the lsass.exe file running with
1,696K.
When i heard about this lsass at the first time i have downloaded the
patches before the virus gets in my system.Also the removal tools.And made
the necessary Norton updates and run a system scan.

Everything is just fine, no virus found,no shutdowns, no errors... But this
lsass.exe uses the memory and the processor.

Tried to end the process but comes out as :
This is a critical process. Task manager cannot end this process

Tried to delete the file under system32 but comes out as :
Cannot delete lsass: Access denied
Make sure the disk is not full or......

And the application is dated as August 29, 2002


Regards

And the question was what?

lsass.exe is a perfectly normal part of the operating system and is
provided by MS and the system is perfectly right in preventing you from
stopping or deleting it -- if you actually did manage to delete it I suspect
that you would not be able to reboot the computer. I take it that some
source has told you that lsass.exe is bad -- can you tell us where you got
this information?
--
John McGaw
[Knoxville, TN, USA]

Return address will not work. Please
reply in group or through my website:
http://johnmcgaw.com

 

[matt]

Appreciate that...
i was thinking that it was related with Sasser and its variants... like a
part of it..

Hi ;
I just noticed under task manager i have the lsass.exe file running with
1,696K.
When i heard about this lsass at the first time i have downloaded the
patches before the virus gets in my system.Also the removal tools.And made
the necessary Norton updates and run a system scan.

Everything is just fine, no virus found,no shutdowns, no errors... But this
lsass.exe uses the memory and the processor.

Tried to end the process but comes out as :
This is a critical process. Task manager cannot end this process

Tried to delete the file under system32 but comes out as :
Cannot delete lsass: Access denied
Make sure the disk is not full or......

And the application is dated as August 29, 2002


Regards

And the question was what?

lsass.exe is a perfectly normal part of the operating system and is
provided by MS and the system is perfectly right in preventing you from
stopping or deleting it -- if you actually did manage to delete it I suspect
that you would not be able to reboot the computer. I take it that some
source has told you that lsass.exe is bad -- can you tell us where you got
this information?
--
John McGaw
[Knoxville, TN, USA]

Return address will not work. Please
reply in group or through my website:
http://johnmcgaw.com

 

[Bre]

This is a NORMAL windows file that you need. It verifies the validity of
user logons to your computer or server.
It is not the sasser virus.
If you ever are wondering about something like this in the future,
before you try and delete a file, type the name of the file in a google
search engine. It will most likely save you from doing something you
will regret.

Bre