windows directory Trojan

[mooncooter]

msas will not remove: Path:C:\WINDOWS\lasse.exe

it is causing havoc with my system, every 3 seconds
microsoft antispyware alert keeps popping up. How can i
get rid of this... mooncooter from Boston GO SOX

 

[Bill Sanderson]

What have you tried? I'm afraid I haven't read up on this particular
object, or how it is created or replicated, but for the simple question of
how to delete it--trying Safe mode first, followed by the recovery console
(reached by booting from your XP CD, unless it is an OEM reinstallation CD,
rather than a true OS CD) If you have an OEM copy of XP, I'd advise calling
your vendors support for instructions about how to use the recovery console.

Or--perhaps you can get help from the real experts. This is a virus. For
free help with virus problems, or security patch issues, in the U.S. or
Canada, call 1-866-pcsafety.

This is a direct, free call to Microsoft PSS--they should be able to help
you out.

Let us know how it goes?

 

[Engel]

Please submit a suspected spyware report to spynet. (tools-

submit suspected spyware report).

Feel free to say what you've got in place and have tried,
and that it didn't work.

Once that has completed, please reboot into safe mode
logged in as administrator
and run a full AntiSpyware scan.
(open Microsoft AntiSpyware, on the scan page choose Scan
options > Full System Scan (check the boxes below) >
click "Run Scan Now" ) scan with the latest signatures to
see if that helps.

It is also important to do a full virusscan with an
updated antivirusprogram in Safe Mode.

Apply the same principles with the following AntiSpyware
solutions in safe mode:
Spy Sweeper - www.webroot.com
Spybot - http://www.safer-networking.org/
CWShredder -
http://www.intermute.com/products/cwshredder.html
Ad-Aware - www.lavasoftusa.com

 

[Ron Chamberlin]

Bill,
Sounds like the Sasser worm.

Ron Chamberlin
MS-MVP

 

[Ron Chamberlin]

Hi Neighbor,
Sounds like Sasser.
Grab this and give it a shot.

http://www.microsoft.com/downloads/...e0-e72d-4f54-9ab3-75b8eb148356&displaylang=en

Ron Chamberlin
MS-MVP

 

[Bill Sanderson]

Hmm - shows how rusty I am.

21 months probation? and 250k split two ways in rewards. Not pretty. Hope
the guilty party isn't a vengeful sort of personality.

--