lsass.exe

dorkz · Jul 27, 2004, 12:52 PM

I keep getting this box appear every 5 minutes, should I permanantly block it or what?

The_Neon_Cowboy · Jul 27, 2004, 12:58 PM

Read here
http://www.liutilities.com/products/...library/lsass/

the names it's also used by a sasser worm varient and other bad files
http://ask-leo.com/archives/000114.html

But I would update my anti virus and do a full scan just in case....

dorkz · Jul 27, 2004, 01:11 PM

Should I permanantly block the attempt by ticking the box "always use this action" ??? My anti-virus is up-to-date and im performing a scan right now.

Zelig · Jul 27, 2004, 01:28 PM

Go ahead and block it, you can always change the rules later, if you want it unblocked for some reason.

ViRuS2k · Jul 27, 2004, 04:41 PM

is there any program out there to completely kill this worm ? i get that POPup box aswell something but only when im login on to my system sometimes from a reboot or startup lol i though it was nothing to worry about but if its a worm then how do i completely kill it ? dam i though sp2 RC2 would have protected from this heh and i have tread micro secturity installed aswell and fully up to date and it does not detect it at all on full scan ? hmmm

Jul 27, 2004, 12:52 PM	#1
dorkz Striving to overcome Join Date: Dec 2003 Location: United Kingdom Posts: 100 Rep Power: 0	lsass.exe I keep getting this box appear every 5 minutes, should I permanantly block it or what?

Jul 27, 2004, 12:58 PM	#2
The_Neon_Cowboy HardwareHeaven Extreme Member Join Date: Dec 2002 Location: U.S.A. Posts: 16,009 Rep Power: 92 System Specs	Read here http://www.liutilities.com/products/...library/lsass/ the names it's also used by a sasser worm varient and other bad files http://ask-leo.com/archives/000114.html But I would update my anti virus and do a full scan just in case.... __________________ Last edited by The_Neon_Cowboy; Jul 27, 2004 at 01:04 PM.

Jul 27, 2004, 01:11 PM	Thread Starter #3
dorkz Striving to overcome Join Date: Dec 2003 Location: United Kingdom Posts: 100 Rep Power: 0	Should I permanantly block the attempt by ticking the box "always use this action" ??? My anti-virus is up-to-date and im performing a scan right now.

Jul 27, 2004, 01:28 PM	#4
Zelig HardwareHeaven Extreme Member Join Date: Jun 2003 Location: Canada Posts: 3,187 Rep Power: 71 System Specs	Go ahead and block it, you can always change the rules later, if you want it unblocked for some reason.

Jul 27, 2004, 04:41 PM	#5
ViRuS2k HardwareHeaven Extreme Member Join Date: Mar 2003 Location: Uk Posts: 8,334 Rep Power: 0 System Specs	is there any program out there to completely kill this worm ? i get that POPup box aswell something but only when im login on to my system sometimes from a reboot or startup lol i though it was nothing to worry about but if its a worm then how do i completely kill it ? dam i though sp2 RC2 would have protected from this heh and i have tread micro secturity installed aswell and fully up to date and it does not detect it at all on full scan ? hmmm