Need Help

Discussion in 'Computers & Website Forum' started by jet11, Aug 31, 2004.

  1. jet11

    jet11
    Expand Collapse
    New Member

    Joined:
    Mar 14, 2003
    Messages:
    266
    Likes Received:
    0
    My personal computer has a virus that I have so far been unable to delete. It seems to only affect my computer when I log onto the internet. When I log on, I am allowed to stay on for a few minutes when I receive an error message that basically shuts down the entire computer. First, I tried a system restore to day 1, which did not work. Second, I turned off system restore, and ran several virus programs and that did not work.

    I am running out of options. Any help would be greatly appreciated.
     
  2. dianetavegia

    dianetavegia
    Expand Collapse
    Guest

    http://housecall.trendmicro.com/

    I have Norton Anti virus but housecall (FREE) found a trojan worm I didn't realize I had that was causing problems. It takes a little while... but it's worth a try!

    What is the error message you receive?

    Diane
     
  3. jet11

    jet11
    Expand Collapse
    New Member

    Joined:
    Mar 14, 2003
    Messages:
    266
    Likes Received:
    0
    It gives me some kind of critical error associated with the file "lsass.exe". That is the only thing that I have found. I have went out to Norton's website and typed this in, but I receive a great deal of information with worms associated with this application. I will try your suggestion. Thanks for the help.
     
  4. jimbob

    jimbob
    Expand Collapse
    New Member

    Joined:
    Aug 2, 2004
    Messages:
    25
    Likes Received:
    0
    The REAL lsass.exe file is located in the c:\windows\System32 folder.
    In other cases, lsass.exe is a virus, spyware, trojan or worm!

    What antivirus software do you have installed ?
    You may have the sasser worm, and your antivirus software vendor may have a removal tool for that.

    There are spyware removal tools at:
    www.computercops.biz
    I use:
    spybot search and destroy
    ad-aware 6.0
    hijackthis
    Antivirus software does NOT deal with spyware.
     
  5. Bethelassoc

    Bethelassoc
    Expand Collapse
    Member

    Joined:
    Dec 10, 2003
    Messages:
    506
    Likes Received:
    0
    Jet11:

    A quick way to get rid of your sasser problem is to download (you may have to get it off another pc since it knocks you off) McAfee Avert Stinger:

    http://vil.nai.com/vil/stinger/

    This little tool has come in handy for me.
     
  6. jet11

    jet11
    Expand Collapse
    New Member

    Joined:
    Mar 14, 2003
    Messages:
    266
    Likes Received:
    0
    I used both the Spybot search and destroy, as well as ad-aware but the problem persists.

    I have Spybot, ad-aware, cw-shredder, and Norton Antivirus. I received one message on Norton Antivirus that indicated "gaobot" worm, but I went through the procedure listed on the Norton website and could not find the things that are supposed to be deleted.

    Can I delete all lsass.exe that is not located in the C:\Windows\System 32 folder, or is it more complicated than that. Is it possible it has attached itself to other files?
     
  7. rbnd

    rbnd
    Expand Collapse
    New Member

    Joined:
    Jul 22, 2003
    Messages:
    33
    Likes Received:
    0
    jet11,

    Earlier this year I had trouble with a trojan horse. I had the computer tech from the hospital in town come over to try and fix the problem. After observing the problem one of the first things he did was contact:

    http://www.techguy.org

    Within an 1 1/2 to 2 hours the problem was fixed, counting the waiting time.

    He posted the problem on the forum and shortly afterwards there were detailed suggestions. He did what was suggested and then wrote the forum again explaining what was still going on.

    This went back and forth for a while but it was quite obvious the people he was communicating with through the forum were very knowledgeable dealing with adware, viruses, trojan horses, etc.

    If you haven't already, you may want to consider posting your computer problem there. I know they were a great help in taking care of the problem I had with my computer.

    I do know the process involved using ad-aware, hijack this, and some other software more than once, and in a certain order.

    I hope you find your solution quickly.

    Here's the thread on techguy.org that deals with security issues:

    http://forums.techguy.org/f54-s.html
     
  8. jimbob

    jimbob
    Expand Collapse
    New Member

    Joined:
    Aug 2, 2004
    Messages:
    25
    Likes Received:
    0
  9. DavidsAngel

    DavidsAngel
    Expand Collapse
    Guest

    If your having problems with Spyware then do an internet search for Spy Sweeper. It has a free version, and it's a valuable tool. [​IMG]


    have a good one!
     
  10. Rich_UK

    Rich_UK
    Expand Collapse
    <img src =/6181.jpg>

    Joined:
    May 26, 2003
    Messages:
    389
    Likes Received:
    0
  11. jet11

    jet11
    Expand Collapse
    New Member

    Joined:
    Mar 14, 2003
    Messages:
    266
    Likes Received:
    0
    The problem appears to have affected my CD Rom drive as well. I cannot read any kind of CD. I tried downloading some of the suggestions onto a CD, but I cannot upload it to my computer because it cannot read them.

    I cannot download them from the internet either because the download process is interrupted by the shut down.

    I have spent several days trying to resolve this issue, and I am almost ready to give up.
     
  12. jet11

    jet11
    Expand Collapse
    New Member

    Joined:
    Mar 14, 2003
    Messages:
    266
    Likes Received:
    0
    Sorry for the confusion. i think the CD Rom problem is separate from the virus problem.

    The virus problem seems to be associated with the "Internet Explorer" browser. I have logged on with a friend's aol account, downloaded programs for more than an hour, and I haven't had any problems. Does anyone know what virus would only attack through the "Internet Explorer" browser?

    Any suggestions on fixing the CD Rom problem are welcomed as well. The CD Rom appeared to be working correctly until the virus situation became a problem. However, I believe that the two are unrelated (just a coincidence).

    Thanks for any suggestions.
     
  13. Jodo Kast

    Jodo Kast
    Expand Collapse
    New Member

    Joined:
    Sep 4, 2004
    Messages:
    383
    Likes Received:
    0
    Ok, if no virus scan software works, you may have to get it your self. press ctr + alt + delete and get the running processes list. (not the aplication list.) just quickly memorize it. now start your internet and get the processes again. See what new ones there are and write them down. ( except you browser). Now you have your program, which may or may not be Isass.

    In fact you may have more. usually the I've found viruses and others to be running under the user and not under system (in the processes lis).

    now just go delete it. If your feeling confident go to start-&gt;run and type in regedit and do a search for it there. and delete those keys. (ONLY IF YOU KNOW WHAT YOU ARE DOING).

    or after you start up internet, use a debugger like softice, and change the virus so that it does not execute. 90 the litle guy. I reformat reinstall just about every month. I can't handle a dirty computer. its the only sure fire way.
     
  14. DavidsAngel

    DavidsAngel
    Expand Collapse
    Guest

    I have to go with Jodo on this. One more thing is to shut down the program if you reboot before finding it. This might help on the process of elimation on finding it as well.

    Type Run
    Type in msconfig
    Hit the startup tab

    You might be able to find it here as well. Becareful unchecking programs you are not aware what they are. It might cause a problem with windows.
     
  15. jet11

    jet11
    Expand Collapse
    New Member

    Joined:
    Mar 14, 2003
    Messages:
    266
    Likes Received:
    0
    Thanks for the information. I used the Task Manager approach and have been able to identify the Blaster worm (MSBLAST.exe). I don't know if I have other viruses or not, but I can at least get rid of one. Thanks again.
     
  16. Jodo Kast

    Jodo Kast
    Expand Collapse
    New Member

    Joined:
    Sep 4, 2004
    Messages:
    383
    Likes Received:
    0
    No Problem.
     
  17. superdave

    superdave
    Expand Collapse
    New Member

    Joined:
    Jun 30, 2000
    Messages:
    2,055
    Likes Received:
    0
    sounds alot like blaster, if you can get the instructions from some of the sites listed, make sure you update your virus scanner, start using a spyware scanner, and get rid of Microsoft mail and browser software. Especially outlook, using it is pretty much asking for these worms to be installed on your system. also Windows update is important.

    Or ditch them altogether and get Linux.
     

Share This Page

Loading...