I have a Virus?

Question

My friends computer has Lsass.exe how do u get rid of that worm?

Answer 1

Lsass.exe is not an worm or virus.
It is a system file - LSA Shell (Export Version) File.
So don't worry about it.
Its is critical system file and you system may not boot with out it.

Note: If your system behaves strange then there is a possibility that this file may be affected. Only then you need to use Anti-Virus and heal this file.

Be Cool

Answer 2

2

Answer 3

After reading your message, I searched for the process lsass.exe on many security websites. Here is what I came up with:

1. lsass.exe can be either a genuine process in Windows or can be part of a Trojan Horse.

A) Reference from Process Library website: (http://www.processlibrary.com/directory/files/lsass/index.html)

"lsass.exe is a system process of the Microsoft Windows security mechanisms. It specifically deals with local security and login policies. This program is important for the stable and secure running of your computer and should not be terminated."

or

lsass.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system."



B) Reference from Exe Library: (http://www.exelib.com/exe/15)

"Lsass.exe is the local security and authentication server system. The file path is c:\windows\system32\lsass.exe. It handles authentication of users from the Windows logon screen (the "Winlogon process") and generates user access tokens and launches explorer.exe (or any other defined shell). This process cannot be ended as it is a crucial system service."



So, I recommend you download and scan with Ewido Anti-spyware. Despite its name, Ewido is a standalone anti-Trojan security program. It is one of the best Trojan detection and removal application. And, best of all, it is entirely free. Ewido wil determine if the lsass.exe file is malware or a genuine Windows process. Ewido was recently acquired by Grisoft, the maker of the popular antivirus AVG. Ewido comes with a 30-day trial period. After this period, the real time protection is disabled but everything else works just fine. Download Ewido from: http://www.ewido.net/en/

Answer 4

go to google and type in lsass.exe in the search area... should come up with a site that has something that will get rid of it... good luck.

Answer 5

You need good anti-virus software...
Just search under antivirus...Many have free trials that will get one out of a pickle.

Answer 6

A good antivirus program will fix that. I recommend antivir free edition.

Answer 7

http://www.symantec.com/security_response/writeup.jsp?docid=2004-052611-4308-99

information from the symantec (norton antivirus) concerning LSASS.

good luck.

Answer 8

www.ewido.net will remove it free version.
Here are other free ones.
Spybots search and Destroy http://www.download.com/3000-8022-10122137.html?tag=pao
adaware se> http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10399602.html?tag=lst-0-1
http://www.webroot.com/land/freescan.php
a-squared Free> http://www.emsisoft.com/en/software/free/
http://housecall.antivirus.com/housecall/start_frame.asp
http://housecall65.trendmicro.com/
X -Cleaner Micro Edition scan http://www.spywareguide.com/onlinescan.php
http://www.kaspersky.com/virusscanner
http://www.windowsecurity.com/trojanscan/
http://www.bitdefender.com/scan8/ie.html
http://www.pandasoftware.com/products/activescan/com/activescan_principal.htm

http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://www.javacoolsoftware.com/spywareblaster.html
Spywareguard too.
http://www.javacoolsoftware.com/spywareguard.html
http://www.ewido.net/en/onlinescan/

Answer 9

download ewido antyspyware at grisoft.com
it would find it very fast

Answer 10

www.antivir.com