1. Welcome to Baptist Board, a friendly forum to discuss the Baptist Faith in a friendly surrounding.

    Your voice is missing! You will need to register to get access to all the features that our community has to offer.

    We hope to see you as a part of our community soon and God Bless!

Need Help

Discussion in 'Computers & Technology Forum' started by jet11, Aug 31, 2004.

Top Posters
  1. jet11

    jet11 Member

    Joined:
    Mar 14, 2003
    Messages:
    266
    Likes Received:
    0
    My personal computer has a virus that I have so far been unable to delete. It seems to only affect my computer when I log onto the internet. When I log on, I am allowed to stay on for a few minutes when I receive an error message that basically shuts down the entire computer. First, I tried a system restore to day 1, which did not work. Second, I turned off system restore, and ran several virus programs and that did not work.

    I am running out of options. Any help would be greatly appreciated.
     
    #1 jet11, Aug 31, 2004
  2. dianetavegia

    dianetavegia Guest

    http://housecall.trendmicro.com/

    I have Norton Anti virus but housecall (FREE) found a trojan worm I didn't realize I had that was causing problems. It takes a little while... but it's worth a try!

    What is the error message you receive?

    Diane
     
    #2 dianetavegia, Aug 31, 2004
  3. jet11

    jet11 Member

    Joined:
    Mar 14, 2003
    Messages:
    266
    Likes Received:
    0
    It gives me some kind of critical error associated with the file "lsass.exe". That is the only thing that I have found. I have went out to Norton's website and typed this in, but I receive a great deal of information with worms associated with this application. I will try your suggestion. Thanks for the help.
     
    #3 jet11, Aug 31, 2004
  4. jimbob

    jimbob New Member

    Joined:
    Aug 2, 2004
    Messages:
    25
    Likes Received:
    0
    The REAL lsass.exe file is located in the c:\windows\System32 folder.
    In other cases, lsass.exe is a virus, spyware, trojan or worm!

    What antivirus software do you have installed ?
    You may have the sasser worm, and your antivirus software vendor may have a removal tool for that.

    There are spyware removal tools at:
    www.computercops.biz
    I use:
    spybot search and destroy
    ad-aware 6.0
    hijackthis
    Antivirus software does NOT deal with spyware.
     
    #4 jimbob, Aug 31, 2004
  5. Bethelassoc

    Bethelassoc Member

    Joined:
    Dec 10, 2003
    Messages:
    507
    Likes Received:
    1
    Jet11:

    A quick way to get rid of your sasser problem is to download (you may have to get it off another pc since it knocks you off) McAfee Avert Stinger:

    http://vil.nai.com/vil/stinger/

    This little tool has come in handy for me.
     
    #5 Bethelassoc, Aug 31, 2004
  6. jet11

    jet11 Member

    Joined:
    Mar 14, 2003
    Messages:
    266
    Likes Received:
    0
    I used both the Spybot search and destroy, as well as ad-aware but the problem persists.

    I have Spybot, ad-aware, cw-shredder, and Norton Antivirus. I received one message on Norton Antivirus that indicated "gaobot" worm, but I went through the procedure listed on the Norton website and could not find the things that are supposed to be deleted.

    Can I delete all lsass.exe that is not located in the C:\Windows\System 32 folder, or is it more complicated than that. Is it possible it has attached itself to other files?
     
    #6 jet11, Aug 31, 2004
  7. rbnd

    rbnd New Member

    Joined:
    Jul 22, 2003
    Messages:
    33
    Likes Received:
    0
    jet11,

    Earlier this year I had trouble with a trojan horse. I had the computer tech from the hospital in town come over to try and fix the problem. After observing the problem one of the first things he did was contact:

    http://www.techguy.org

    Within an 1 1/2 to 2 hours the problem was fixed, counting the waiting time.

    He posted the problem on the forum and shortly afterwards there were detailed suggestions. He did what was suggested and then wrote the forum again explaining what was still going on.

    This went back and forth for a while but it was quite obvious the people he was communicating with through the forum were very knowledgeable dealing with adware, viruses, trojan horses, etc.

    If you haven't already, you may want to consider posting your computer problem there. I know they were a great help in taking care of the problem I had with my computer.

    I do know the process involved using ad-aware, hijack this, and some other software more than once, and in a certain order.

    I hope you find your solution quickly.

    Here's the thread on techguy.org that deals with security issues:

    http://forums.techguy.org/f54-s.html
     
    #7 rbnd, Aug 31, 2004
  8. jimbob

    jimbob New Member

    Joined:
    Aug 2, 2004
    Messages:
    25
    Likes Received:
    0
    #8 jimbob, Sep 1, 2004
  9. DavidsAngel

    DavidsAngel Guest

    If your having problems with Spyware then do an internet search for Spy Sweeper. It has a free version, and it's a valuable tool. [​IMG]


    have a good one!
     
    #9 DavidsAngel, Sep 1, 2004
  10. Rich_UK

    Rich_UK <img src =/6181.jpg>

    Joined:
    May 26, 2003
    Messages:
    389
    Likes Received:
    0
    #10 Rich_UK, Sep 5, 2004
  11. jet11

    jet11 Member

    Joined:
    Mar 14, 2003
    Messages:
    266
    Likes Received:
    0
    The problem appears to have affected my CD Rom drive as well. I cannot read any kind of CD. I tried downloading some of the suggestions onto a CD, but I cannot upload it to my computer because it cannot read them.

    I cannot download them from the internet either because the download process is interrupted by the shut down.

    I have spent several days trying to resolve this issue, and I am almost ready to give up.
     
    #11 jet11, Sep 8, 2004
  12. jet11

    jet11 Member

    Joined:
    Mar 14, 2003
    Messages:
    266
    Likes Received:
    0
    Sorry for the confusion. i think the CD Rom problem is separate from the virus problem.

    The virus problem seems to be associated with the "Internet Explorer" browser. I have logged on with a friend's aol account, downloaded programs for more than an hour, and I haven't had any problems. Does anyone know what virus would only attack through the "Internet Explorer" browser?

    Any suggestions on fixing the CD Rom problem are welcomed as well. The CD Rom appeared to be working correctly until the virus situation became a problem. However, I believe that the two are unrelated (just a coincidence).

    Thanks for any suggestions.
     
    #12 jet11, Sep 8, 2004
  13. Jodo Kast

    Jodo Kast New Member

    Joined:
    Sep 4, 2004
    Messages:
    383
    Likes Received:
    0
    Ok, if no virus scan software works, you may have to get it your self. press ctr + alt + delete and get the running processes list. (not the aplication list.) just quickly memorize it. now start your internet and get the processes again. See what new ones there are and write them down. ( except you browser). Now you have your program, which may or may not be Isass.

    In fact you may have more. usually the I've found viruses and others to be running under the user and not under system (in the processes lis).

    now just go delete it. If your feeling confident go to start-&gt;run and type in regedit and do a search for it there. and delete those keys. (ONLY IF YOU KNOW WHAT YOU ARE DOING).

    or after you start up internet, use a debugger like softice, and change the virus so that it does not execute. 90 the litle guy. I reformat reinstall just about every month. I can't handle a dirty computer. its the only sure fire way.
     
    #13 Jodo Kast, Sep 9, 2004
  14. DavidsAngel

    DavidsAngel Guest

    I have to go with Jodo on this. One more thing is to shut down the program if you reboot before finding it. This might help on the process of elimation on finding it as well.

    Type Run
    Type in msconfig
    Hit the startup tab

    You might be able to find it here as well. Becareful unchecking programs you are not aware what they are. It might cause a problem with windows.
     
    #14 DavidsAngel, Sep 9, 2004
  15. jet11

    jet11 Member

    Joined:
    Mar 14, 2003
    Messages:
    266
    Likes Received:
    0
    Thanks for the information. I used the Task Manager approach and have been able to identify the Blaster worm (MSBLAST.exe). I don't know if I have other viruses or not, but I can at least get rid of one. Thanks again.
     
    #15 jet11, Sep 10, 2004
  16. Jodo Kast

    Jodo Kast New Member

    Joined:
    Sep 4, 2004
    Messages:
    383
    Likes Received:
    0
    No Problem.
     
    #16 Jodo Kast, Sep 10, 2004
  17. superdave

    superdave New Member

    Joined:
    Jun 30, 2000
    Messages:
    2,055
    Likes Received:
    0
    sounds alot like blaster, if you can get the instructions from some of the sites listed, make sure you update your virus scanner, start using a spyware scanner, and get rid of Microsoft mail and browser software. Especially outlook, using it is pretty much asking for these worms to be installed on your system. also Windows update is important.

    Or ditch them altogether and get Linux.
     
    #17 superdave, Sep 11, 2004
(You must log in or sign up to post here.)
Loading...