lsass.exe

[Xpee]

How do i get rid of this out of my sys32 files. I downloaded the norton removal tool but it still didn't get rid of it.

Any suggestions?

Thanks guys

[utln]

lsass is part of the OS. See this following for more info:

http://www.liutilities.com/products/wintas...slibrary/lsass/

[Xpee]

I read it was a worm.

LOL, does this mean i need it?

[utln]

The worm exploited a known flaw in lsass.

Yes, you need to keep it. It's a required component.

[astrolabos]

the worm's executable file is called lsasss.exe not lsass.exe

[neosapience]

Um, my anti-virus program says that Windows is a virus, how do I remove it?

old joke, old joke

[astrolabos]

Um, my anti-virus program says that Windows is a virus, how do I remove it?

old joke, old joke

you boot your pc in ms dos prompt (a win98 startup disk will do) and when you reach the command prompt line, you enter

echo y|format c: (kids, don't try this at home)

[univn]

echo y|format c: (kids, don't try this at home)

Only use for Win 9X

If Win Xp with NTFS file system ?

Do you have any others way ?

[mazin]

How do i get rid of this out of my sys32 files. I downloaded the norton removal tool but it still didn't get rid of it.

Any suggestions?

Thanks guys

If someone still has this problem:

1- Download and run this diagnostic & removal tool:

http://download.microsoft.com/download/1/e...1720-ENU-V4.exe

You must reboot your PC, afterwards.

2- Download and run this update after the reboot (I used with XP):

http://download.microsoft.com/download/6/1...732-x86-ENU.EXE

[SiMoNsAyS]

also there it's a worm that uses the name of Isass.exe (note that the first letter it's "i" and not "L"). Lsass.exe it's a critical process of windows and can not be removed.

[mazin]

also there it's a worm that uses the name of Isass.exe (note that the first letter it's "i" and not "L"). Lsass.exe it's a critical process of windows and can not be removed.

Lsass.exe is not removed, it's fixed after a reboot. I had the same problem two months ago.

The above two files solved it.