Results 1 to 2 of 2

Thread: Persistent LSASS heuristic.backdoor

  1. #1
    Junior Member
    Join Date
    Oct 2010
    Location
    uk warwick
    Posts
    1

    Default Persistent LSASS heuristic.backdoor

    I have installed AVAST - and maxed sensitivity, SUPERantispyware and now Spybot.

    Superantispyware consistently detects:-
    Heuristic.Backdoor
    C:\DOCUMENTS AND SETTINGS\DOG\APPLICATION DATA\SYSWIN\LSASS.EXE
    C:\DOCUMENTS AND SETTINGS\DOG\APPLICATION DATA\SYSWIN\LSASS.EXE
    ..but fails to remove and on reboot they just reappear. I looked into microsoft security info and they gave SASS removal tool which failed to remove and it seems that this problem should not affect service pack 3 anyway?

    Symptoms include emails being sent from my hotmail account to my contacts list while I'm online and the disappearance of my sent emails from same account...my virgin.media email account seems unaffected.

    Is this a new form of LSASS? Spybot seems to have missed it too.

    Any help?

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,955

    Default

    Hello dugger,

    Please see the forum FAQ which also includes instructions on posting a preliminary DDS log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)

    Then start a new topic, copy paste the DDS.txt log into it and a volunteer analyst will advise you when available.

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •