Something in lsass won't go away.

[IrishGreen]

CN.wAQdN: Executable (File, fixing failed)
C:\WINDOWS\lsass.exe

This continually happens to me, and when I choose the option to run Spybot at startup it still can't remove it. I got mixed results from lsass from google. What is going on, is this dangerous, an error, my fault, security compromising? (overall). I really don't deal with the innards of computers, and sorry if this is the wrong forum to post this.

[tashi]

Hello IrishGreen.

We would need more details in order to advise you, so please do the following.

Spybot-S&D Version 1.4 :Systems Supported

If you do not have version 1.4 please let us know.

• Close all browsers
• Open SpyBot, check for and get any updates available
• Check for problems and fix everything found in red
• Then on the toolbar menu select mode and switch to advanced mode, on the left lower down select tools, and view report, ensure all the options are selected near the bottom except
  
• Uncheck[ ] do not report disabled or known legitimate Items.
• Uncheck[ ] Include a list of services in report.
• Uncheck[ ] Include uninstall list in report.
• Now select (near the top) view report.
• Click export and in the 'save in' box choose a place such as your my documents folder, then in your next post near the bottom select the "browse" button; navigate to and attach or post that report.

If you cannot attach the Spybot-S&D log take as many posts as needed, however the instructions given usually produce manageable logs.

Regards.

[IrishGreen]

I had to split it in two.

[tashi]

Hi there.

If you can find the file CN.wAQdN on the PC please zip it and send to detections(AT)spybot.info
Replace AT with @

We should see a HJT log, please follow the procedure in this link: "BEFORE you POST" -Preliminary Steps and scanning with SPYBOT-S&D

Then start your own thread in the Malware Removal Forum

Once you have posted a helper will take a look and advise you as soon as available.

Cheers.

[tashi]

IrishGreen posted: http://forums.spybot.info/showthread.php?t=9390