View Full Version : Something in lsass won't go away.
IrishGreen
2006-11-29, 04:42
CN.wAQdN: Executable (File, fixing failed)
C:\WINDOWS\lsass.exe
This continually happens to me, and when I choose the option to run Spybot at startup it still can't remove it. I got mixed results from lsass from google. What is going on, is this dangerous, an error, my fault, security compromising? (overall). I really don't deal with the innards of computers, and sorry if this is the wrong forum to post this.
Hello IrishGreen.
We would need more details in order to advise you, so please do the following.
Spybot-S&D Version 1.4 :Systems Supported (http://www.safer-networking.org/en/spybotsd/index.html )
If you do not have version 1.4 please let us know.
Close all browsers
Open SpyBot, check for and get any updates available
Check for problems and fix everything found in red
Then on the toolbar menu select mode and switch to advanced mode, on the left lower down select tools, and view report, ensure all the options are selected near the bottom except
Uncheck[ ] do not report disabled or known legitimate Items.
Uncheck[ ] Include a list of services in report.
Uncheck[ ] Include uninstall list in report.
Now select (near the top) view report.
Click export and in the 'save in' box choose a place such as your my documents folder, then in your next post near the bottom select the "browse" button; navigate to and attach or post that report.
If you cannot attach the Spybot-S&D log take as many posts as needed, however the instructions given usually produce manageable logs.
Regards. :)
IrishGreen
2006-11-30, 02:41
I had to split it in two.
Hi there.
If you can find the file CN.wAQdN on the PC please zip it and send to detections(AT)spybot.info
Replace AT with @
We should see a HJT log, please follow the procedure in this link: "BEFORE you POST" -Preliminary Steps and scanning with SPYBOT-S&D (http://forums.spybot.info/showthread.php?t=288)
Then start your own thread in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22)
Once you have posted a helper will take a look and advise you as soon as available. :)
Cheers.
IrishGreen posted: http://forums.spybot.info/showthread.php?t=9390 :)