Results 1 to 6 of 6

Thread: lsass.exe

  1. #1
    Junior Member
    Join Date
    Jan 2010
    Posts
    3

    Default lsass.exe

    Does anybody know why spybot places a ton of entries in the lsass.exe?

  2. #2
    Senior Member Tom.K's Avatar
    Join Date
    Jul 2006
    Location
    The Universe / Milky Way / Solar System / Earth / Europe / Croatia
    Posts
    735

    Default

    Do you mean that it detects a lot of lsass.exe? That could be a potential infection then. In case you think that computer is infected, please create a thread in Malware Removal Sub-Forum by following the steps from this thread first: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)
    N/A.

  3. #3
    Junior Member
    Join Date
    Jan 2010
    Posts
    3

    Default

    Quote Originally Posted by Tom.K View Post
    Do you mean that it detects a lot of lsass.exe? That could be a potential infection then. In case you think that computer is infected, please create a thread in Malware Removal Sub-Forum by following the steps from this thread first: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)
    I know that entries in the lsass.exe usually point to malware. But in this case they are clearly marked as Spybot entries - and there are many.

  4. #4
    Senior Member Tom.K's Avatar
    Join Date
    Jul 2006
    Location
    The Universe / Milky Way / Solar System / Earth / Europe / Croatia
    Posts
    735

    Default

    Can you post a spybot log/report to see what it detects?
    N/A.

  5. #5
    Junior Member
    Join Date
    Jan 2010
    Posts
    3

    Default

    Quote Originally Posted by Tom.K View Post
    Can you post a spybot log/report to see what it detects?
    the log is quite long, but here is the beginning of it:

    # Start of entries inserted by Spybot - Search & Destroy
    127.0.0.1 www.007guard.com
    127.0.0.1 007guard.com
    127.0.0.1 008i.com
    127.0.0.1 www.008k.com
    127.0.0.1 008k.com
    127.0.0.1 www.00hq.com
    127.0.0.1 00hq.com
    127.0.0.1 010402.com
    127.0.0.1 www.032439.com
    127.0.0.1 032439.com
    127.0.0.1 www.0scan.com
    127.0.0.1 0scan.com
    127.0.0.1 www.1000gratisproben.com
    127.0.0.1 1000gratisproben.com
    127.0.0.1 www.1001namen.com
    127.0.0.1 1001namen.com

    Let me know if you need more. Thanks for your help. Wolfgang

  6. #6
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    So how do you refer those entries from the restricted zone to lsass.exe?
    That is the immunization of Spybot. The immunization adds sites to the restricted zones in order to block them. So the baddies won't get in.

    Best regards
    Sandra
    Team Spybot

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •