Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Strange behavior, possible malware or virus?


  • Please log in to reply
5 replies to this topic

#1 mikegrattan

mikegrattan

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:13 PM

Posted 14 January 2015 - 11:21 AM

I use WinPatrol and recently started getting messages about Windows Automatic Update settings being changed to "Never check for updates".  I ran HijackThis to go through the log and noticed that there were "file missing" messages on a few executables/DLLs from the System32 folder (running Windows 7 Ultimate 64-bit).  One of the supposedly missing files, lsass.exe, has been known to have been used by malware programs in the past, but usually is renamed using a capital i instead of the lowercase L and is run from another directory.  The file itself is not missing, even though HijackThis reports it as missing.  I double-clicked it to run it from the System32 folder and immediately got a popup message from BitDefender that an infection was being cleaned.  I then right-clicked it and asked BitDefender to scan it, it came out clean.
 
I use BitDefender Antivirus Plus 2015 which is up-to-date and I've done a full scan with no infections found.
 
Thoughts or suggestions on my next steps?
 
Thanks!

Edit: Topic moved from Virus, Trojan, Spyware, and Malware Removal Logs to the more appropriate forum.~ Animal

BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,716 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:09:13 PM

Posted 14 January 2015 - 11:38 AM

Welcome aboard p22002758.gif

 

HJT is a very old tool and especially is not compatible with 64-bit systems. That's why you have so many files listed as missing.

Are there any other issues than Windows updates setting change?


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#3 mikegrattan

mikegrattan
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:13 PM

Posted 14 January 2015 - 11:39 AM

No other issues that I can detect.  



#4 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,716 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:09:13 PM

Posted 14 January 2015 - 11:42 AM

Adjust Windows updates setting and keep an eye on your computer.

Post back here if something else comes up.


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#5 mikegrattan

mikegrattan
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:13 PM

Posted 14 January 2015 - 11:43 AM

Thanks, will do.



#6 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,716 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:09:13 PM

Posted 14 January 2015 - 11:47 AM

You're very welcome p22002759.gif


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users