Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Lsass.exe


  • Please log in to reply
3 replies to this topic

#1 bilbo3

bilbo3

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:01:11 PM

Posted 11 April 2007 - 09:32 PM

Hi, hope someone can help with this.

I downloaded some software from a *trusted* source (a site that I've used before without any problems.)

When I had finished using the software, I shut down the pc as usual. Next time I went to start it, I got an error message, something along the lines of "Unable to load lssass.exe."

Had to click on "OK" twice to get the load up to continue. But it wouldn't get to the log-in screen.

The pc came without a Windows disc (just OEM.)

Tried again and hit F10 to get the Freevent help screen. Decided to call their help desk as the options available at the screen were confusing.

The guy I spoke to said that I'd downloaded a virus / trojan and to select option 2 on the screen (non-destructive restore.) He said that if it didn't work, then I would need to take my pc back to place of purchase and ask them to retrieve the data before re-installing the pc to it's original state. (I would then have to re-load drivers etc.) Followed his instructions (re option 2) and was now able to boot up as normal. I immediately deleted the software that I had downloaded, but am now unable to log off in the normal way. I have to use CTRL / ALT / DELETE to bring up the task manager and select "Shut Down". But it still won't turn off unless I hold in the on/off button on the pc. I also get annoying / *embarrassing* pop-ups occasionally.

I have downloaded Stinger and NOD32. These just tell me that there's a problem (thanks!)

Is there anyone who can help me with this. I should warn you that I'm a complete numpty when it comes to altering / repairing registry files!

Many thanks in advance. :thumbsup:

BC AdBot (Login to Remove)

 


#2 tg1911

tg1911

    Lord Spam Magnet


  • Members
  • 19,274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Louisiana
  • Local time:06:11 AM

Posted 11 April 2007 - 10:06 PM

I suggest you post a HijackThis log for examination.
A member of the HijackThis Team will walk you through, step by step, how to disinfect your computer.

Once you post your log, don't make any changes to your system, as that could change the results of the posted log, making it more difficult to properly clean your system.

Read Preparation Guide for use before posting a HijackThis Log.
Please read, and follow, all directions carefully!!!

If the steps, prior to the posting of a HijackThis log don't eliminate the problem:

Run a log, and post it in the HijackThis forum, >at this link<.
Do not, post it in this topic.
Do not, fix anything, yet.
A member, of the HJT Team, will help you out.
It may take a while to get a response from the HJT Team, because they are very busy. Please, be patient, as these people are volunteers. They will help you, as soon as possible..

NOTE:
Once you have made the post, please, DO NOT make another post in the HJT forum, until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post, there will be 1 reply. The team member, glancing over the replies, might assume someone is already helping you out, and will not respond. So, just make your post, and let it sit there, until a team member responds. This way you will be taken care of, in the most timely manner.

If you haven't heard back from them in 5 days, go to this topic, Haven't Had A Reply In Five Days?, and carefully follow all directions.
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook

#3 bilbo3

bilbo3
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:01:11 PM

Posted 11 April 2007 - 11:02 PM

Thanks.
But there's a problem.
I downloaded Ad-Aware (as advised) and ran it. But it locked up at C:\WINDOWS/assembly/GAC/Microsoft.JScript/7.0.3300.0_b03f5f7f11d50a3a
so I can't really continue.

Any other ideas out there?

#4 tg1911

tg1911

    Lord Spam Magnet


  • Members
  • 19,274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Louisiana
  • Local time:06:11 AM

Posted 11 April 2007 - 11:06 PM

Try running the programs in Safe Mode.
How to start Windows in Safe Mode
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users