Look alikes of Lsass.exe
Last Updated on Saturday, 08 June 2013 07:03 Saturday, 19 May 2012 19:30
How to remove malicious virus files named lsass.exe
Lsass.exe is (LSA shell) in Microsoft Windows
Lsass.exe is also found in several computer viruses. Their analysis reports are given below.
Files - view
%Temp%\lsass.exe
Files - view
%AppData%\lsass.exe
Files - view
C:\Win\lsass.exe
Files - view
%AppData%\Microsoft\lsass.exe
Files - view
%AppData%\lsass.exe
Files - view
%AppData%\SystemProc\lsass.exe
(You can also find file size, md5, sha-1 info on the above link)
(Full path for the short folder names)Necessary steps to remove these viruses
- To identify a fake Lsass.exe using Sysinternal's Process Explorer.
- To remove virus processes from the Task Manager.
- To search and delete virus files from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise virus files inside the hidden folders will not be found.
- To remove obsolete registry keys using CCleaner.
Detailed instructions and free Tools.
Preventive step to avoid viruses.
Reprinted with permission from Threatexpert.com
Vocabulary of the technical terms used in this article
| < Prev | Next > |
|---|
