Aces High Bulletin Board

General Forums => Aces High General Discussion => Topic started by: davidwales on January 31, 2012, 03:06:28 PM

Title: ive found it!!
Post by: davidwales on January 31, 2012, 03:06:28 PM
hi guys i would just like to thank all the guys who helped me resolve the prob with this virus i know where it is and it is called lssas.exe it is a redirct worm that is in syst 32 , delete in safe mode i tried everything norton avg cc cleaner combofix malwabutes etc but you have to get rid of it manuall in safe mode , many thanks , i wont forget all you guys who helped  :salute
Title: Re: ive found it!!
Post by: olds442 on January 31, 2012, 03:24:14 PM
i scanded your computer and i think you need to delete system 32.  :salute
Title: Re: ive found it!!
Post by: davidwales on January 31, 2012, 03:28:34 PM
wel syst 32 is the main files for windows , this folder is not for playing with , anyway hope none of you guys ecounter the probs i did had 6 hours of undisturbed gameplay thanks to all the guys in the forum , :salute
Title: Re: ive found it!!
Post by: curry1 on January 31, 2012, 03:31:17 PM
(http://i.imgur.com/2DEso.jpg)
Title: Re: ive found it!!
Post by: jimbo71 on January 31, 2012, 03:33:40 PM
wel syst 32 is the main files for windows , this folder is not for playing with , anyway hope none of you guys ecounter the probs i did had 6 hours of undisturbed gameplay thanks to all the guys in the forum , :salute

System 32 is a part of the Windows OS.  Don't delete it.  Olds was just making negative waves.  He didn't "scanded" anything.
Title: Re: ive found it!!
Post by: Acidrain on January 31, 2012, 03:38:27 PM
pretty sure lsass.exe is a windows system process.
Title: Re: ive found it!!
Post by: matt on January 31, 2012, 03:39:30 PM
i scanded your computer and i think you need to delete system 32.  :salute
your just on fourms now not the game :headscratch:
Title: Re: ive found it!!
Post by: jimbo71 on January 31, 2012, 03:56:27 PM
pretty sure lsass.exe is a windows system process.

It is...

"lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC or server. Lsass generates the process responsible for authenticating users for the Winlogon service. This is performed by using authentication packages such as the default, Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates then inherit this token.
Title: Re: ive found it!!
Post by: SEseph on January 31, 2012, 04:58:57 PM
(http://i.imgur.com/2DEso.jpg)

Intelligent has 2 L's

in·tel·li·gent
Title: Re: ive found it!!
Post by: MAINER on January 31, 2012, 05:01:51 PM
hi guys i would just like to thank all the guys who helped me resolve the prob with this virus i know where it is and it is called lssas.exe it is a redirct worm that is in syst 32 , delete in safe mode i tried everything norton avg cc cleaner combofix malwabutes etc but you have to get rid of it manuall in safe mode , many thanks , i wont forget all you guys who helped  :salute

We dont care!
Title: Re: ive found it!!
Post by: wil3ur on January 31, 2012, 05:02:45 PM
Can't wait to have you on 200!  See you in the skies!   :salute
Title: Re: ive found it!!
Post by: Noir on January 31, 2012, 05:03:43 PM
wow that's one old school virus
Title: Re: ive found it!!
Post by: Traveler on January 31, 2012, 06:15:28 PM
hi guys i would just like to thank all the guys who helped me resolve the prob with this virus i know where it is and it is called lssas.exe it is a redirct worm that is in syst 32 , delete in safe mode i tried everything norton avg cc cleaner combofix malwabutes etc but you have to get rid of it manuall in safe mode , many thanks , i wont forget all you guys who helped  :salute

Did you do a search on google, Isass.exe is a valid Windows file.  it's part of the operating system provided by MicroSoft.  Might want to do some more reading.
Title: Re: ive found it!!
Post by: TwinBoom on January 31, 2012, 06:31:58 PM
try a program calleD RKILL Shuts down maleware so programs can find it the process you found is a windows prog
Title: Re: ive found it!!
Post by: fullmetalbullet on January 31, 2012, 06:51:56 PM
i run the computer in safe mode networking and run maleware bytes anti maleware and it removes any and all maleware that has taken control of your computer. such as rogue antivirus programs and hijacks and the such

you got to be fast though as soon as it start up run the anti malware.
Title: Re: ive found it!!
Post by: icepac on January 31, 2012, 09:51:26 PM
Sasser virus maybe?
Title: Re: ive found it!!
Post by: davidwales on February 01, 2012, 04:16:35 AM
ok ive made a mistake , ive managed to move the lssas.exe to another folder as i could not delete, it and now i have blank screen on start up, the rogue lsass.exe was also in syst 32 which i deleted,and replicates from the malware,  but like one of you said that file,  is somthing to do with accounts , prob have to reinstall winsows as , i cant restore , not even in safe mode :cry


Title: Re: ive found it!!
Post by: Noir on February 01, 2012, 05:01:03 AM
lmao you should have read first
Title: Re: ive found it!!
Post by: olds442 on February 01, 2012, 06:41:10 AM
ok ive made a mistake , ive managed to move the lssas.exe to another folder as i could not delete, it and now i have blank screen on start up, the rogue lsass.exe was also in syst 32 which i deleted,and replicates from the malware,  but like one of you said that file,  is somthing to do with accounts , prob have to reinstall winsows as , i cant restore , not even in safe mode :cry



dont have that back up disk do you nope! lol. i dont have anti virus besides free avast never had one problem. if i do something stupid? no worry just pop the the back up disk in and go into BIOS and make the CD boot first and TADA!
Title: Re: ive found it!!
Post by: captain1ma on February 01, 2012, 06:51:00 AM
find another machine that has the identical lsass file and copy and paste Lsass.exe back into its original location, your original lsass.exe is infected anyway so dont worry about it. while you're at it check all your users/appdata folders for wierd names, sometimes they hide stuff in there that execute everytime you reboot the machine.

if that dont work, reimage the machine. save your data if you can. if you have a copy of winternals that will help you.
Title: Re: ive found it!!
Post by: davidwales on February 01, 2012, 07:10:28 AM
ok thanks ill reimage it , i only have windows xp pro disc though , but i think i may be able to upgrade to home edition with service pack , and i dont have a back up disc for that machine , do you think i could partition the drive and it will get rid of virus , then download game again , i hope to get back online this evening , at the mo im on my g/f lap top , but as soon as i get home ill partition it , its a bit of a long process upgrading from pro edition to home edition but i done it once before , thanks for all the help :salute
Title: Re: ive found it!!
Post by: Pigslilspaz on February 01, 2012, 09:29:00 PM
(http://i.imgur.com/2DEso.jpg)

Not funny at all.
Title: Re: ive found it!!
Post by: Dragon on February 02, 2012, 10:06:21 AM
i only have windows xp pro disc though , but i think i may be able to upgrade to home edition


 :huh   :noid

 :rofl
Title: Re: ive found it!!
Post by: davidwales on February 02, 2012, 03:31:15 PM
just thought ill update you on this thread , dont listen to people you dont trust , and dont delete windows , im off to the pc store tommorow to get both computers sorted , and hopfully ill be back online tommorow evening , all my team mates and friends who have helped many thanks , see in late war tommorow  :salute

i am not computer literate , but i use to program in beginers all purpose symbolic instuction code, but this is out of my depth

(http://img189.imageshack.us/img189/9238/77067537.jpg)


(http://img29.imageshack.us/img29/9746/24121195.png)

curtosy of curry  :aok

Title: Re: ive found it!!
Post by: Hawk78th on February 02, 2012, 03:40:12 PM
Boards sare slow this afternoon.... QUAD post-->  wow
Title: Re: ive found it!!
Post by: Hawk78th on February 02, 2012, 03:41:08 PM
Boards are slow this afternoon.... QUAD post-->  wow
Title: Re: ive found it!!
Post by: Hawk78th on February 02, 2012, 03:43:15 PM
Boards are slow this afternoon.... QUAD post-->  wow!
Title: Re: ive found it!!
Post by: Hawk78th on February 02, 2012, 03:44:49 PM

...Sorted huh?              Looks to me like you're going to need more than "Sorting" that thing out..........if you don't know what you're messin with...... leave it to someone who does.... Hard lesson learned, I presume....
 :eek: