howard_hopkinso
Posts: 21,238 +17
That`s why you need to follow the instructions above.
The O23 - Service: LSA Shel (Export Version) - Unknown owner - C:\WINDOWS\lsass.exe (file missing) entry is the main nasty worm/trojan that you have and needs to be got rid of asap.
lsass.exe when running from the C;\windows\system32 folder is perfectly legit. However the entry in your HJT log is running from C:\windows and is a bogus file.
Regards Howard
This thread is for the use of felinne only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
The O23 - Service: LSA Shel (Export Version) - Unknown owner - C:\WINDOWS\lsass.exe (file missing) entry is the main nasty worm/trojan that you have and needs to be got rid of asap.
lsass.exe when running from the C;\windows\system32 folder is perfectly legit. However the entry in your HJT log is running from C:\windows and is a bogus file.
Regards Howard
This thread is for the use of felinne only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.