lsass.exe

[niga75]

Ho ricevuto una mail che mi avvertiva di eliminare il
file lsass.exe dal sistema perchè è un file trojan che
sta operando nel mio sistema e rende il mio pc
accessibile a tutti in internet.....
Che devo fare??

Grazie

[MrOZ]

Non devi ascoltarla ;)

Process File: lsass or lsass.exe
Process Name: Local Security Authority Service
Description: The Windows Local Security Authority Server Process Handles Windows Security Mechanisms. It verifies the validity of user logons to your PC/Server .Technically it generates the process that is responsible for authenticating users for the Winlogon service.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No

L'email è certamente 1 bufala... attento xò ke nn contenga allegati altrimenti può veicolare realmente dei virus.

Ciao

[niga75]

grazie e ciao

[eraser]

lsas è un virus, non lsass ;)

[narnonet]

Anche a me oggi sono arrivate due mail. in una di queste c'è scritto:


- These recipients of your message have been processed by the mail server:
chierlory@tiscali.it; Failed; 5.2.2 (mailbox full)

alphacomunication@tiscali.it; Failed; 5.2.2 (mailbox full)

giadasilvestri@tiscali.it; Failed; 5.2.2 (mailbox full)

paganoluigi@tiscali.it; Failed; 5.2.2 (mailbox full)





Reporting-MTA: dns; mail-7.tiscali.it
Received-from-MTA: dns; IBM550266A.it (62.98.132.111)
Arrival-Date: Sat, 17 Jan 2004 13:52:05 +0100

Final-Recipient: rfc822; chierlory@tiscali.it
Action: Failed
Status: 5.2.2 (mailbox full)

Final-Recipient: rfc822; alphacomunication@tiscali.it
Action: Failed
Status: 5.2.2 (mailbox full)

Final-Recipient: rfc822; giadasilvestri@tiscali.it
Action: Failed
Status: 5.2.2 (mailbox full)

Final-Recipient: rfc822; paganoluigi@tiscali.it
Action: Failed
Status: 5.2.2 (mailbox full)




--- Inizio del messaggio allegato ---

Date: Sat, 17 Jan 2004 13:52:03 +0100 (added by postmaster@mail-7.tiscali.it)
From: narnonet@tiscalinet.it
Subject: a trojan is on your computer!




hello, I am from Belgium and you'll don't believe me,
but a trojan horse in on your computer.
I've scanned the network-ports on the internet. (I know, that's illegal)
And I have found your pc. Your pc is open on the internet for everybody!
Because the lsass.exe trojan is running on your system.
Check this, open the task manager and try to stop that!
You'll see, you can't stop this trojan.
When you use win98/me you can't see the trojan!!

On my system was this trojan, too!
And I've found a tool to kill that bad thing.
I hope that I've helped you!

Sorry for my bad english!

greets


remove-lsass-patch.exe (74.5 KB)


--- Fine del messaggio allegato ---



Cosa ne dite??????

mi date un parere????

P.S. l'allegato non l'ho aperto!!!!

[eraser]

cancella :D

[narnonet]

Originariamente inviato da eraser
cancella :D

Meno male!:sofico:

Grazie

[Bico Bico]

che palle 'sto lsass.exe, sta creando una confusione megagalattica :D