lsass malware and pop-ups help!!

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by JackRare, Jun 9, 2006.

  1. JackRare

    JackRare Private E-2

    I have a message that pops up claiming to be windows security center (haha) and it says I have tons of spyware and that i need this software and then im automatically redirected to titanshield at antispywarebox. I have Ewido, pc-cillin, Amust, and Smitfraudfix. After running all of these in safe mode and having found multiple .exe's (including alexaie.exe, susp.exe, a.exe, runsrv32.exe, and some kind of trojan factory) I had them all deleted from my computer and cleaned out all my temporary internet files and STILL have this malware. I keep getting a message saying this system is shutting down and that the LSASS is infected with spyware no matter what I do. Finals are next week, please help!!

    here is my log:

    EDIT : Inline HJT log removed

    Thank you so much!!
     
    Last edited by a moderator: Jun 9, 2006
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi and Welcome

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis


    When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)
    • Bitdefender
    • Panda Scan
    • HijackThis
     
  3. JackRare

    JackRare Private E-2

    have about:blank, instructions didn't solve

    I think i have about:blank. I tried several times to do the instructions and it always comes back. log is attached
     

    Attached Files:

  4. AbbySue

    AbbySue MajorGeeks Administrator

    Re: have about:blank, instructions didn't solve

    I have merged your threads together. Note: You are still running HijackThis from an unsafe location on your desktop. You have it here: C:\Documents and Settings\Mike\Desktop\hijackthis\HijackThis.exe We specifically request you install it in a safe location for your own protection such as C:\Program Files\ HijackThis

    In order to receive support you need to follow the steps given to you by Halo in post #2 of this thread which includes running the online scans, etc. Your logs indicate you have other issues and if you really want them fixed you need to follow inital clean up steps..we can't help you unless you first help yourself.:)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds