c:\WINDOWS\system32\ptjsbfbyth\lsass.exe

[ctoothey]

Hello,

This file..
c:\WINDOWS\system32\ptjsbfbyth\lsass.exe
I had to delete it because it contained a trojan virus and now i am getting errors when windows starts up for me because it cannot start this file,..
i checked in my startup in msconfig, and this file is listed twice.

the location in msconfig says something about windows NT? if that means anything...

I'm just wondering, is it safe to stop this from trying to startup and what it this file exactly? Could it be from the trojan i removed that was infecting it? therfore i really don't need it? if i do need it where would i get it from? i tried googling it and i got nothing.

Thanks.

[i-CONICA]

lsass.exe is a legitimate part of the windows os, if you had it infected, you were right to delete it, btw, did you delete it from the dll cache too? so it cant replace its self?, anyway you just need to download lsass.exe from the internet, or preferably if you have another pc available, your friends pc or your other pc? if you do then just copy the file over, making sure you put a copy of the file in the dllcache folder here C:\windows\system32\dllcache\ the folder is hidden so its easier to just type or copy and paste that into the address bar of explorer, hope this helps, ps, do this in safe mode if you can, hit f8 just before windows loads i-CONICA

[Adrynalyne]

Look at the path. This was not a legitimate file.

[Adrynalyne]

Run through this.

http://forums.majorgeeks.com/showthread.php?t=35407