Quote:
|
Originally Posted by pw29010
i keep getting a message saying that avast blocked "LSASS Exploit" this happens quite odten is there anyway to completely remove this?
thanx
|
"Sign of infection is the existence of a file named 'C:\win.log' and frequent crashes of 'LSASS.EXE'. Sasser generates traffic on TCP ports 445, 5554 and 9996. " - F-Secure
Here are some removal tools you could try. Perhaps the worm is on another system in your network(?)
http://www.bleepingcomputer.com/forums/topic223.html