Thread: LSASS exploit

i keep getting a message saying that avast blocked "LSASS Exploit" this happens quite odten is there anyway to completely remove this?
thanx

It's good that Avast stops this exploit. The only thing that I could find is a Windows patch for XP sp1. http://www.microsoft.com/downloads/d...displaylang=en .
Hopefully that will help.

Originally Posted by pw29010

i keep getting a message saying that avast blocked "LSASS Exploit" this happens quite odten is there anyway to completely remove this?
thanx

"Sign of infection is the existence of a file named 'C:\win.log' and frequent crashes of 'LSASS.EXE'. Sasser generates traffic on TCP ports 445, 5554 and 9996. " - F-Secure

Here are some removal tools you could try. Perhaps the worm is on another system in your network(?)

http://www.bleepingcomputer.com/forums/topic223.html

thanx for the help guys i think thats worked