Click to See Complete Forum and Search --> : LSASS vs. lsass & wssvrs


jmar2
November 20th, 2005, 12:42 PM
My virus scan does not detect any virus. But I noticed a new file appearing in my root directory: C:/ that file is wssvrs.exe

When I googled it, the search returned data indicating this is a virus.

Also I noticed when scanning other pages, that a lot of messages refer to the lsass.exe file and its associated problems. I looked at mine and it's in all caps.
LSASS.EXE

Is that a problem?
OS is WIN2000 Pro V5.0 Build 2195 SP 4

The dates on the two files in questions are: wssvrs.exe June 17, 2004
LSASS.EXE is Jul 14, 2003 modified Dec 19, 2004

Thanks.

emr
November 20th, 2005, 05:05 PM
My virus scan does not detect any virus. But I noticed a new file appearing in my root directory: C:/ that file is wssvrs.exe

When I googled it, the search returned data indicating this is a virus.

Also I noticed when scanning other pages, that a lot of messages refer to the lsass.exe file and its associated problems. I looked at mine and it's in all caps.
LSASS.EXE

Is that a problem?
OS is WIN2000 Pro V5.0 Build 2195 SP 4

The dates on the two files in questions are: wssvrs.exe June 17, 2004
LSASS.EXE is Jul 14, 2003 modified Dec 19, 2004

Thanks.

Looks like a worm. Rbot.

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_RBOT.AS&VSect=T

Good removal instruction shere. Otherwise a Google of the file name will give you a lot of info too.

emr