LSASS vs. lsass & wssvrs
Results 1 to 2 of 2

Thread: LSASS vs. lsass & wssvrs

  1. #1
    Registered User
    Join Date
    Oct 2005
    Posts
    17

    LSASS vs. lsass & wssvrs

    My virus scan does not detect any virus. But I noticed a new file appearing in my root directory: C:/ that file is wssvrs.exe

    When I googled it, the search returned data indicating this is a virus.

    Also I noticed when scanning other pages, that a lot of messages refer to the lsass.exe file and its associated problems. I looked at mine and it's in all caps.
    LSASS.EXE

    Is that a problem?
    OS is WIN2000 Pro V5.0 Build 2195 SP 4

    The dates on the two files in questions are: wssvrs.exe June 17, 2004
    LSASS.EXE is Jul 14, 2003 modified Dec 19, 2004

    Thanks.

  2. #2
    Registered User emr's Avatar
    Join Date
    Sep 2001
    Location
    Amsterdam
    Posts
    1,312
    Quote Originally Posted by jmar2
    My virus scan does not detect any virus. But I noticed a new file appearing in my root directory: C:/ that file is wssvrs.exe

    When I googled it, the search returned data indicating this is a virus.

    Also I noticed when scanning other pages, that a lot of messages refer to the lsass.exe file and its associated problems. I looked at mine and it's in all caps.
    LSASS.EXE

    Is that a problem?
    OS is WIN2000 Pro V5.0 Build 2195 SP 4

    The dates on the two files in questions are: wssvrs.exe June 17, 2004
    LSASS.EXE is Jul 14, 2003 modified Dec 19, 2004

    Thanks.
    Looks like a worm. Rbot.

    http://www.trendmicro.com/vinfo/viru...BOT.AS&VSect=T

    Good removal instruction shere. Otherwise a Google of the file name will give you a lot of info too.

    emr

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •