LSASSS.exe Worm
Posted: Sat Apr 07, 2007 5:44 pm
I was infected with the LSASSS.exe Worm yesterday, I was watching a promo video I downloaded, & got notified of a hidden file which had been already activated. I deleted the Movie, & ALL files from the Temp & Internet Temp folders.
I've checked & the Anti-Virus Software didn't do anything, as it didn't see it as a threat (Grisoft AVG). I manually deleted the file from my System32 folder, as well as the Prefetch folder.
Reading from the Microsoft site, it says that if Win32/Sasser (LSASSS.exe) Worm has infected your computer, it exploits the Local Security Authority Subsystem Service (LSASS), however, this problem was fixed, with Microsoft Security Update MS04-011.
If need be, I was thinking of doing a System Restore to a couple of days ago, then completely removing all Backups/System restores, to clean any possible stores of the worm.
How do I tell if my System is clean from this threat, how do I tell if I have Microsoft Security Update MS04-011 installed (all I can find in Add/Remove Programs is security Updates starting with KP#####)?
I've checked & the Anti-Virus Software didn't do anything, as it didn't see it as a threat (Grisoft AVG). I manually deleted the file from my System32 folder, as well as the Prefetch folder.
Reading from the Microsoft site, it says that if Win32/Sasser (LSASSS.exe) Worm has infected your computer, it exploits the Local Security Authority Subsystem Service (LSASS), however, this problem was fixed, with Microsoft Security Update MS04-011.
If need be, I was thinking of doing a System Restore to a couple of days ago, then completely removing all Backups/System restores, to clean any possible stores of the worm.
How do I tell if my System is clean from this threat, how do I tell if I have Microsoft Security Update MS04-011 installed (all I can find in Add/Remove Programs is security Updates starting with KP#####)?