What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.

have xp professional. everytime i want to open an application, outlook express/worddocument/pdf doc etc
the computer is stuck. the cpu usage is 100%.

thank you
david

Have you tried the spyware and antivirus scanning suggestions? Are you using a firewall?

HEY, where do i find a patch to get rid of the sasser virus (lsass.exe) ??? WHat is the website ???

THANXXXXXXXXXX

Visit the Microsoft site listed in the article.

that helped! thanks!

Just found that my wife's PC seems to be infected as you describe....reboots in 60 seconds etc,references to Lsass.exe. Unfortunately tried the 'shutdown -a' command but it didn't work, and machine still shut down in the middle of running an on-line virus-check. Does this sound like a new Sasser variant....if so any more clues?

What happens when you try "shutdown -a"? Any messages?

When i open task manager, the list of processes does not not show. it is just a grey blank and i cannot check what processes are running. do you have any ideas?

Hadn't heard that one before, it's new to me. Only suggestion I have is to try downloading sysinternals process explorer http://ask-leo.com/d-31017a and see if it will report the task list.

Thanks for the suggestion but when i clicked on that link my internet just closed down.

To post a comment on "What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?", please return to that article's main page.