LSA Shell lsass.exe ?!

Ker je zadeva nova je vsekakor vredna svoje teme. Doletela je tudi mene danes. Resitev je opisana spodaj!


Your computer is infected with a new Sasser worm exploiting the LSASS Buffer
Overrun Vulnerability.

To clean your system:

NOTE: If your system keeps restarting, you can abort the system shut down
by:
Click Start, click Run and type "shutdown -a" (without quotations),
then click OK.

1. Download and install the critical update IMMEDIATELY from
http://www.microsoft.com/technet/securi...


2. Press Ctrl + Alt + Delete to bring up the Task Manager and terminate the
"avserve.exe" process, then delete the avserve.exe from C:\Windows and
restart your computer.

Pri meni je bil Avserve2.exe lociran v windows direktoriju. Prav tako se zadeva nahaja v registru HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

lp, D.