Lsa Shell (EXPORT WHY DOES IT TRY TO?

[wozelbeak]

Every Time I Boot Up My Pc, I Get My Firewall Saying That "lsa Shell Is Trying To Establish A Conection!!! I Blocked It In My Firewall But It Came Up Again. I Put A Thread Up Recently About My Pc Freezing. Do You Think This Could Be Associated With It? I Read That The Sassa Worm Might Be Causing This On Another Thread. I Ran The Symantec Sassa Removal Tool But It Found Nothing. I Have P4 Chip Windows Xp With Pack 2.
Wozelbeak

 

[skunx7101]

probably the sasser worm, download the removal tool here.
http://securityresponse.symantec.com/avcenter/FxSasser.exe

 

[wozelbeak]

is that tool better than the symantec tool? if it is i will run it cheers .

 

[skunx7101]

is that tool better than the symantec tool? if it is i will run it cheers .

that is the symantec tool. Also, you need to install the sasser patch, amd make sure you have all of your critical updates, service packs, and security patches done. You should do these behind a hardware firewall if possible.

 

[wozelbeak]

ok, i have firewall and all of the updates and patches. i ran that symantec tool which found nothing.
wozelbeak

 

[skunx7101]

how about spyware? have u ran any removal utilities?
adaware
spybot
hjt

 

[wozelbeak]

yes, i have spybot, spyware blaster and avg.
i have not tried hijack this yet.
wozelbeak

 

[skunx7101]

try adaware and hjt post your log from hjt.
thanks,
scott

 

[wozelbeak]

i already use adaware, but will do the hjt thing this evening.
wozelbeak