Victor Laszlo wrote:
> Thanks Buffalo, I'll give it a try.
>
> Any idea how I can actually kill a subprocess of a process/I have
> determined that ljjkllm and awvwx are actually tied to lsass.exe and
> explorer.exe. If I kill these two processes nothing will work. I need
> to find a way to free the above files from lsass and explorer. If I
> can do that then hopefully I can delete them.
>
> On Sun, 20 Apr 2008 13:25:06 -0600, "Buffalo" <Eric@nada.com.invalid>
> wrote:

Just thought of something else.
lsass.exe is a legit program (where the l is actually an L)
Isass.exe is a virus (where the l is actually a capital i )
When the isass.exe uses a capital i it looks similar ( Isass.exe )
Do a google search to get more info.
Do a search and see where your problem lsass.exe is actually located.
I believe the legit one should be located in Winnit\System32 (at least in
Win2000)
Do a search for isass.exe and if it is found, it most likely is a bad
virus.