TECHIES HELP! I can't get rid of the servu- daemon Virus

[Room101]

servu-daemon virus detected it runs as a service under the name Lsass.exe

My Mcafee scanner detects the virus but I get Delete, clear error.
I have tried the stinger program with no luck. The virus definition DAT files are up to date. I have also disabled system restore. Please help a brotha out my computer is dieing.


http://vil.nai.com/vil/content/v_100072.htm#RemovalInstructions

[kiahzero]

1. Explain the error that you get

What's the exact message, if you can get it?

[Room101]

3. I get no windows error message ... Mcafee says

A detection occured in memory- I hit the clean all button on Mcafee and I get a clean error.

[LTR]

2. Is it in a .zip file?

Happened to me once. I tracked down the file by looking for the location in Norton, and deleted the whole thing.

Problem solved.

Try Google, and type in Lsass.exe

[WLKjr]

4. Thats the same thing that blaster used

Use Norton definately, McAffe Sux0rz big time. I have never been able to get viruses off a computer using it even though it detects more sopposedly than norton does. But Norton always has removal tools custom made for those bad buggers.

[kiahzero]

5. McAffe has always worked fine for me

I used to prefer Norton, but when you have a site license for something else, it seems a bit silly to pay for it.

On edit: Now that I think of it, can't you get those custom Symantec removal tools without even having a license for Norton? I seem to recall downloading ones for Welchia and others.

[WLKjr]

8. yeah you can

You have a point, that is the downside of Norton, Licensing and how much it costs. If you looking for another good AV program go with AVG antivirus or sophos. Both have great licensing for business and peronal use and are VERY cost effective.

[LTR]

6. mine was the backdoor.myparty virus

It was an old one, from around 2-3 years ago.

[Gman]

7. I highly suggest you go to

http://windowsupdate.microsoft.com/ and get all the latest updates for your flavor of Windows. The Lsass.exe vulnerability was taken care of in a patch that came out quite some time ago.

People don't realize how absolutely important it is to your system's health to keep your system updated with the most current critical updates.

[WLKjr]

10. Updating is something NO REGULAR JOE END USER DOES

Every computer I have fixed in the last year or so has been that way. Since I have fast internet, I hook them up and get them all for them since they are on Dialup(which sux0rz bigtime)

Microsoft should really send out those updates in a package once a year on CD to consumers who bought a new computer and have dialup.

[Room101]

11. I'm on my buddies computer- I'm now installing Srv pack 1

I hope it works.

[Prisoner_Number_Six]

15. Here's a really vital new downloadable techie utility

http://www.autopatcher.com/autopatcherxp.html

Autopatcher XP-- it integrates all patches and updates into a single package. It's highly unofficial and unsupported by MicroShaft, but it works very well. And they're developing packages for Win2K and Win3K as I speak.

It's updated monthly. I use it on every XP machine I upgrade, and it is a pleasure to use.

[okieinpain]

9. boot up in safe mode then run the stinger. make sure it's the latest

version. also download and install adaware run it in safe mode also.

[WillyT]

12. Have You Read This ???

Link: http://vil.nai.com/vil/content/v_99901.htm

Might help?

:shrug:

[WillyT]

13. Then There Are These From Symantec (Norton) !!!

Link: http://www.google.com/search?hl=en&lr=&ie=UTF-8&q=+site:securityresponse.symantec.com+servudaemon+symantec

Hope that was helpful!

:hi:

[Room101]

14. I did read that- Thanks everyone - The update did the trick

I'm pretty good about updating my computer but this was on my buddies new computer.

Thanks,