Jump to content

Featured Replies

Posted

well since yesterday i cant seem to open task manager ....

 

i'm using windows 2000 and when i press ctrl+alt+del you get that window where you can press "Task Manager" and when i do that nothing happens.

 

also when i try to open it via start menu, run and type in taskman.exe nothing happens.

 

so i dunno wtf is wrong or how i can make it work

 

thx

 

-nX^

Exactly the same thing happened to me yesterday.

 

I think it was a virus spreading through an Exploit in lsass.

 

I noticed that for some reason, my firewall (kerio), was showing that another instance of lsass was found, which was in 'c:\windows\lsass.exe'.

 

This was obviously a problem because there should only be 1 lsass.exe instance running, which would be at 'C:\windows\SYSTEM32\lsass.exe'.

 

To remove, I followed part of the following page:

http://www.wilderssecurity.com/archive/index.php/t-29144

 

There also may be hidden files. See HERE (http://www.xtra.co.nz/help/0,,4155-1916458,00.html) for how to show hidden files.

 

Then reboot into safe mode (http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406) and delete:

 

C:\WINDOWS\lsass.exe

 

 

I am aware that you are running windows 2000, and I am running Windows XP, however, I read on a security bullitin somwhere that this exploit worked on Win 2000 too.

 

This might not be the problem for you, but if I was you I would download Hijack-This, and check that there is no 'c:\windows\lsass.exe' process running (I think its c:\winnt\lsass.exe on win2000).

  • Author

hmm i searched for that file and it showed up in 2 folders ..

 

C:\winnt\$NTupdaterolluppackuninstall$

and in

C:\winnt\servicepackfiles\i386

 

but none in C:\winnt

  • Author

its fixed :D just ran adaware and my anti virus and its all good now.

 

thx..

Guest
This topic is now closed to further replies.