Lsas,Blaster.Keyloger worm
Closed
scott
-
22 Feb 2010 à 21:30
Ambucias Posts 47312 Registration date Monday 1 February 2010 Status Moderator Last seen 28 March 2026 - 25 Feb 2010 à 16:58
Ambucias Posts 47312 Registration date Monday 1 February 2010 Status Moderator Last seen 28 March 2026 - 25 Feb 2010 à 16:58
4 responses
xpcman
Posts
19528
Registration date
Wednesday 8 October 2008
Status
Contributor
Last seen
15 June 2019
1,824
22 Feb 2010 à 21:42
22 Feb 2010 à 21:42
If you rename the malwarebytes program (mbam.exe) as explorer.exe the the virus can't stop it from running. You should run these tools in "safe Mode" (F8 at the Windows display during booting).
Good Luck
Good Luck
Ambucias
Posts
47312
Registration date
Monday 1 February 2010
Status
Moderator
Last seen
28 March 2026
11,166
25 Feb 2010 à 16:40
25 Feb 2010 à 16:40
Hello,
Here is quick fix:
Boot into safe mode (Holding down F8).
Look in c:\Documents and Settings\All Users\Application Data
There is a file there that is all numbers such as: 85331323 or 46937130
Delete them
If you do not find them, update your antivirus application, go into safe mode and run a full scan.
Best regards
Here is quick fix:
Boot into safe mode (Holding down F8).
Look in c:\Documents and Settings\All Users\Application Data
There is a file there that is all numbers such as: 85331323 or 46937130
Delete them
If you do not find them, update your antivirus application, go into safe mode and run a full scan.
Best regards
Ambucias
Posts
47312
Registration date
Monday 1 February 2010
Status
Moderator
Last seen
28 March 2026
11,166
25 Feb 2010 à 16:58
25 Feb 2010 à 16:58
Hello,
Me again...
another one of our esteemed members "Dist_turb" provided this much more efficient solution:
•To remove Lsas.Blaster.Keylogger manually:
•Press CTRL+ALT+DEL to open Task Manager
Kill Spyware Processes:
692527612.exe, 1313928688.exe, 1806188250.exe•
Delete these Files and Folders:
C:\Documents and Settings\All Users\Application Data\1929146152\1313928688.exe
C:\Documents and Settings\All Users\Application Data\1372029626\1806188250.exe
C:\Documents and Settings\All Users\Application Data\870894309\692527612.exe
Please, let us know how you did for we at Kioskea love to hear about success stories.
Me again...
another one of our esteemed members "Dist_turb" provided this much more efficient solution:
•To remove Lsas.Blaster.Keylogger manually:
•Press CTRL+ALT+DEL to open Task Manager
Kill Spyware Processes:
692527612.exe, 1313928688.exe, 1806188250.exe•
Delete these Files and Folders:
C:\Documents and Settings\All Users\Application Data\1929146152\1313928688.exe
C:\Documents and Settings\All Users\Application Data\1372029626\1806188250.exe
C:\Documents and Settings\All Users\Application Data\870894309\692527612.exe
Please, let us know how you did for we at Kioskea love to hear about success stories.
23 Feb 2010 à 15:43