Lsas,Blaster.Keyloger worm
Closed
                                    
                        scott                    
                                    -
                            Feb 22, 2010 at 09:30 PM
                        
Ambucias Posts 47311 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 - Feb 25, 2010 at 04:58 PM
        Ambucias Posts 47311 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 - Feb 25, 2010 at 04:58 PM
        Related:         
- Lsas,Blaster.Keyloger worm
- Wall worm italy - Home - Apps & Sites
4 responses
                
        
                    xpcman
    
        
                    Posts
            
                
            19528
                
                            Registration date
            Wednesday October  8, 2008
                            Status
            Contributor
                            Last seen
            June 15, 2019
            
            
                    1,824
    
    
                    
Feb 22, 2010 at 09:42 PM
    Feb 22, 2010 at 09:42 PM
                        
                    If you rename the malwarebytes program (mbam.exe) as explorer.exe the the virus can't stop it from running.  You should run these tools in "safe Mode"  (F8 at the Windows display during booting).
Good Luck
            Good Luck
                
        
                    Ambucias
    
        
                    Posts
            
                
            47311
                
                            Registration date
            Monday February  1, 2010
                            Status
            Moderator
                            Last seen
            February 15, 2023
            
            
                    11,166
    
    
                    
Feb 25, 2010 at 04:40 PM
    Feb 25, 2010 at 04:40 PM
                        
                    Hello,
Here is quick fix:
Boot into safe mode (Holding down F8).
Look in c:\Documents and Settings\All Users\Application Data
There is a file there that is all numbers such as: 85331323 or 46937130
Delete them
If you do not find them, update your antivirus application, go into safe mode and run a full scan.
Best regards
            Here is quick fix:
Boot into safe mode (Holding down F8).
Look in c:\Documents and Settings\All Users\Application Data
There is a file there that is all numbers such as: 85331323 or 46937130
Delete them
If you do not find them, update your antivirus application, go into safe mode and run a full scan.
Best regards
                
        
                    Ambucias
    
        
                    Posts
            
                
            47311
                
                            Registration date
            Monday February  1, 2010
                            Status
            Moderator
                            Last seen
            February 15, 2023
            
            
                    11,166
    
    
                    
Feb 25, 2010 at 04:58 PM
    Feb 25, 2010 at 04:58 PM
                        
                    Hello,
Me again...
another one of our esteemed members "Dist_turb" provided this much more efficient solution:
•To remove Lsas.Blaster.Keylogger manually:
•Press CTRL+ALT+DEL to open Task Manager
Kill Spyware Processes:
692527612.exe, 1313928688.exe, 1806188250.exe•
Delete these Files and Folders:
C:\Documents and Settings\All Users\Application Data\1929146152\1313928688.exe
C:\Documents and Settings\All Users\Application Data\1372029626\1806188250.exe
C:\Documents and Settings\All Users\Application Data\870894309\692527612.exe
Please, let us know how you did for we at Kioskea love to hear about success stories.
            Me again...
another one of our esteemed members "Dist_turb" provided this much more efficient solution:
•To remove Lsas.Blaster.Keylogger manually:
•Press CTRL+ALT+DEL to open Task Manager
Kill Spyware Processes:
692527612.exe, 1313928688.exe, 1806188250.exe•
Delete these Files and Folders:
C:\Documents and Settings\All Users\Application Data\1929146152\1313928688.exe
C:\Documents and Settings\All Users\Application Data\1372029626\1806188250.exe
C:\Documents and Settings\All Users\Application Data\870894309\692527612.exe
Please, let us know how you did for we at Kioskea love to hear about success stories.
 
        
    
    
    
    
Feb 23, 2010 at 03:43 PM