PiusX Posted February 10, 2008 Report Share Posted February 10, 2008 I noticed that lately when I use utorrent 1.7.7 version to download from the net that with my firewall program running and AV running. I get this message that Iass or Lass request connection from the internet?? But I read from M$ that there is a virus or trojan going with the name similiar to the Lass program on windows but instead of a "L" it uses a "I" to confuse users to accept the connection allowing a hacker to take over a users computer as Admin. http://www.microsoft.com/technet/security/Bulletin/MS08-002.mspxSo has anyone experience this and what did they do? All I did was refuse the connection and check the box to disallow any future connections from net of that program.... Link to comment Share on other sites More sharing options...
Firon Posted February 10, 2008 Report Share Posted February 10, 2008 If you're seeing bogus connections from "IASS", then you've probably got an infected computer. Link to comment Share on other sites More sharing options...
jewelisheaven Posted February 10, 2008 Report Share Posted February 10, 2008 LSASS is the windows service. I'd recommend you check out Process Explorer from sysinternals.com and check to see where the extra process is launching from and try to kill it and / or update your spyware and / or rootkit revealer (also sysinternals.com) and boot into safe mode to remove it Link to comment Share on other sites More sharing options...
squirrel zapper Posted February 10, 2008 Report Share Posted February 10, 2008 I think I had this happen recently, ended up removing Zone Alarm Free and reinstalling it. Quit seeing the connection requests from lsass.exe. Can't remember where I found that solution. Hope this helps. Link to comment Share on other sites More sharing options...
jewelisheaven Posted February 11, 2008 Report Share Posted February 11, 2008 but squirrel you notice it's not LSASS (lsa shell export service)... I still believe checking the running process location and getting up to date scanner prior to rebooting in safe mode is the best bet due to the penchant of mal/ad/crap-ware like this to NOT go quietly. Link to comment Share on other sites More sharing options...
squirrel zapper Posted February 11, 2008 Report Share Posted February 11, 2008 My bad. Saw LSASS in your post and should have read the second half of OP's post more carefully. Sure sounded like the problem I had with ZAF. Link to comment Share on other sites More sharing options...
PiusX Posted February 11, 2008 Author Report Share Posted February 11, 2008 I did download the M$ lastest hotfix for the Lass problem and updated it to fix that problem as I noted on the link...Oh yeah I do use ZA pro...rather then the windows firewall.. Link to comment Share on other sites More sharing options...
Firon Posted February 11, 2008 Report Share Posted February 11, 2008 It's likely just Zone Alarm lameness. Link to comment Share on other sites More sharing options...
PiusX Posted February 11, 2008 Author Report Share Posted February 11, 2008 Probably but oh well as long as I keep it in check...which I am doing so far I think I be ok ...that's kinda what I thought too but never can be to sure as there is also a hack program using that very similiar name Iass not the real Lass program.... Link to comment Share on other sites More sharing options...
squirrel zapper Posted February 11, 2008 Report Share Posted February 11, 2008 Thanks for the vindication Firon. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.