Current Events > lsass.exe keeps wanting me to delete a security file of some kind

Topic List
Page List: 1
DocileOrangeCup
02/14/18 5:46:10 PM
#1:


... Copied to Clipboard!
SSJ2GrimReaper
02/14/18 5:47:33 PM
#2:


u gettin' sassed by your computer lol
---
... Copied to Clipboard!
#3
Post #3 was unavailable or deleted.
MabusIncarnate
02/14/18 5:48:07 PM
#4:


Is it plugged in?
---
Ten million dollars on a losing campaign
Twenty million starving and writhing in pain
... Copied to Clipboard!
DocileOrangeCup
02/14/18 5:48:11 PM
#5:


... Copied to Clipboard!
DocileOrangeCup
02/14/18 5:54:32 PM
#6:


... Copied to Clipboard!
Webmaster4531
02/14/18 5:55:50 PM
#7:


is ass .exe
---
Ad Hominem.
... Copied to Clipboard!
DocileOrangeCup
02/14/18 5:57:07 PM
#8:


Webmaster4531 posted...
is ass .exe

good shit go sHit thats some goodshit rightthere rightthere if i do a so my self i say so thats what im talking about right there right there (chorus: ) mMMMM O0OOOOOOooo Good shit
---
... Copied to Clipboard!
HydroCannabinol
02/14/18 6:06:45 PM
#9:


Ok so what is the exact file name. If you want tech support youre gonna need to provide more details dude..lsas is legit but is also faked a lot. It shouldnt be requesting anything really, but im curious as to why file it wants to delete.

Run your AV now bro.
---
Steam ID: Mind_Explosion
I thought I chose very easy, not brand new to the game. - CheesyPhil on SC2
... Copied to Clipboard!
DocileOrangeCup
02/14/18 6:08:32 PM
#10:


HydroCannabinol posted...
Ok so what is the exact file name. If you want tech support youre gonna need to provide more details dude..lsas is legit but is also faked a lot. It shouldnt be requesting anything really, but im curious as to why file it wants to delete.

Run your AV now bro.

its like microsoft security something idk it happens after i start up my pc

also randomly my pc restarts which is annoying
---
... Copied to Clipboard!
Tyranthraxus
02/14/18 6:09:32 PM
#11:


lsass.exe is the filename used by the old sasser worm. I'd run an Antivirus / anti-malware scan immediately.
---
... Copied to Clipboard!
Tyranthraxus
02/14/18 6:13:57 PM
#12:


DocileOrangeCup posted...
HydroCannabinol posted...
Ok so what is the exact file name. If you want tech support youre gonna need to provide more details dude..lsas is legit but is also faked a lot. It shouldnt be requesting anything really, but im curious as to why file it wants to delete.

Run your AV now bro.

its like microsoft security something idk it happens after i start up my pc

also randomly my pc restarts which is annoying


Something similar to this is what's happening.

Potentially related to meltdown / specter. You did update, right?

https://en.m.wikipedia.org/wiki/Sasser_(computer_worm)?g=s
---
... Copied to Clipboard!
DocileOrangeCup
02/14/18 6:15:53 PM
#13:


... Copied to Clipboard!
Tyranthraxus
02/14/18 6:17:38 PM
#14:


DocileOrangeCup posted...
dammit

how exactly do i try cleaning my pc?

Don't bother. Look for an online tool that will do it specifically for this case.
---
... Copied to Clipboard!
Hexenherz
02/14/18 6:18:52 PM
#15:


DocileOrangeCup posted...
dammit

how exactly do i try cleaning my pc?


Imo your best bet is to get a "portable" AV (one that doesn't require installation - TrendMicro makes one that's probably worth checking out). Installing an AV on the computer directly at this point in the game may not fix anything idk.
---
RS3: UltimaSuende . On the quest to 99 WC. Currently at 98.
... Copied to Clipboard!
SSJGrimReaper
02/14/18 6:18:54 PM
#16:


DocileOrangeCup posted...
dammit

how exactly do i try cleaning my pc?

with some soap
---
... Copied to Clipboard!
HydroCannabinol
02/14/18 6:35:23 PM
#17:


I hate helping people like you, no offense. I ask for the filename and you repeat the same garbage as before. "Oh some microsoft thing" as if you cant be bothered to actually check. Meanwhile you want someone else to spend their time trying to troubleshoot for free on limited info.

Good luck bro
---
Steam ID: Mind_Explosion
I thought I chose very easy, not brand new to the game. - CheesyPhil on SC2
... Copied to Clipboard!
DocileOrangeCup
02/14/18 6:43:52 PM
#18:


HydroCannabinol posted...
I hate helping people like you, no offense. I ask for the filename and you repeat the same garbage as before. "Oh some microsoft thing" as if you cant be bothered to actually check. Meanwhile you want someone else to spend their time trying to troubleshoot for free on limited info.

Good luck bro

Well fuckin hold on

It only shows up when I turn my pc on and it hasn't shown up yet
---
... Copied to Clipboard!
DocileOrangeCup
02/15/18 12:23:41 AM
#19:


... Copied to Clipboard!
Tyranthraxus
02/15/18 12:59:10 AM
#20:


delete that file. It's not signed by Microsoft there is no way that's a legitimate exe file.
---
... Copied to Clipboard!
DocileOrangeCup
02/15/18 1:00:18 AM
#21:


Tyranthraxus posted...
delete that file. It's not signed by Microsoft there is no way that's a legitimate exe file.

absolutely positive?
---
... Copied to Clipboard!
Tyranthraxus
02/15/18 1:01:52 AM
#22:


DocileOrangeCup posted...
Tyranthraxus posted...
delete that file. It's not signed by Microsoft there is no way that's a legitimate exe file.

absolutely positive?

100%

The "Company: fcportables" is a dead giveaway
---
... Copied to Clipboard!
DocileOrangeCup
02/15/18 1:02:44 AM
#23:


... Copied to Clipboard!
DocileOrangeCup
02/15/18 1:21:50 AM
#24:


... Copied to Clipboard!
Tyranthraxus
02/15/18 1:28:42 AM
#25:


DocileOrangeCup posted...
okay fuck

nother thing

what is this



in my task manager?


turn your computer off and hire a professional to look at it

or just throw out the hard drive and start over
---
... Copied to Clipboard!
DocileOrangeCup
02/15/18 1:30:39 AM
#26:


... Copied to Clipboard!
DarkDragon400
02/15/18 1:56:11 AM
#27:


... Copied to Clipboard!
DocileOrangeCup
02/15/18 2:00:31 AM
#28:


... Copied to Clipboard!
DarkDragon400
02/15/18 2:04:02 AM
#29:


DocileOrangeCup posted...
DarkDragon400 posted...
What did you do exactly?

about what

I mean how did you get to this point where you are being sassed by your computer and the Chinese have taken over?
---
... Copied to Clipboard!
LordFarquad1312
02/15/18 2:05:57 AM
#30:


DarkDragon400 posted...
DocileOrangeCup posted...
DarkDragon400 posted...
What did you do exactly?

about what

I mean how did you get to this point where you are being sassed by your computer and the Chinese have taken over?

This made me laugh way more than it should have.
---
The force is my ally
"If you are tired of fear from links... Let Kirby's Nightmare protect you."
... Copied to Clipboard!
thronedfire2
02/15/18 2:09:08 AM
#31:


DarkDragon400 posted...
DocileOrangeCup posted...
DarkDragon400 posted...
What did you do exactly?

about what

I mean how did you get to this point where you are being sassed by your computer and the Chinese have taken over?


questionable porn sites
---
I could see you, but I couldn't hear you You were holding your hat in the breeze Turning away from me In this moment you were stolen...
... Copied to Clipboard!
DocileOrangeCup
02/15/18 3:43:46 PM
#32:


DarkDragon400 posted...
DocileOrangeCup posted...
DarkDragon400 posted...
What did you do exactly?

about what

I mean how did you get to this point where you are being sassed by your computer and the Chinese have taken over?

Lol I don't know >_<
---
... Copied to Clipboard!
Axiom
02/15/18 3:44:22 PM
#33:


You got virus'd
... Copied to Clipboard!
Hexenherz
02/15/18 7:12:13 PM
#34:


Did you seriously click "Continue" to a random pop-up asking you for admin privileges to "delete a file"? :\
---
RS3: UltimaSuende . On the quest to 99 WC. Currently at 98.
... Copied to Clipboard!
DocileOrangeCup
02/15/18 7:20:30 PM
#35:


Hexenherz posted...
Did you seriously click "Continue" to a random pop-up asking you for admin privileges to "delete a file"? :\

Well the ceman told me to

Axiom posted...
You got virus'd

Noii
---
... Copied to Clipboard!
Hexenherz
02/15/18 7:22:56 PM
#36:


It is possible that it was an actual Windows-generated pop-up. But considering the circumstances, I would not have clicked anything on that pop-up and I would have instead searched for a tool to get rid of the file specifically.

I still highly recommend downloading a portable anti-virus and running that but idk how effective they are.

I find it odd that a search for "Microsoft_Security_Process.exe" yields just one strange result on Google, too.
---
RS3: UltimaSuende . On the quest to 99 WC. Currently at 98.
... Copied to Clipboard!
Tyranthraxus
02/15/18 10:15:54 PM
#37:


Hexenherz posted...
It is possible that it was an actual Windows-generated pop-up. But considering the circumstances, I would not have clicked anything on that pop-up and I would have instead searched for a tool to get rid of the file specifically.

if that was not a windows pop up, clicking "continue" would have prompted the actual windows UAC prompt at which point you'd back out.
---
... Copied to Clipboard!
DocileOrangeCup
02/15/18 10:19:41 PM
#38:


... Copied to Clipboard!
Hexenherz
02/15/18 10:20:03 PM
#39:


Bruh I don't trust any of that garbage. Why click on something when you don't know what it is.
---
RS3: UltimaSuende . On the quest to 99 WC. Currently at 98.
... Copied to Clipboard!
Tyranthraxus
02/15/18 10:21:06 PM
#40:


DocileOrangeCup posted...
The uac prompt?

hire a professional to look at your computer
---
... Copied to Clipboard!
DocileOrangeCup
02/15/18 10:21:59 PM
#41:


Tyranthraxus posted...
DocileOrangeCup posted...
The uac prompt?

hire a professional to look at your computer

No money
---
... Copied to Clipboard!
Tyranthraxus
02/15/18 10:22:15 PM
#42:


DocileOrangeCup posted...
Tyranthraxus posted...
DocileOrangeCup posted...
The uac prompt?

hire a professional to look at your computer

No money

then wipe your hard drive and start over
---
... Copied to Clipboard!
DocileOrangeCup
02/15/18 10:23:24 PM
#43:


Tyranthraxus posted...

then wipe your hard drive and start over

Why it's not hurting me that bad

Plus you told me what to do wtf
---
... Copied to Clipboard!
Tyranthraxus
02/15/18 10:24:55 PM
#44:


DocileOrangeCup posted...
Tyranthraxus posted...

then wipe your hard drive and start over

Why it's not hurting me that bad

Plus you told me what to do wtf

When you see a popup like that it means you have a downloader on your system so it was just 1 problem out of potentially thousands.

and "it's not hurting you" in ways you can visibly see. It's probably stealing your passwords for everything and mining bitcoin.
---
... Copied to Clipboard!
Hexenherz
02/16/18 3:06:35 PM
#45:


UAC is User Access Control. In short, it is a tool in Windows that limits programs from operating with administrative privileges (which are necessary for changes to the OS' system files and processes).
---
RS3: UltimaSuende . On the quest to 99 WC. Currently at 98.
... Copied to Clipboard!
Cookie Bag
02/16/18 3:09:17 PM
#46:


Yeah might as well format right now before it gets worse, like tyrant said, it starts like that and eventually all your shit is taken over because they got your passwords and stuff...
---
... Copied to Clipboard!
AlisLandale
02/16/18 3:10:42 PM
#47:


... Copied to Clipboard!
Topic List
Page List: 1