|
|
|
what is llass.exe
|
Original Message
|
Name: ryan
Date: September 26, 2003 at 16:47:08 Pacific
Subject: what is llass.exeOS: Windows MECPU/Ram: compaq P2 233 and 196Mb r |
Comment: I am comp. illiterate....out of no where a file "llass.exe" appeared on my desktop and i can't get rid of it and i don't want to open it cause i have no idea what it is
Report Offensive Message For Removal
|
|
Response Number 1
|
Name: sonnysandiego
Date: September 26, 2003 at 17:32:48 Pacific
Subject: what is llass.exe
|
Reply: (edit)might be a trojan. run the trojan scan at
http://www.pcflank.com It is on the left under 'test my system'. good luck.
 Report Offensive Follow Up For Removal
|
|
Response Number 2
|
Name: ronlynn
Date: September 29, 2003 at 20:13:43 Pacific
Subject: what is llass.exe
|
Reply: (edit)Have the same problem ryan "llass.exe" apeared on my desk top...ran all the scanns & still can't get rid of it!! help someone?
Report Offensive Follow Up For Removal
|
|
Response Number 3
|
Name: Drexal
Date: September 30, 2003 at 10:45:38 Pacific
Subject: what is llass.exe
|
Reply: (edit)I have it too,.. only its in windows\system32 not on my desktop. And its set to run in the system startup in the registry. The trojan scannerdidn't seem to care about it. It doesn't have any information whatsoever in its file properties of which company made it,.. so I doubt it belongs there. I'm going to delete it, but first I'm going to scan it with spybot and see if it knows anything about it. If I were you guys I'd delete it too, or at least stop it from running at start-up.
Report Offensive Follow Up For Removal
|
|
Response Number 4
|
Name: Mr. C
Date: September 30, 2003 at 11:23:08 Pacific
Subject: what is llass.exe
|
Reply: (edit)its a trojan, its packed with upx 1.24
lar SLP http://best-ratez.biz/a2.php llass Software\Microsoft\Windows\CurrentVersion\Run Software\Microsoft\Windows\CurrentVersion\RunServices Software\Microsoft\Windows\CurrentVersion\Run Software\Microsoft\Windows\CurrentVersion\RunServices SYSTEM\CurrentControlSet\Control %s?s=%d llass SYSTEM\CurrentControlSet\Control SYSTEM\CurrentControlSet\Control
Report Offensive Follow Up For Removal
|
|
Response Number 5
|
Name: Virus Diva
Date: September 30, 2003 at 15:08:37 Pacific
Subject: what is llass.exe
|
Reply: (edit)Has anyone experienced any mass-mailing behavior? (lots of outgoing email scanning going on when you are connected to the internet, slooooow connection, etc.) How about have you had any issues with adware/spyware such as clear search or Igetnet? Rapid Blaster? I'm a virus removal professional, and have just started seeing this file associated with these behaviours. Still waiting on analysis results. How about another startup item called forward.exe (c:\winnt\system32\forward.exe) Any confirmed viruses on the system recently?
Report Offensive Follow Up For Removal
|
|
Response Number 7
|
Name: mfritts68
Date: October 2, 2003 at 11:18:43 Pacific
Subject: what is llass.exe
|
Reply: (edit)I found the llass on my desktop this AM. I found that it was an exe file but I couldn't delete because it was running in background. A three finger salute and end task let me send it to the trash can. I ran Norton with the latest definitions and if found nothing. I ran regedit/ found it in three places and deleted them. I thought I was cooking with gas after a reboot but I have since noticed that the FIND FIlE utility only looks in windows and prog files folders and nowhere else. I stopped all processes and tried running scan disk but it keeps dying on me. In process of running scandisk in safe mode. My operating sys is still 98. I am in a holding patern and scratching head???
Report Offensive Follow Up For Removal
|
|
Response Number 8
|
Name: kbutron
Date: October 2, 2003 at 13:26:26 Pacific
Subject: what is llass.exe
|
Reply: (edit)I just got it to today (in my desktop) and couldn't delete it too. No information founded in internet neither. But i could delete it restarting my computer in safe mode. Then I just click delete in it icon and that was all. Hopefully it will never apperar again. Because i am not a frecuent of this page u can write me to kokibutron@hotmail.com
Report Offensive Follow Up For Removal
|
|
Response Number 9
|
Name: Golan
Date: October 9, 2003 at 18:25:39 Pacific
Subject: what is llass.exe
|
Reply: (edit)I got it too. Norton with the latest update can not remove it, but it finds it ! The best advice is from Kbutron listed Oct. 2. Go into Safe Mode, Delete it from the desktop and then re-start. It is gone. G
Report Offensive Follow Up For Removal
|
|
Response Number 10
|
Name: skaro
Date: October 15, 2003 at 09:42:15 Pacific
Subject: what is llass.exe
|
Reply: (edit)How do I enter SAFE MODE (in order to delete llass.exe)? Thanks!
Report Offensive Follow Up For Removal
|
|
Response Number 11
|
Name: jcfacts
Date: October 15, 2003 at 22:32:52 Pacific
Subject: what is llass.exe
|
Reply: (edit)I attempted the safe mode/delete approach to removal of the virus/icon and since that time i have still seen signs of the virus being present on my hard drive. I ran a McAfee virus scan on my computer and it came up with two infected files with a virus called "backdoor-azu" and another called "igetnet.dr"
Report Offensive Follow Up For Removal
|
|
Response Number 12
|
Name: ketama-zerozero
Date: October 24, 2003 at 05:23:42 Pacific
Subject: what is llass.exe
|
Reply: (edit)I'm not a expert but I know something.....
(I'm italian with a danish version of win98 2e. and I don't know how is in inglish)....go to :start menu'>> programmer[programs]>>tilbehør[accessories]>> systemværktøjer[???accessori???bohhh]>> systemoplysninger[*sisteminfo].....and then under: funktioner(nr.4 menu')>>værktøj til systemkonfiguration[configuration of sistem*???]...her there are:generelt-config.sys-autoexec.bat-system.ini-win.ini and START!!!! open START and here can you see all the "start programs" when you start windows......(if you look all the .exe there is thef---in llass.exe) take the flag (v)out to LAR ...that mean at now the llass is not running in background BUT you must first reboot your machine and after DELETE the llass.exe file........that's it...easy no?!?
ciao a tutti...... :))))
Report Offensive Follow Up For Removal
|
|
Response Number 14
|
Name: d00de
Date: October 26, 2003 at 08:12:55 Pacific
Subject: what is llass.exe
|
Reply: (edit)Dudes, balance things out here. I investigated on the matter and llass.exe is inside windows upon installing it. I reinstalled windows xp and llass.exe was running in my processes. I also do believe that the file can be infected by a virus also but its not a virus.... To infect windows files is what a good virus does to protect itself from deletion!
:)
Report Offensive Follow Up For Removal
|
|
Response Number 15
|
Name: AV3
Date: October 27, 2003 at 00:49:37 Pacific
Subject: what is llass.exe
|
Reply: (edit)d00de, the program you're thinking of is lsass.exe, which is a valid Windows process. This is actually a Trojan process. What you have to do is delete the .exe after you do a Ctrl+Alt+Del and go into Task Manager and kill the process. Then it's safe to delete. As far as all the registry stuff, I doubt it'll cause any errors if you leave the Run tags in there and all, but if you do get any after deleting it, then simply goto your Start -> Run... and type in regedit.
That'll launch the registry editor program. Do an Edit->Find for llass.exe and delete everything related to it.
Report Offensive Follow Up For Removal
|
|
Response Number 16
|
Name: Virus Diva
Date: October 27, 2003 at 15:46:31 Pacific
Subject: what is llass.exe
|
Reply: (edit)It IS a backdoor - and if it's in use (can't be deleted) best practices is to format, due to the security violation. Safe mode scan or delete will work, but I reccomend a COLD BOOT to safe mode - in other words, shut the system down for 30 seconds, remove the battery if it's a laptop, then boot directly to safe mode - try tapping the F8 key while the system starts up - that should get you a start up menu. Remember to use the Admin account if you are Win XP or Win 2k...
Report Offensive Follow Up For Removal
|
Use following form to reply to current message:
|
|
|
