|Use start, run type in cmd and enter key.|
Type attrib. If you see lsass.ese you have a virus.Could be other places and wrong sizes.
I think they said that.
"Best Practices", Event viewer, host file, perfmon, antivirus, anti-spyware, Live CD's, backups, are in my top 10