C:/Windows/System32/Lass.exe

Got another little problem here.

I'm running a Dell (not this computer) and there's this message that this computer will shutdown in 60 seconds. There's also a Lass.exe, so I know it's backdoor trojan. The Start menu and taskbar do not come up either. Occasionally, the System Shutdown dialogue box will say that Windows m

The problem is, I cannot stop the 60 second shutdown, so it keeps shutting down. I need that to be delayed so I can fix it.

I cannot kill the process or anything on the Task Manager. I cannot get into Safe Mode, because a whole list of partitions comes up with the C Drive and System 32 folder.

The Lass.exe is found in the System32 folder, but when I enter the System 32, it is not found. It's not hidden or anything.

I cannot run any programs, I cannot do anything because of the 60 second timer.

Any help is appreciated! If you need more details, let me know

Thank you!

 

This is likely an adbot of some sort. Typical symptoms.

Please download HijackThis! SetUp from here. Save the file to your desktop.

Double-click the HijackThis! SetUp icon to begin the installation. Follow the prompts for the default install location of:'C:\Program Files\HijackThis'. Tick the 'Create a desktop' button when the option appears. Select next, then allow HijackThis! to start.

Then press the [Scan] button. You will notice the [Scan] button will turn into a [Save Log] button. Click the [Save Log] button and notepad will open up with the contents of the scan. Right-click in the saved log, and select 'copy'. Then proceed to your original thread, unless otherwise instructed and click the '[Reply]' button and paste the saved contents to be reviewed. Do not make any modifications to the log or perform any 'fixes' until told to do so.


Someone will be along to look at your log soon as possible, we appreciate your patience. Remember, we are ALL VOLUNTEERS, those of us who help. And we do the best we can to answer posts as soon as we can. Logs are generally looked at in the order in which they are posted.

I'm going to move this thread to the 'Spyware & Virus' forum

 

When you get the shutdown message, click Start>Run and type shutdown -a then hit enter, to see if it's suspends the shutdown long enough for you to create a log.

 

Yeah, I know about HiJack this - I use it on my other computers!

Problem is, I can't download anything! The computer doesn't do anything or allow me to do anything.

There is also no Start Menu, and Control+R Does not do anything

 

I had that problem with the computer I was working on last week, I downloaded hjt to my computer then put it on my jump drive and posted to the desktop. Also had the 60 second shutdown message...the shutdown -a worked long enough to get a scan.

 

Ctrl+R = refresh

My apologies .... I overlooked the fact that you don't have a Start button. Open the Task Manager and click File>New Task (Run) then type cmd and hit enter. In the command window that opens, type shutdown -a and hit enter.

From the New Task (Run) window, you can also click browse, then navigate to anywhere on the computer, including cd drives, usb drives etc. Right click>copy any file, then navigate to where you want it and right click>paste. Handy if you need to transfer HijackThis or another tool to the computer. You can then browse to and select that file to run it.

When you have the Task Manager open, is explorer.exe running? If not, type explorer at the Run line and hit enter.

Hope this helps!

 

Hi,

My name is Todd and I'm with Dell's online outreach program. I don't handle spyware / virus issues very much but have you tried restarting your system in Safe Mode with Networking to see if you can download Hijack This? Not sure what your internet connection type is, or if the particular trojan you have will allow it or not. If you've never entered Safe Mode before you can restart the system and at the BIOS splash screen tap the <F8> key. One of the Safe Mode options will be for Safe Mode with Networking. As I said above it may or may not work. You can always try the shutdown -a option to see if you can get enough time to download or run a scan.

Let me know if it works for you. I'll stop back later to see how everything goes.

Thank you,

Todd

Customer Advocate
Dell, Inc.

http://direct2dell.com/one2one/archive/2006/11/19/3648.aspx