Search : in
By :

Lsas.blaster.keyloger

Last answer on Nov 15, 2009 10:58:03 am GMT Yen, on Dec 7, 2008 1:03:17 am GMT 
 Report this message to moderators

I keep receiving a pop out message from Winweb Security saying that my pc is infected with 38 viruses. but i have done a thorough scan of which no infection was detected.

What is wrong here and how do i go about resolving this infection issue?

thank u

Configuration: Windows XP
Internet Explorer 6.0

Best answers for « Lsas.blaster.keyloger » in :
Victim of Scam “Lsas.Blaster.Keylogger”? ShowVictim of Scam “Lsas.Blaster.Keylogger”? Issue Solution Issue Lsas.Blaster.Keylogger is a scam, a false Windows alert which is a Trojan, part of a rogue application. It will annoy you with lots of pop ups alerting you to purchase...
Blaster and Sasser: Causing continuous restart ShowBlaster and Sasser: Causing continuous restart When your computer is infected by the viruses Sasser or Blaster, Windows displays the following error message: Generic Host Process for Win32 Services encountered a problem and needs to...
Autoexec.nt - Subsystem 16-bit Windows ShowAutoexec.nt - Subsystem 16-bit Windows Solution 2 Solution 3 When trying to install a 16-bit windows on your PC, the following error message appears on your screen c:\windows\system32\autoexec.NT. The system file is not suitable for...
Download Spyware Blaster ShowSpywareBlaster can help keep your system spyware-free and secure. It does not have to remain running in the background. Prevent the installation of ActiveX-based spyware, adware, browser hijackers, dialers, and other potentially unwanted...
Download Bum Marketing Tools ShowDescription The application is designed by bummarketingtools.com. Simple and easy to use, the application has been awarded from certain places. Bum Marketing Tool is an application that enables you to get a better ranking of your website. It...
Download MRU-Blaster ShowBecause of carelessness, the users of your computer can have access to reach your sensitive data without your knowledge. To avoid that, it would be better to use to use MRU Blaster. MRU Blaster is a program which helps you to protect your private...
The LovSan/Blaster virus ShowIntroduction to the LovSan virus Appearing in the summer of 2003, LovSan (also known as W32/Lovsan.worm, W32/Lovsan.worm.b, W32.Blaster.Worm, W32/Blaster-B, WORM_MSBLAST.A, MSBLASTER, Win32.Poza, Win32.Posa.Worm, and Win32.Poza.B) is the first...
Mssearch - mssearch.exe Showmssearch - mssearch.exe mssearch.exe (mssearch stands for Microsoft Search) is a Windows NT/2000/XP generic process used for creating "full text" indexes for the Windows Indexing Service (cidaemon.exe). The process mssearch is not in any way a...
Keyloggers ShowKeyloggers A keylogger is a piece of software which records keystrokes, unbeknownst to the user. It is a kind of spyware. Some keyloggers can record URLs of visited websites, emails that have been read or sent, which files have been opened, and...

1

webdoctor, on Dec 7, 2008 3:50:49 am GMT
  • +1

You are infected with WinWeb security a bogus antivirus software which produces false reports and attempts to have you purchase WinWeb security. You need to remove it. Instructions can be found here http://www.bleepingcomputer.com/malware-removal/remove-winwe­b-security

Reply to webdoctor

3

Dean, on Dec 24, 2008 2:53:41 pm GMT

I tried this, no luck, used full and quick scans

Reply to Dean

6

es6067, on Jan 27, 2009 1:40:33 pm GMT
  • +3

I have the same problem. It kept telling me to scan and then would pop up to purchase. At one point, it wouldn't even allow me to get onto any internet programs. I can't open the internet, my email, my space (kids). How can I fix this if I can't get on to the internet?

Reply to es6067

2

St pete Tim, on Dec 23, 2008 2:45:34 am GMT
  • +4

I have the same thing with system sercurity and the lsas.blaster.keyloger popup and cant get rid of it i need help please . It says I too have 38 things wrong and my nortons 360 says there is nothing wrong with it.How do i get rid of it. Thankyou very much.

Reply to St pete Tim

4

cent, on Dec 27, 2008 4:17:36 am GMT
  • +11

I have the same problem i scan my computer i have no virus how do i get this pop up off my computer.

Reply to cent

5

Den, on Dec 27, 2008 2:40:14 pm GMT

I have the same problem too I am running spyware doctor and still get the pop up

Reply to Den

7

roxy, on Feb 15, 2009 12:36:12 am GMT

I got the sam one but the only thing I found to remove it was to reinstall windows if you have you software than cool

Reply to roxy

8

lassol, on Apr 14, 2009 8:32:28 pm BST
  • +4

As i understand it this virus has been renamed system security 4.5. i tried all of the suggested solutions to no avail, including pulling up the task window and deleting. For me it did not work. i tried to down load mc affee and it kept logging off aol and internet explorer ( i tried downloading on both systems) eventually i found windows live one care through the microsoft site, so that i knew it was genuine and had no problem downloading. it worked ,i was left with a small square blue and white icon whichi put into the recycle bin. as a bonus i have th windows one care on three months trial and do not have to pay anything until the three months expire. i supposew i could decide not to go ahead with the purchase but this system seems to be so good it would be daft not to. note you do need to remove any external spyware and the like before you download. the srcurity settting that come with your system do not need to be removed or settings change. to be sure that all is ok go to control panel and click on security and it will give the status of the three settings firewall antivirus etc. hope this is useful

Reply to lassol

9

jellyfish, on Apr 23, 2009 12:45:18 am BST

I recently had this worm. After attempting all the suggested remadies, to no avail, all I did was click the decline or the X. I did this for about 2 or 3 weeks then it didn't appear anymore. This worm is just a scam for people to purchase useless software in the amount of $45.00.

Just be patient. Don't fall for this scam.

Reply to jellyfish

10

noni, on Apr 24, 2009 3:59:45 am BST

WINWEB Security is a rogue spyware fake program. you should remove winweb security, heres how to remove winweb security fake spyware program http://www.darfuns.com/remove-winweb-security/
and if you have problem with LSAS.BLASTER.KEYLOGGER here ya goa nd see how to fix lsas.blaster.keylogger http://security-threads.com/trojan-removal/lsas-blaster-keyl­ogger/

Reply to noni

11

pat, on May 30, 2009 10:38:42 am BST

I had this problem and finally got rid of it by going into safe mode (restart computer; before it loads hit F8; when safe mode screen appears, hit enter) In Safe Mode, I then updated my Adaware program and ran it. Adaware got rid of the spyware and my antivirus program and all other programs functioned again. I then got out of safe mode and ran my Adaware program three more times and scan with my Trend Micro Antivirus program two more times. Everything is working fine again.

Reply to pat

12

Carey, on Oct 9, 2009 1:38:14 am BST
  • +6

Here's the cheap fix:

Boot into safe mode (Holding down F8).

Look in c:\Documents and Settings\All Users\Application Data

There is a file there that is all numbers such as: 85331323 or 46937130

Delete the sucker.

Reboot and all is well.

Reply to Carey

13

Carey's now my best friend, on Oct 10, 2009 11:49:50 am BST

This is exactly what needed to be done! After 24hours of pulling my hair out and grinding my teeth in anger I came across this lovely persons idea.. At first my computer didn't start in safe mode, but tried again and when hitting f8 I hit enter too and it started the computer in safe mode. Relieved!!!

Literally, if your fortunate enough to remember the date you got the virus, go straight into restore and re-boot from that date.

I'm so happy, it doesn't even seem that it ever happened at all and so feel my gratitude should be shared! I hope you guys can solve this problem too. Good luck!

Cheeri-o

Reply to Carey's now my best friend

22

 kem, on Nov 14, 2009 2:12:32 am GMT

C:\Documents and Settings\All Users\Application Data

Do you know where this is in vista windows???? I have done the cntrl-alt-delete, and downloaded spybot search and destroy, deleted my temp files. when I reboot the little darn thing came back. I tried to find the documents and settings but I don't know where to look in vista.

thanks,

Reply to kem

14

boxcar84our, on Oct 11, 2009 11:09:01 am BST

The correct way to get rid of this pesty pop up and to get ur computer back to the way it was before. shut down computer. Restart, hit f8 before load up. This will take you to safe mode and don`t freak out cause everything will appear large. This will enbale you to get to restore of your computer. Restore computer to earlier date, before this sucker attacked ur computer. This should fix it.

Reply to boxcar84our

15

runemova, on Oct 15, 2009 4:46:37 am BST

Thanks for the heads up but, what if you don't have a restore point??
Please lmk asap............Thanks!!!

Signed,
Irritated!!!!

Reply to runemova

19

pb, on Oct 26, 2009 9:11:44 pm GMT

Just trying to offer some help here, since I got some myself - :-)

When you go to System Restore, the default restore point dates are today and yesterday, but theres a checkbox where you can request earlier dates. Go back as far as you can to when you first think you got the trojan, and restore to the day or week or whatever before then, and restore.
That got rid of it for me, then I updated my Norton, all clean now, thank goodness! good luck -pb

Reply to pb

16

mck, on Oct 17, 2009 4:32:45 pm BST

I can't use system restore. It says that I have to go to domain adminstrator to turn it on. Any suggestions. I can't get into any screens except safe mode

Reply to mck

17

gretchwawa, on Oct 24, 2009 6:28:40 am BST

I agree, Carey is my new best friend! I rebooted in Safe Mode, and did the restore thing and all seems well! Thanks to everyone!

g

Reply to gretchwawa

18

pb, on Oct 26, 2009 8:49:23 pm GMT

Thanks to whoever figured out that booting in SAfe-mode was the way to go.
I couldn't do much else from there, but at least was able to do a System Restore, got rid of the lsas.keyblogger, then upgraded to the latest Norton and feel safe once again.
That was horrible, and I was really really frustrated, thought I'd have to reinstall the entire OS to get rid of the sucker. thank you thank you again! - pb

Reply to pb

20

Kramer, on Oct 26, 2009 10:37:49 pm GMT

Hey. I cannot start in safemode. I have tried f8, f7, going to run... then typing msconfig and nothing will come up. I am not the best with computers... Any ideas?

Reply to Kramer

21

Comgeek, on Nov 13, 2009 3:41:08 am GMT

Try Restore point or formate windows

Reply to Comgeek