lsas.blaster.keylogger worm on pc

confused.. · 2 May 2010 at 14:42

Hi

i have a worm on my pc which i cant remove... i cant boot into safe mode either

im running win xp

can anyone help??

thanks

Puppetmaster · 2 May 2010 at 15:52

So you cant boot into a usable windows either normal mode or safe mode?

confused.. · 2 May 2010 at 16:30

i can boot into normal windows mode but whatever i try to do i get a message saying ".exe cannot open it is infected with the virus lsas.blaster.keyloger"

i can see the option for safe mode but my keyboard stops responding at that screen, it works fine because i can boot into the bios and everything, it just stops responding at that screen or if i want to boot from cd, it'll say press any key but the keyboard stops responding again... i cant get hold of a ps/2 or usb keyboard so any advice?

theheyes · 2 May 2010 at 16:50

What sort of keyboard are you using if it's not USB or PS2? If it's a wireless USB setup, enabling USB in your BIOS should allow you to select safe mode.

SB118 · 2 May 2010 at 19:20

Some of the newer nasties break safemode so the machine just reboots.

Can you download mbam? If you've got it, rename the .exe to something else and then run it.

Deadbeat · 2 May 2010 at 19:56

Kill it with fire

SpiderX · 2 May 2010 at 20:35

Deadbeat said:
Kill it with fire

Burn it!

but yea... try Malwarebytes

ron3003 · 2 May 2010 at 21:35

Isn't this just one of those fake antivirus/security scareware things?
What program is telling you that this worm is on your pc?

SB118 · 2 May 2010 at 23:11

ron3003 said:
Isn't this just one of those fake antivirus/security scareware things?
What program is telling you that this worm is on your pc?

Probably, but they are just as damaging to your system as any other virus.

Ev0 · 3 May 2010 at 00:39

Scamware or whatever it's called for sure

Tried anything like this to fix it?

http://en.kioskea.net/faq/4148-victim-of-scam-lsas-blaster-keylogger

Google around and you'll find a solution.

Puppetmaster · 3 May 2010 at 01:02

this should help you out

http://www.technibble.com/rkill-repair-tool-of-the-week/

its called rkill. comes in 4 different flavours (1 is exe) so you can run it even if exe's are blocked. Should then be able to install malware bytes and run it or combo fix to atleast get rid of some of the crap.