Hello and welcome to our community! Is this your first visit?
Register
Enjoy an ad free experience by logging in. Not a member yet? Register.
Results 1 to 12 of 12
  1. #1
    Senior Coder crmpicco's Avatar
    Join Date
    Jan 2005
    Location
    Mauchline, Scotland
    Posts
    1,093
    Thanks
    15
    Thanked 1 Time in 1 Post

    Arrow wlsass.exe - Any Information? ZoneAlarm cataches it accessing WWW

    Has anyone got any information on wlsass.exe?

    Google returns no matches.

    ZoneAlarm catches it trying to access the internet, I have denied it both times. But can't find any info as to what it is???

    Thanks.

    Picco


  • #2
    New Coder
    Join Date
    Jun 2002
    Location
    Australia
    Posts
    81
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Try doing a search on your pc for the wlsass.exe file and see where it resides. You might be able to get more of an idea of what its doing

  • #3
    Senior Coder JamieR's Avatar
    Join Date
    Oct 2004
    Location
    United Kingdom
    Posts
    3,161
    Thanks
    0
    Thanked 5 Times in 5 Posts
    1) I can't find anything about it on google
    2) See what folder it's in and what websites it's trying to access and from what ports
    3) Seeing as it has a similar filename to lsass.exe (the Local Security Authority Subsystem Service), I think it's malware.
    4) Make sure you have fully patched your system with updates from Microsoft and then run a fully updated anti virus scan and spybot/adware scans.

    Jamie.

  • #4
    New to the CF scene
    Join Date
    Jan 2006
    Posts
    9
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Hi, I killed wlsass.exe day before yesterday.
    Wlsass.exe resides in your %systemroot% or %systemroot%\system32 directory (I don't remember). Remove it. Then start regedit and search string "wlsass.exe". Delete all its registrations.

  • #5
    Senior Coder JamieR's Avatar
    Join Date
    Oct 2004
    Location
    United Kingdom
    Posts
    3,161
    Thanks
    0
    Thanked 5 Times in 5 Posts
    Do you have any ideas what it is? It sounds like malware to me.

  • #6
    New to the CF scene
    Join Date
    Jan 2006
    Posts
    9
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Quote Originally Posted by weazel
    Do you have any ideas what it is? It sounds like malware to me.
    I find it on the computer with just made fresh OS instalation and after first surfing. There aren't firewall (XP SP1) nor some antivirus package...
    I couldn't FIND useful information about it...
    Life is not measured by the breaths we take, but by the moments that take our breath away.

  • #7
    Supreme Master coder! _Aerospace_Eng_'s Avatar
    Join Date
    Dec 2004
    Location
    In a place far, far away...
    Posts
    19,291
    Thanks
    2
    Thanked 1,043 Times in 1,019 Posts
    It sounds like its for something that is wireless, for what though not sure. Though I recently reformatted with Windows XP SP2 and I don't appear to have wlsass.exe on my system at all.
    ||||If you are getting paid to do a job, don't ask for help on it!||||

  • #8
    New to the CF scene
    Join Date
    Jan 2006
    Posts
    9
    Thanks
    0
    Thanked 0 Times in 0 Posts
    PC was powered with CityLAN Internet. It's incubator for viruses That why I decided to cure it.
    Life is not measured by the breaths we take, but by the moments that take our breath away.

  • #9
    Senior Coder JamieR's Avatar
    Join Date
    Oct 2004
    Location
    United Kingdom
    Posts
    3,161
    Thanks
    0
    Thanked 5 Times in 5 Posts
    Yeah but if it was something do with wireless or a known program, then I would have thought that people would know about it. Google returned 0 results the other day, and now just has indexed this thread twice.

  • #10
    New to the CF scene
    Join Date
    Jan 2006
    Posts
    9
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Look at wlsass.exe date creation
    Life is not measured by the breaths we take, but by the moments that take our breath away.

  • #11
    New to the CF scene
    Join Date
    Jan 2006
    Posts
    9
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Last edited by k.petkov; 01-04-2006 at 12:33 PM.
    Life is not measured by the breaths we take, but by the moments that take our breath away.

  • #12
    Senior Coder crmpicco's Avatar
    Join Date
    Jan 2005
    Location
    Mauchline, Scotland
    Posts
    1,093
    Thanks
    15
    Thanked 1 Time in 1 Post
    Summary : Trojan.WLSASS/32.Process

    Company : Unknown

    Description : Trojan.WLSASS/32.Process

    Trojans are programs that can appear to serve a legitimate purpose but actually have an unwanted or harmful effect.

    A large segment of trojan programs download other harmful software components to a user's PC without his/her knowledge.

    This application is most likely downloaded and installed by another application that is considered to be adware or spyware.

    Threat Level (1-10) : 8

    Processes : WLSASS.EXE

    It was trying to access the WWW with me and ZA caught it, i have now removed it.


  •  

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •