lsass.exe nyob rau hauv lub qhov rais thiab lwm yam teeb meem

Ua ntej ntawm tag nrho cov neeg siv yuav tsum to taub tias cov ntaub ntawv yog LSASS thiab ISASS. Nws yog ib tug tseem ceeb heev qhov rais ntaub ntawv uas yuav tsis yuav tsum muab tua los yog raws li nws yog ib tug tseem ceeb heev cov ntaub ntawv uas yog yuav tsum tau los ntawm lub system khiav zoo. Nws tsis yog ib tug kab mob los yog ib tug cab thiab yog li ntawd tus neeg siv yuav siv lub ua nyob rau hauv functionalities nrog yooj yim. Txoj kev uas cov ntaub ntawv yog nyob yog feem ntau nyob rau ntawm lub c: \ qhov rais \ system32 los yog c: \ winnt \ system32. Cov ntaub ntawv no kuj pom hais tias yuav tsum tau raws li ib tug ruaj ntseg kev hem thawj. Tej zaum cov cab los yog tus kab mob no yog qhov teeb meem uas yog tom qab qhov teeb meem.

Tus neeg siv yog li ntawd yuav tsum tau los xyuas kom meej tias cov antivirus tau raug ntsia tau rau hauv lub chaw ua hauj lwm ua tau yooj yim thiab siab. LSASS stands rau Local Security Authority subsystem Service. Cov tau kev hem thawj nrhiav kom tau thiab kev ua ntaub ntawv thov qhov chaw yuav Tseem yuav kawm txog nyob rau hauv lub caij nyoog kawg no ib feem ntawm tus nyeem.

Part 1: txawv teeb meem nrog rau cov ntaub ntawv, lawv nrhiav kom tau thiab hais txog cov ntaub ntawv qhov chaw

Cov kev ruaj ntseg kev hem thawj uas tau raug txuam nrog cov ntaub ntawv yog ncaj qha txog qhov chaw ntawm cov ntaub ntawv. Hauv qab no yog cov teeb meem uas muaj feem rau cov ntaub ntawv thiab yuav tsum tau ntshai li cov kab mob thiab trojans.

• Yog hais tias lub lsass.exe tau nyob rau ntawm txoj kev C: \ qhov rais ces cov kev ruaj ntseg kev hem thawj yog 80%. Tag nrho cov ntaub ntawv loj yog 253.952 bytes. Feem ntau ntawm cov ntaub ntawv uas yog hais txog txoj kev no yog tsis tseem ceeb system cov ntaub ntawv. Nws txhais tau tias tus neeg siv yuav tsum tau khiav antivirus scan kom txoj hauj lwm ua tau yooj yim. Qhov no cov ntaub ntawv pib mus raws li lub qhov rais ua li cas. Lub npe tseem ceeb uas muaj feem xyuam rau cov ntaub ntawv no yog TSHUAB \ Khiav, Winlogon \ Plhaub, Khiav, Userinit, exefile, win.ini, TSHUAB \ RunOnceEx, TSHUAB \ RunOnce, TSHUAB \ Neeg Plhaub Folders, Neeg Plhaub Folders, neej ntawd hais \ Khiav, RunOnce, TSHUAB \ RunServices. Tus neeg siv yuav nrhiav cov ntaub ntawv thiab xyuas cov qhov teeb meem yooj yim.

• Nrog 62% txaus ntshai npaum li cas cov ntaub ntawv uas yog nyob rau ntawm tus neeg siv qhov profile ceev yog dua tsis yog tus tub ntxhais system cov ntaub ntawv. Nws muaj ib tug tag nrho loj ntawm 229.621 bytes. Lub npe tseem ceeb uas yog txuam nrog lub tswv yim yog TSHUAB \ Khiav, Winlogon \ Plhaub, Khiav, Userinit, exefile, win.ini, TSHUAB \ RunOnceEx, TSHUAB \ RunOnce, TSHUAB \ Neeg Plhaub Folders, Neeg Plhaub Folders, neej ntawd hais \ Khiav, RunOnce, TSHUAB \ RunServices. Qhov no cov ntaub ntawv muaj peev xwm coj tswj thiab muab cov kev pab cuam.

• Cov ntaub ntawv uas tau raug nyob rau hauv lub C: \ qhov rais ceev yog cov lsass.exe cov ntaub ntawv uas yog 79% txaus ntshai. Tag nrho cov ntaub ntawv loj yog 107.520 bytes thiab. 8% ntawm tag nrho cov occurrences nyob rau hauv lub system yog txuam nrog rau cov ntaub ntawv no

• Yog hais tias cov ntaub ntawv nyob C: \ pab cov ntaub ntawv kev pheej hmoo tias yog txuam yog yuav luag 57%. Tag nrho cov ntaub ntawv loj yog 94.208.

• Cov ntaub ntawv nyob rau ntawm txoj kev C: \ qhov rais \ System32 \ tsav tsheb muaj ib tug ruaj ntseg kev hem thawj ntsuam xyuas ntawm 44%. Tag nrho cov ntaub ntawv loj yog 110.592 bytes thiab kev ruaj ntseg variants uas yog txuam yog yuav luag 200+

Part 2: Cov txheej txheem los kho cov teeb meem muaj feem xyuam rau lsass.exe

Cov kauj ruam uas yuav tsum tau ua raws li nyob rau hauv no hais txog muaj raws li nram no:

1. Lub URL https://technet.microsoft.com/library/security/ms04-011 yog yuav tsum tau browsed. Nws yuav ua rau tus neeg siv mus rau hais tias bulletin uas muaj feem xyuam rau lsass.exe ntaub ntawv:

2. Tus neeg siv ces yuav tsum tau mus download tau cov ntaub ntawv uas yog txuam nrog rau qhov teeb meem uas yog kev nyuaj siab:

3. Thaum cov ntaub ntawv downloaded ntawm tus neeg siv yuav tsum tau ob npaug nias nws rau nruab nws tam sim ntawd:

4. Tus neeg siv tam sim no yuav tsum tau xyuas kom meej tias cov firewall uas tau raug ua nyob rau hauv yog muab rau:

5. Lub qhov rai tshiab kuj yuav tsum tau ntsia kom paub meej tias lub chaw ua hauj lwm yog ua li cas nyob rau hauv txoj kab nrog rau cov neeg siv cov kev thov. Tseem yog qhov teeb meem yog kev nyuaj siab nws yuav tsum tau mus nrhiav tus MS tus neeg sawv cev yuav tau txais qhov teeb meem tsau kiag li rau tus neeg siv. Cov txheej txheem kuj xaus no kiag li:

Part 3: Lwm yam txheej txheem los mus kov yeej cov uas tsis lsass.exe

Tus neeg siv yuav tsum tau xyuas kom meej tias cov nram qab no cov kauj ruam tua kiag curb qhov teeb meem no. Nws yog ib tug paub cov txheej txheem uas tau txais cov hauj lwm uas tsis muaj teeb meem thiab teeb meem:

1. Txoj kev uas yog yuav tsum tau ua raws li los ntawm cov neeg siv nyob rau hauv no hais txog yog C: \ qhov rais \ System32 \ tsav tsheb \ thiab lwm yam. Qhov no yuav ua rau tus neeg siv mus rau lub lmhost cov ntaub ntawv:

2. Tus neeg siv ces yuav tsum tau los xyuas kom meej tias cov ntaub ntawv yog txoj cai clicked qhib cov zaub mov raws li qhia raws li nram no:

3. Cov ntaub ntawv no ces yuav tsum tau qhib. Yog hais tias lub OS nug rau cov lus qhib software ces neeg siv yuav tsum xaiv wordpad los yog notepad:

4. Thaum cov notepad yog qhib nws yog yuav tsum tau soj ntsuam. Yuav tsum muaj tsis muaj kab uas tsis pib nrog # tseem ceeb. Tus lwm yam nqe lus uas tus neeg siv yuav tsum tau saib rau yog Microsoft.com, windowsupdate los yog nws yuav ua tau lwm yam antivirus kev pab cuam lub npe. Cov nqe lus yuav tsum tsis txhob yuav muaj nyob rau hauv lub qhov rais:

5. Yog hais tias tus neeg siv pom tej ntaub ntawv uas tau raug liam ces nws muaj lub npe hais tias yog hais saum toj no. Yog hais tias tus neeg siv founds tej ntaub ntawv ces daim nplaub tshev yuav tsum raug kaw. Tus neeg siv yuav tsum tau ces mus rau cov ntsiab interface. Lub npe ntawm cov ntaub ntawv yog yuav tsum tau hloov mus rau lmhosts.ch:

6. Thaum lub npe tau hloov rau cov neeg siv ces yuav tsum tau mus pib dua lub system:  

7. Thaum lub system tau restarted tus neeg siv yuav tsum tau nias lub qhov rais + R tseem ceeb yuav tau qhib qhov mus dhia hais kom ua. Lub sij hawm nbtstat - R yog yuav tsum tau ntaus. Ib tug nyuag cmd qhov rais yuav tshwm sim thiab nyob ze rau ntawm nws tus kheej. Thaum nws tau ua tus txheej txheem xaus no nyob rau hauv tag nrho cov:

Ceeb toom

Nws yog ib tug ob feem txheej txheem uas cov neeg siv yuav ua raws li. Rau qhov zoo tshaj plaws kev tshwm sim nws yuav tsum tau mus ua raws li ob lub qhov chaw mus tau tshaj qhov teeb meem. Cov tag nrho fledge txheej txheem kuj tau hais nyob rau ntawm qhov URL http://www.computerhope.com/issues/ch000913.htm. Qhov no yog ib feem tau raug detailed vim lub fact tias nws yog kev nyob rau hauv qhov thiab feem ntau ntawm cov qhov rais cov neeg siv yog tsis nyob rau hauv tag nrho cov tech miv.

Nyob ntawm seb qhov kev tshwm sim hauv lub lsass.exe ntaub ntawv yuam kev yuav ua tau vim li cas los xij. Nws yog yog li ntawd qhia los xyuas kom meej tias cov neeg siv yuav tsum ua raws li cov txheej txheem raws li saum toj no. Nws yuav tau txais qhov zoo tshaj plaws lub sij hawm rau tus neeg siv thiab nyob rau lwm yam tes yuav tau tso cai rau lawv mus dawb do siv lub system nrog yooj yim.