lsass.exe, samlib.dll sasser worm

Hello Everyone

From what I've researched about the error message:

"lsass.exe - Unable to locate component
This application has failed to start because SAMLIB.dll
was not found. Re-installing the application may fix this
problem."

it looks like it's a variant of the sasser worm, a friend's computer may have
this with the little detail that it's not letting me boot up, I was
wondering if repairing the system with the original windows xp sp2 cd
may let me boot up without loosing data or maybe a boot disk so I coud boot up and clean the virus...any other suggestions are
more than welcome, thanks a lot.

Welcome to DAL,

Go get hijackthis here: www.merijn.org/files/hijackthis_sfx.exe


copy/paste log here in this thread. thanks.

__________________
Stalking and killing Spyware

Have we helped you? Please consider a donation to help keep D-A-L free. Click on donate below



MALWARE: READ FIRST Procedures:
|_ SpyBot V1.5 _|_ HijackThis Log __V2.0.2 _|



ASAP: promoting a high standard and quality of security support no matter where you seek help.

ummm...that would be great if I could boot up...after I turn it on I get the before posted message and then it stays there, I just need to get it up running and then I can play around with the hijack this.
Thank you

Looks like you got a couple choices like you said use the disks or try to do a system restore back before this all happened.


If you have xp or me you might be able to do systemrestore if that doesn't work then I don't know what tot ell you.

After the above you might go over to one of the other forums on this site relavent to your operating system and see if they can get you started up.

Good luck.

__________________
Stalking and killing Spyware

Have we helped you? Please consider a donation to help keep D-A-L free. Click on donate below



MALWARE: READ FIRST Procedures:
|_ SpyBot V1.5 _|_ HijackThis Log __V2.0.2 _|



ASAP: promoting a high standard and quality of security support no matter where you seek help.

Thank you Neal, we ended up taking the hard drive out of the machine to retrieve valuable data and we just wiped off the machine, it seems like the virus had gotten the ebst of the OS, but thanks anyways.