Hola a todos,
Les cuento:
Ya hice los 11 pasos pero el problema persiste.
Si ejecuto el msn messenger, el c:/windows/system32/lsass.exe (es el de windows) pasa a ocupar el 50% del procesador.
Tarda unos 5 minutos en iniciar sesión y permanece con ese uso todo el tiempo.
Si cierro el msn messenger pasa a un uso de 2 a 4%.
No detecto nada con ningún programa.
Espero vuestros comentarios y si me lo piden tengo el HijackThis.
Saludos.
DSch

Hola dsch bienvenid@ al foro
Consejos para antes de publicar un nuevo mensaje
Políticas del Foro de InfoSpyware

Descarga las actualizaciones en especial el service pack 2 y 3

Hola, Gracias por contestarme.
Te cuento:
Tengo el Vista con el SP1 y todos las actualizaciones cargadas.
Es un portatil Toshiba con 3gb de ram y un core 2 duo de 2.1 mhz.
Disculpá no haberlo dicho antes.
Ya había leído los otros temas y nada dice de este problema.
Lo más parecido es que Isass con I en lugar de la L pero no es este el caso.
Gracias nuevamente por contestarme.
Espero tus comentarios.
Saludos
DSch

Realiza lo siguiente:

Descarga y actualiza pero no ejecutes aun:

• SUPERAntiSpyware Free + Manual
• MalwareBytes + (Manual)
• Ccleaner + Manual

Apaga restaurar sistema
Reinicia a Modo Prueba de Fallos (Modo Seguro)

Ejecuta en este orden
SuperAntispyware -----------> Previamente actualizado.
MalwareBytes -----> Previamente actualizado.
Reinicia en modo normal.

Ejecuta El Ccleaner para limpiar Cookies y Temporales, Luego el Limpia el Registro haciendo copia de seguridad
Haz un escaneo online con:

• Manual ewido online (lee el Manual ) Ewido online escaner Luego del Escaneo le das a Remove Infections
• Kaspersky (lee el Manual) Y nos Pegas ese nuevo Reporte de Karpersky Aquí junto con el reporte de MalwareBytes.

Te cuento: Hice todo hasta el kaspersky pero me tira un error que dice que no puede hacer el update de la base de datos y que tengo que reinstalarlo.
Para mi fue algún error al cargar el activex.
Aclaro que: leí el manual, el nivel de seguridad es el correcto, no instalé nunca la beta y no tengo nada de este programa en "instalar/desinstalar programas"
Pregunta:
Si bajo la versión de prueba del sitio de kaspersky y la ejecuto, es lo mismo?
Puedo de alguna manera desinstalar el activex para instalarlo nuevamente?
Saludos
Dsch
PD: hasta ahí no había encontrado nada.

Hola descarga AVP Tools de kaspersky que es el antivirus pero sin residente

Comenta los resultados

PD:hacete de paciencia por que demora en escanear

Es cierto, tardo un par de horas y pico, te paso el informe

Scan
----
Scanned: 534058
Detected: 3
Untreated: 0
Start time: 27/09/2008 18:22:48
Duration: 02:25:31
Finish time: 27/09/2008 20:48:19


Detected
--------
Status Object
------ ------
deleted: riskware not-a-virus:AdTool.Win32.MyWebSearch.cx File: C:\Program Files\Azureus\.install4j\i4j_extf_8_5p83tu.exe//#
deleted: riskware not-a-virus:AdTool.Win32.MyWebSearch.br File: D:\Soft\Grabados\Edición Video Audio Codecs\freeripmp3.exe//file20
deleted: riskware not-a-virus:WebToolbar.Win32.MyWebSearch.bm File: D:\Soft\Grabados\Nero.8.1.Ultraedition\Nero-8.1.1.0b_esp_trial(2).exe//Toolbar.exe


Events
------
Time Name Status Reason
---- ---- ------ ------
27/09/2008 18:22:51 Running module: smss.exe\smss.exe ok scanned
27/09/2008 18:22:51 File: C:\Windows\System32\smss.exe ok scanned
27/09/2008 18:22:51 Running module: smss.exe\ntdll.dll ok scanned
27/09/2008 18:22:51 File: C:\Windows\system32\ntdll.dll ok scanned
27/09/2008 18:22:51 Running module: csrss.exe\csrss.exe ok scanned
27/09/2008 18:22:51 File: C:\Windows\system32\csrss.exe ok scanned
27/09/2008 18:22:51 Running module: csrss.exe\ntdll.dll ok scanned
27/09/2008 18:22:51 Running module: csrss.exe\CSRSRV.dll ok scanned
27/09/2008 18:22:51 File: C:\Windows\system32\CSRSRV.dll ok scanned
27/09/2008 18:22:51 Running module: csrss.exe\basesrv.dll ok scanned
27/09/2008 18:22:51 File: C:\Windows\system32\basesrv.dll ok scanned
27/09/2008 18:22:51 Running module: csrss.exe\winsrv.dll ok scanned
27/09/2008 18:22:51 File: C:\Windows\system32\winsrv.dll ok scanned
27/09/2008 18:22:51 Running module: csrss.exe\USER32.dll ok scanned
27/09/2008 18:22:51 File: C:\Windows\system32\USER32.dll ok scanned
27/09/2008 18:22:51 Running module: csrss.exe\KERNEL32.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\KERNEL32.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\GDI32.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\GDI32.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\ADVAPI32.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\ADVAPI32.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\RPCRT4.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\RPCRT4.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\LPK.DLL ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\LPK.DLL ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\USP10.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\USP10.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\msvcrt.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\msvcrt.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\sxs.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\sxs.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\csrss.exe ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\ntdll.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\CSRSRV.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\basesrv.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\winsrv.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\USER32.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\KERNEL32.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\GDI32.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\ADVAPI32.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\RPCRT4.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\LPK.DLL ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\USP10.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\msvcrt.dll ok scanned
27/09/2008 18:22:52 Running module: csrss.exe\sxs.dll ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\wininit.exe ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\wininit.exe ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\ntdll.dll ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\kernel32.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\kernel32.dll ok iChecker
27/09/2008 18:22:52 Running module: wininit.exe\ADVAPI32.dll ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\RPCRT4.dll ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\USER32.dll ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\GDI32.dll ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\msvcrt.dll ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\USERENV.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\USERENV.dll ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\Secur32.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\Secur32.dll ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\IMM32.DLL ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\IMM32.DLL ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\MSCTF.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\MSCTF.dll ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\LPK.DLL ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\USP10.dll ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\WS2_32.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\WS2_32.dll ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\NSI.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\NSI.dll ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\mswsock.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\mswsock.dll ok scanned
27/09/2008 18:22:52 Running module: wininit.exe\wshtcpip.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\System32\wshtcpip.dll ok scanned
27/09/2008 18:22:52 Running module: winlogon.exe\winlogon.exe ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\winlogon.exe ok scanned
27/09/2008 18:22:52 Running module: winlogon.exe\ntdll.dll ok scanned
27/09/2008 18:22:52 Running module: winlogon.exe\kernel32.dll ok scanned
27/09/2008 18:22:52 Running module: winlogon.exe\ADVAPI32.dll ok scanned
27/09/2008 18:22:52 Running module: winlogon.exe\RPCRT4.dll ok scanned
27/09/2008 18:22:52 Running module: winlogon.exe\USER32.dll ok scanned
27/09/2008 18:22:52 Running module: winlogon.exe\GDI32.dll ok scanned
27/09/2008 18:22:52 Running module: winlogon.exe\msvcrt.dll ok scanned
27/09/2008 18:22:52 Running module: winlogon.exe\Secur32.dll ok scanned
27/09/2008 18:22:52 Running module: winlogon.exe\WINSTA.dll ok scanned
27/09/2008 18:22:52 File: C:\Windows\system32\WINSTA.dll ok scanned
27/09/2008 18:22:52 Running module: winlogon.exe\PSAPI.DLL ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\PSAPI.DLL ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\USERENV.dll ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\IMM32.DLL ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\MSCTF.dll ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\LPK.DLL ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\USP10.dll ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\NTMARTA.DLL ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\NTMARTA.DLL ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\WLDAP32.dll ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\WLDAP32.dll ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\WS2_32.dll ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\NSI.dll ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\SAMLIB.dll ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\SAMLIB.dll ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\ole32.dll ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\ole32.dll packed file PE_Patch
27/09/2008 18:22:53 File: C:\Windows\system32\ole32.dll//PE_Patch ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\ole32.dll ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\SHSVCS.dll ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\SHSVCS.dll ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\NETAPI32.dll ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\NETAPI32.dll ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\slc.dll ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\slc.dll ok scanned
27/09/2008 18:22:53 Running module: winlogon.exe\MPR.dll ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\MPR.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\services.exe ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\services.exe ok scanned
27/09/2008 18:22:53 Running module: services.exe\ntdll.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\kernel32.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\ADVAPI32.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\RPCRT4.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\USER32.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\GDI32.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\msvcrt.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\USERENV.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\Secur32.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\SCESRV.dll ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\SCESRV.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\AUTHZ.dll ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\AUTHZ.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\NETAPI32.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\PSAPI.DLL ok scanned
27/09/2008 18:22:53 Running module: services.exe\NCObjAPI.DLL ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\NCObjAPI.DLL ok scanned
27/09/2008 18:22:53 Running module: services.exe\IMM32.DLL ok scanned
27/09/2008 18:22:53 Running module: services.exe\MSCTF.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\LPK.DLL ok scanned
27/09/2008 18:22:53 Running module: services.exe\USP10.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\credssp.dll ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\credssp.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\CRYPT32.dll ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\CRYPT32.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\MSASN1.dll ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\MSASN1.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\schannel.dll ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\schannel.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\NTMARTA.DLL ok scanned
27/09/2008 18:22:53 Running module: services.exe\WLDAP32.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\WS2_32.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\NSI.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\SAMLIB.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\ole32.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\mswsock.dll ok scanned
27/09/2008 18:22:53 Running module: services.exe\wshtcpip.dll ok scanned
27/09/2008 18:22:53 Running module: lsass.exe\lsass.exe ok scanned
27/09/2008 18:22:53 File: C:\Windows\system32\lsass.exe ok scanned
27/09/2008 18:22:53 Running module: lsass.exe\ntdll.dll ok scanned
27/09/2008 18:22:53 Running module: lsass.exe\kernel32.dll ok scanned
27/09/2008 18:22:53 Running module: lsass.exe\ADVAPI32.dll ok scanned
27/09/2008 18:22:53 Running module: lsass.exe\RPCRT4.dll ok scanned
27/09/2008 18:22:53 Running module: lsass.exe\msvcrt.dll ok scanned
27/09/2008 18:22:53 Running module: lsass.exe\LSASRV.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\LSASRV.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\Secur32.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\USER32.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\GDI32.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\SAMSRV.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\SAMSRV.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\cryptdll.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\cryptdll.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\DNSAPI.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\DNSAPI.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\WS2_32.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\NSI.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\NETAPI32.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\PSAPI.DLL ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\SAMLIB.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\MSASN1.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\NTDSAPI.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\NTDSAPI.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\WLDAP32.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\FeClient.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\FeClient.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\MPR.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\USERENV.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\CRYPT32.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\slc.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\SYSNTFY.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\SYSNTFY.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\wevtapi.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\wevtapi.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\IPHLPAPI.DLL ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\IPHLPAPI.DLL ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\dhcpcsvc.DLL ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\dhcpcsvc.DLL ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\WINNSI.DLL ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\WINNSI.DLL ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\dhcpcsvc6.DLL ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\dhcpcsvc6.DLL ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\IMM32.DLL ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\MSCTF.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\LPK.DLL ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\USP10.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\cngaudit.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\cngaudit.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\AUTHZ.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\ncrypt.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\ncrypt.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\BCRYPT.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\BCRYPT.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\credssp.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\msprivs.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\msprivs.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\kerberos.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\kerberos.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\mswsock.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\wship6.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\System32\wship6.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\wshtcpip.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\msv1_0.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\msv1_0.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\netlogon.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\netlogon.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\WINBRAND.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\WINBRAND.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\schannel.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\wdigest.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\wdigest.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\rsaenh.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\rsaenh.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\tspkg.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\tspkg.dll ok scanned
27/09/2008 18:22:54 Running module: lsass.exe\GPAPI.dll ok scanned
27/09/2008 18:22:54 File: C:\Windows\system32\GPAPI.dll ok scanned
27/09/2008 18:22:55 Running module: lsass.exe\setupapi.dll ok scanned
27/09/2008 18:22:55 File: C:\Windows\system32\setupapi.dll ok scanned
27/09/2008 18:22:55 Running module: lsass.exe\OLEAUT32.dll ok scanned
27/09/2008 18:22:55 File: C:\Windows\system32\OLEAUT32.dll ok scanned
27/09/2008 18:22:55 Running module: lsass.exe\ole32.dll ok scanned
27/09/2008 18:22:55 Running module: lsass.exe\scecli.dll ok scanned
27/09/2008 18:22:55 File: C:\Windows\system32\scecli.dll ok scanned
27/09/2008 18:22:55 Running module: lsass.exe\keyiso.dll ok scanned
27/09/2008 18:22:55 File: C:\Windows\system32\keyiso.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\lsm.exe ok scanned
27/09/2008 18:22:55 File: C:\Windows\system32\lsm.exe ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\ntdll.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\kernel32.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\ADVAPI32.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\RPCRT4.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\msvcrt.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\SYSNTFY.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\WMsgAPI.dll ok scanned
27/09/2008 18:22:55 File: C:\Windows\system32\WMsgAPI.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\secur32.dll ok scanned
27/09/2008 18:22:55 File: C:\Windows\system32\secur32.dll ok iChecker
27/09/2008 18:22:55 Running module: lsm.exe\credssp.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\CRYPT32.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\USER32.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\GDI32.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\MSASN1.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\USERENV.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\IMM32.DLL ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\MSCTF.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\LPK.DLL ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\USP10.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\schannel.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\NETAPI32.dll ok scanned
27/09/2008 18:22:55 Running module: lsm.exe\PSAPI.DLL ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\svchost.exe ok scanned
27/09/2008 18:22:55 File: C:\Windows\system32\svchost.exe ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\ntdll.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\kernel32.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\msvcrt.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\ADVAPI32.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\RPCRT4.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\umpnpmgr.dll ok scanned
27/09/2008 18:22:55 File: c:\windows\system32\umpnpmgr.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\USER32.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\GDI32.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\USERENV.dll ok scanned
27/09/2008 18:22:55 File: c:\windows\system32\USERENV.dll ok iChecker
27/09/2008 18:22:55 Running module: svchost.exe\Secur32.dll ok scanned
27/09/2008 18:22:55 File: c:\windows\system32\Secur32.dll ok iChecker
27/09/2008 18:22:55 Running module: svchost.exe\IMM32.DLL ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\MSCTF.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\LPK.DLL ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\USP10.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\POWRPROF.dll ok scanned
27/09/2008 18:22:55 File: C:\Windows\system32\POWRPROF.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\GPAPI.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\slc.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\rpcss.dll ok scanned
27/09/2008 18:22:55 File: c:\windows\system32\rpcss.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\WS2_32.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\NSI.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\FirewallAPI.dll ok scanned
27/09/2008 18:22:55 File: c:\windows\system32\FirewallAPI.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\OLEAUT32.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\ole32.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\VERSION.dll ok scanned
27/09/2008 18:22:55 File: c:\windows\system32\VERSION.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\credssp.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\CRYPT32.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\MSASN1.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\schannel.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\NETAPI32.dll ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\PSAPI.DLL ok scanned
27/09/2008 18:22:55 Running module: svchost.exe\SETUPAPI.dll ok scanned
27/09/2008 18:22:55 File: C:\Windows\system32\SETUPAPI.dll ok iChecker
27/09/2008 18:22:55 Running module: svchost.exe\CLBCatQ.DLL ok scanned
27/09/2008 18:22:55 File: C:\Windows\system32\CLBCatQ.DLL ok scanned

y seguía pero se colgó grabando el informe. Lo que encontró fue lo del principio

Como se encuentra el paciente? sigue el problema de alto consumo?

Sigue igual.
Si bien no encuentro nada raro, al ejecutar el messenger, queda el LSass ocupando un 50% del procesador.
Tarda como 20 minutos hasta que conecta y luego de más de una hora recién libera al procesador.
Siempre lo libera de inmediato si cierro ese programa.
Ya lo borré, limpié y reinstalé y pasa lo mismo.
Muy raro.
Saludos

El proceso lsass.exe Es un proceso del mecanismo de seguridad del sistema operativo Windows. Especialmente se encarga del manejo de la seguridad local y las politicas de autenticacion de usuarios.
Este programa es importante para estabilidad y seguridad de su sistema y no deberia ser terminado. Verifique que el archivo que aparece en el proceso cargado sea el que esta en la ruta c:\windows\system32\ o c:\winnt\system32, ya que si no es el mismo, o aparece dos veces en la lista es muy posible que sea un gusano haciendose pasar por el original lsass.exe.

Troj/Windang.A

Por favor hace un escaneo online con Active Scan de Panda y pega el reporte que este te genere.