1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

"Lxasreg.exe needs to close"

Discussion in 'Web & Email' started by Peachykeen, Jan 29, 2002.

Thread Status:
Not open for further replies.
Advertisement
  1. Peachykeen

    Peachykeen Thread Starter

    Joined:
    May 19, 2001
    Messages:
    300
    I suspected my neighbor's computer of trying to send the w32/Badtrans virus to my computer, so I ran Norton Antivirus on her computer. After that, (I may need more details from her) I think she tried to log on via MS Outlook Exp & got an error msg like "error signature digital....." or something like that. She doesn't seem to have any way to connect to the 'net now. I apologize for being so vague - please let me know what else to ask her.
    This is a new computer with Win XP.
    Thanks!
     
  2. $teve

    $teve

    Joined:
    Oct 9, 2001
    Messages:
    9,396
    peachy..did you do the removal in safe mode?
     
  3. Peachykeen

    Peachykeen Thread Starter

    Joined:
    May 19, 2001
    Messages:
    300
    Steve, thanks for your reply. Norton didn't detect a virus on the computer, so I didn't take any action.
     
  4. eddie5659

    eddie5659 Moderator Malware Specialist

    Joined:
    Mar 19, 2001
    Messages:
    36,091
    Hiya

    Is it possible to find out if this was all or part of the error: error signature digital?
    Also, when did Lxasreg.exe needs to close appear?

    Does she have any versions of wsock32.dll on her system? Is it just getting on the web as a whole or only OE?

    Regards

    eddie
     
  5. Peachykeen

    Peachykeen Thread Starter

    Joined:
    May 19, 2001
    Messages:
    300
    Eddie,
    It seems that the computer isn't giving error msgs anymore, but after a little research, I think she has some version of the w32/badtrans virus.

    An e-mail she supposedly sent me had the attachment "pics.doc.scr" (which I didn't open), and other people in her address book got the same.

    Her return address had an underline before her address, but the rest was the same as her address if that gives any clues.

    Anyway, all this to say, thanks for your reply, and any suggestions on deleting this virus which Norton and McAfee didn't protect her from will be appreciated.

    Tricia
     
  6. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
    That certainly does sound like Badtrans.

    Some people think that if you install an antivirus you're done.

    You should really check for updates every couple of days, or install an antivirus that does so itself.

    Here's how to remove Badtrans:

    WINDOWS 95/98/ME

    Restart Windows in Safe Mode (reboot your computer, as soon as you see the text Starting Windows at the bottom of the screen, hit the F5 key).

    Find the following files, if present, and delete them:
    In your Windows folder: INETD.EXE

    In your Windows\System folder:
    KERN32.EXE
    KERNEL32.EXE
    KDLL.DLL
    HKSDLL.DLL

    Now go to Start/Run, and type Regedit.
    Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
    Click 'RunOnce' once, in order to highlight it.
    Now find the value 'Kernel32=kernel32.exe' in the right pane, highlight, and hit 'delete'.


    And here's a Badtrans cleaner: http://www.wilders.org/HTMLobj-1009/AntiBadB.exe


    Good luck,
     
  7. eddie5659

    eddie5659 Moderator Malware Specialist

    Joined:
    Mar 19, 2001
    Messages:
    36,091
  8. eddie5659

    eddie5659 Moderator Malware Specialist

    Joined:
    Mar 19, 2001
    Messages:
    36,091
    touche' :D
     
  9. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Similar Threads - Lxasreg needs close
  1. edinburgh70
    Replies:
    1
    Views:
    467
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/66993

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice