Ok I have a friend that has the Sasser worm. Whenever he gets online sooner or later the error comes up trying to execute Lsass.exe. Now I ran the Fix for the Sasser.worm that I got from Symantec but it said it did not detect the Sasser Worm on the computer. Is there something that I might be doing wrong.
Pretty much. The command I mentioned is tasklist /svc type that in at a command prompt and you will see all running processes, but it'll expand the svchost.exe and show you what's running inside. Mostly essential windows services.