http://www2.diymov.com/02.html

• eagle

  20 Oct 07, 17:42

  My browser sometimes direct me to this website
  
  http://www2.diymov.com/02.html
  
  I suspected a spyware/adware. However, both ad-aware and spybot shows nothing. Suspicious, I went to look at the startups using EasyCleaner. I found the following suspicious entry that does now seem to be there before:
  C:\WINDOWS\temp\lsass.exe
  
  What I did:
  I used msconfig to uncheck this so that it does not run at startup.
  
  Problem is gone.
  
  My question, is this entry safe to be deleted? And the file safe to be deleted?
  Thanks
• ndmmxiaomayi

  20 Oct 07, 22:27

  Yes, delete that file.
  
  And you got a Chinese virus.
• eagle

  20 Oct 07, 22:30

  Originally posted by ndmmxiaomayi:

  Yes, delete that file.
  
  And you got a Chinese virus.

  thanks.
  
  i will remove that registry entry too