Hacktool.LsassSba not detected

[mbelli]

A file that was sent to a friend's PC, was detected as having the Hacktool.LsassSba virus in it. I put this file through a scan of Avast and it never detected it. Now I'm really concerned and thinking of picking up Norton Anti Virus (that's the software my friend has).

Anyhow, has anyone else heard of this virus and can give a reason why Avast can't detect it. Wondering how good Avast is now. I scanned the file again a moment ago with Avast, nothing -- it says it's all fine.

I'm running Avast 4.6 home with the latest virus and program updates.


MB

[Eddy]

Hacktool.LsassSba is not a virus. It is (as the name indicates) a hacking tool.
As has been explained 'hundreds' of times here:

1] each av detects things another doesn't.
2] having a av is not enough nowadays to protect your system.
3] security starts with the user, not the hardware or software.
4] in order to add a malware to the vps, Alwil must have the full code of it.

I believe if you click on the link in my signature and read the malware removal section as well as the HJT section, things will become more clear to you.

[mbelli]

Thanks for the quick reply, I'm new here but I did do a search for  Hacktool.LsassSba in the forums and couldn't find anything. Sorry!

I'll be sure to check your link and if someone can direct me to other posts here regarding this tool, I'd appreciate it.

[Eddy]

I did do a search for  Hacktool.LsassSba

Different av vendors are giving different names to malware. Have a look at VGrep

if someone can direct me to other posts here regarding this tool

Not needed (see above).
More (most?) important thing is that you learn what malware is and how to prevent it and if needed how to remove it.

Thanks for the quick reply,

Get used to it. That is how we are here. It is one of the things that makes this board greater than others

[mbelli]

Again, many thanks Eddy, the info you've given me is great.

I'm just wondering in your opinion, what the best software would be to detect hacking tools? I already have Adware and Spybot and ran those, but they didn't detect it.



MB

[Eddy]

Again, many thanks Eddy, the info you've given me is great.

Just doing my best, that's all.


In my opinion (and according to my 24 year experience with comps), I would say:

Avast
Ad-Aware SE
Spybot s&d
Hijackthis

Especially the last one can be of great help, but you must know how to look (and what to do with it) at the things it is showing.

Most importantantly imho is knowledge.