Buffer overflow blocked mcafee

[millie]

I keep receiving this alert from Mcafee stating Buffer Overflow Blocked

It refers to Appdata\roaming\lsass.exe

Is my computer infected

I have run full scan which did not show anything

Can anyone help

Many Thanks

Andy

[Blaze]

Have you done a full scan with both McAfee and Malwarebytes yet ?

Buffer overflows occur when suspect programs or processes try to store more data in a buffer (temporary data storage area) on your computer than its limit, corrupting or overwriting valid data in adjacent buffers.

Most probably this is legit, since lsass.exe is a genuine part of Windows

.

"lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC or server. Lsass generates the process responsible for authenticating users for the Winlogon service. This is performed by using authentication packages such as the default, Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates then inherit this token.

If you want to be sure 100%, you can always post a HiJack This log: http://forums.malwarebytes.org/index.php?showforum=7

Hope this helps .

[millie]

Have you done a full scan with both McAfee and Malwarebytes yet ?

Most probably this is legit, since lsass.exe is a genuine part of Windows

.

If you want to be sure 100%, you can always post a HiJack This log: http://forums.malwarebytes.org/index.php?showforum=7

Hope this helps .

Here is Hijack This log

Hope this is OK

Also CPU usage seems to run at near 100%

Thank you for your help

Much appreciated

hijackthis1.txt

[marktreg]

Hello millie, and welcome to Malwarebytes.org

Malware diagnosis requires much more than just a HJT log nowadays.

As we don't work on Malware removal in the general forums, please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someon has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

[Firefox]

Just curious, I noticed that you are running McAfee.... Are you runing full version of MBAM or Free version. If its the full version have you entered the exceptions for the MBAM files?

[DougAAAAA]

Just curious, I noticed that you are running McAfee.... Are you runing full version of MBAM or Free version. If its the full version have you entered the exceptions for the MBAM files?

I am running McAfee and also the full version of MBAM, and this is the first time I have seen "exceptions for MBAM". Can you fill me in, or redirect me? Thanks.

MBAM fixed a hell of a lot of problems.

[Firefox]

Please exclude the following files from your antivirus:

Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude them from it as well

For Windows XP:

• C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  
• C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• C:\Windows\System32\drivers\mbam.sys
  
• C:\Windows\System32\drivers\mbamswissarmy.sys
  

For 32 bit versions Windows Vista or Windows 7:

• C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  
• C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• C:\Windows\System32\drivers\mbam.sys
  
• C:\Windows\System32\drivers\mbamswissarmy.sys
  

For 64 bit versions of Windows Vista or Windows 7:

• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
  
• C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• C:\Windows\System32\drivers\mbam.sys
  
• C:\Windows\SysWoW64\drivers\mbamswissarmy.sys
  

Please post back and let us know how it went.