Lsas.Blaster.Keyloger is part of the rogue program System Security which display it as a threat detected. It will then prompt users to download and install the said application. A pop-up window with message appears.

Internet Explorer is infected with worm Lsas.Blaster.Keyloger. This worm is trying to send your credit card details using Internet Explorer to connect to remote host.

Update: October 14, 2009
New harmful rogue program Security Tool is also using this Lsas.Blaster.Keyloger as a threat to scare computer users and prompts them that only a registered program can remove it from a computer.

Aliases:
-

Risk Level: Low

File Size: Varies

Affected System: Windows

Common Symptoms:
1. A dialog box with warning “System Security” Firewall has blocked a program from accessing the Internet.

Use MBAM as Lsas.Blaster.Keyloger Removal Tool

1. Download Malwarebytes’ Anti-Malware(mbam-setup.exe) and save it on your Desktop.
2. After downloading, double-click on mbam-setup.exe to install the application.
3. Follow the prompts and install as “default” only
4. Before the installation completes, check on the following prompts:
- Update Malwarebytes’ Anti-Malware
- Launch Malwarebytes’ Anti-Malware
5. Click “Finish.” Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
6. Scan your computer thoroughly.
7. When scanning is finished click on the “Show Results”
8. Make sure that all detected threats are marked, click on Remove Selected.
9. Restart your computer.

Note: Lsas.Blaster.Keyloger may prevent mbam-setup.exe from downloading and running. You can download and rename this program from a different computer before running it on infected system.