Found this in the file xpsupport.dll from the Alice trainer from sicheats
From what I understand, by backtracing etc, is if the trainer fails authentication, it checks for a process named llsass and if it doesn't exist it creates a file llsass.exe and executes it. And I was a bit bemused as when I search for this file name on google, it came across as a non legit lsass.exe file which is the Windows logon control file, but the counterpart listed in the xpsupport.dll (llsass.exe) is a well known virus/trojan alias. I am not sure if this is what it is, as I am now wary of running any of these trainers now, perhaps Joe_Forster can check?
26-06-2011, 15:54
Similar Threads
Hybrid Mode
