Which Singapore mirror did you download from? Strangely, someone else reported in a thread a couple below this one about lass.exe appearing, also using a Singapore mirror. I've never heard of this before, and it certainly isn't on my system, and I downloaded 6.14 from the UK location.

Make sure you definitely get mIRC 6.14 from http://www.mirc.com/get.html ONLY. Even if the page LOOKS like that page, make sure you ONLY get it from that URL to be safe.

What directory is lass.exe placed in? Scan your whole system for a virus and see if any problems come up. Use this thread for some resources and make sure you use more than one.

Do you know when lass.exe appeared?

- when the installer was downloaded?
- when the installer was run and mIRC was installed?
- After mIRC was installed AND mIRC was opened?
- After mIRC had been installed, run AND closed?

Do you have any scripts running that may do this? I downloaded from mirc.vodien.com and installed, ran and closed mIRC, using $findfile with C:\ I found no lass.exe file at any stage of the installation.

Providing as much info as possible would be useful smile

Edit: It seems lass.exe is part of a trojan. There are also, apparently, 'legal' uses for that file name, including Local Security Authority Service. A search with Google turned up mainly trojan warnings however.
I highly doubt the mIRC mirror is distributing this. You have likely got infected some other way, read the thread I linked to earlier and read the possibilities, along with tips on how to stay safe in the future.

Regards,

Last edited by Mentality; 20/05/04 03:22 PM.