lsas32.exe is the name of the apparent virus and it resides in C:\Windows (in XP, anyway).