Running under 64-bit systems HijackThis reports essential system services as "file missing". Example:
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
This is because HijackThis is a 32-bit image and undergoes transparent redirection under WOW64. %SystemRoot%\system32 is redirected to %SystemRoot%\SysWOW64 which does not contain certain files. Access to the native system directory can be obtained by 32-bit applications by accessing %SystemRoot%\sysnative.
Log in to post a comment.