Isass.exe how to remove it?

Lassemic · Cadet Joined: Jan 19, 2004 Posts: 1 Location: USA

Is there anyone who can help me with removing a Isass.exe file?
Have tried to use Hijackthis software but couldnt find the Isass.exe file. I still see it in the processes window.

Can anyone help me?

Regards

Lasse

SilentSeven · Lieutenant Joined: Jan 13, 2004 Posts: 160 Location: USA

Hey Lassemic,

View this forum:
http://computercops.biz/modules.php?&na...1745#61745

We have not found the soulution, but we may somtime!

Thanks.

*smiles* Smile

discogail · Posted: Sun Jan 25, 2004 1:41 am Post subject:

There is Lsass.exe, which is a legitimate Windows file.. and Isass.exe.......which is not, in fact..it's added as a result of a trojan. [in lower case... lsass (good) vs. isass (bad)]
The entry in Hijackthis should look like this...
O4 - HKLM\..\Run: [Services] Isass.exe

and can be "fixed" & after reboot a "search"..(Start->Search...etc) can be done...to locate Isass.exe (Not Lsass)...& if found..delete

NigeyB · Cadet Joined: May 04, 2004 Posts: 1 Location: Spain

when I search my Hijack this I do not have the mentioned file 04-HKLM ETC. ETC. but I am still getting the shutdown command. Is there anything else that I can do to try and remove this file?

JimJones · Cadet Joined: May 07, 2004 Posts: 1 Location: USA

Isass.exe appeared on my screen in a window making claims that authority had been granted to shut down the system in 60 seconds...and nothing could stop it. Not task manager, not anything. And the system shut down! Every single time I turned on the system.

ALL above posted suggestions were useless. BUT...I noticed it appeared only when connected to a network... so I loaded a freeware firewall I found on www.StillListener.com called Sygate Personal Firewall and this eliminated the Isass.exe problem.

FunBard · 1st Responder Joined: Apr 03, 2004 Posts: 74 Location: USA

Jim,

Microsoft has addressed this issue on this page:

http://www.microsoft.com/security/incident/sasser.asp

It describes what you were experiencing and how to permanently solve it.
Blocking it with a firewall is a good first step, but not all you have left to do.

FunBard

bornhigh · Cadet Joined: May 09, 2004 Posts: 1 Location: USA

fix the problem with the sass.worm ex: isass.exe/lsass.exe go to www.bornhigh.com then go to archives the solution for your problem is there! -legacy bornhigh.com2004 Laughing

[/url]

delinquent · Cadet Joined: May 09, 2004 Posts: 1 Location: USA

i had the same proble.
ho to www.grisoft.com and download avg, that will solve ur problem

scott2crash · Cadet Joined: Jun 07, 2004 Posts: 1 Location: UK

This doesn't solve the problem but it prevents a restart:

When the dialog box appears with
NT AUTHORITY/SYSTEM
will shut down in 60 seconds... etc

Quickly open a Command Prompt window and type:
shutdown -a

BUBU · Cadet Joined: Jun 18, 2004 Posts: 3 Location: Malaysia

is isas.exe a variant of isass.exe? cuz i have it running on my system and i searched it on google, a buch of german site came up but the word "virus" is there......should i get rid of it?


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 1046 pages served in previous 5 minutes. Page Rendered: 0.579 seconds.