Since the font used by task mgr makes Lowercase l and uppercase I the same, you can't quite tell them apart. Task Manager cannot end this process." any suggestions? Helping people with computers... Isass.exe is an unknown file in the Windows folder. navigate here
Do you have another machine you can use to get the latest virus signatures down? What do I do if I am? • The Sasser worm is the most recent and one of the most virulent viruses to impact Windows-based systems. My preference is to have it download and notify me of changes that are ready to install. Pastor Don It just shut down my system after showing me acountdown for i min.
Any error messages? Found "W32.Spybot.Worm" and some other Adwares in my PC. And you cant say Isass is suceptable to viruses because every file no just system files are prone to virus attacks, so get over it. DataFighter The Windows File itself isn't dangerous, what everyone here is describing is a virus that fakes the windows filename - so lets not get paranoid about every lsass.exe we see...
Michael It causes shutdown, spreads in the network and generates a huge traffic. See also: Link Tommo it is actually a system file used by the Windows System being exploited by Sasser , a variant of Plexus, that restarts the PC every few minutes. Cannot F8 into any startup mode without getting this error - safe mode, command prompt, ect. Lsass.exe High Cpu Important: Some malware also uses the file name Isass.exe, for example Trojan.Win32.Hider.gh or Trojan.Win32.VkHost.doy (detected by Kaspersky), and Trojan:Win32/Hider.gen or Virus:Win32/Ceg.A (detected by Microsoft).
I thought it was MSBLAST but the Symantec remover tool didn't find anything. Lsass Virus It is a required system file. Ramesh N its a critical windows file but some time infucted with trojan. Preacher It makes the computer not able to get to Win (normal & safe mode).
Have noted that immediatly before shutdown packets are received from the net. Isass 2016 rahul soni Not much, but when the 60 sec thing comes up, go to run and enter shutdown -a. Samantha It's a system file The process name resembles lsass.exe, meaning that it may be a malware program trying to hide itself. All rights reserved.
I already have discs for reformatting. For the record, in Windows capitalization does NOT count - lsass.exe and LSASS.EXE are the same. Isass Process LordScav PC shuts down the system with code 1073741819 link for more info Mark It is required for Win2000 & XP to work. Lsass Process Outlook then times out.
Its harmless Si UK it disable MSN messenger & make system busy black is a spyware Rick Interesting it seems to be infecting dvrs and is pair with a mpr file check over here I personally don't like automatic updates--I would go to Windows Updates (look in your START menu) and stay there until all of them are downloaded and installed. Just check the location of the file. Clinton Heintzelman June 24, 2004 2:01 PM When my PC boots it tells me that LSASS has changed since the last time I used it. Lsass.exe Windows Xp
Martyn Just use Windows Explorer to check the date of the file against other files in c:\windows\System32. Frank June 4, 2004 6:46 AM Hi Leo, I got the LSASS.exe infected on my computer (running window 2000). Since this now looks pretty much like a virus issue, moving the thread to Security. ---------------- Tony September 5, 2004 5:37 AM Just wondering what the lasting effects of Sasser are. his comment is here shane just purchased new computer with Win XP.What is written here explains my problem.
Leo May 26, 2004 8:22 AM Sophos is certainly a fine package, though I don't know if it's the only one that can deal with this specific virus. Issas It was recommended by NIS to allow, so I did, not knowing this was possibly related to the virus. it keeps on "terminating unexpectedly", so the whole computer has a system shutdown in one mintute Githoniel There was a virus in my pc with the same name.
ph Symantec did not see anything weird. If you make another post, there will be 1 reply. And to answer your question ... I am using Win 2003 server, someone suggested me to go into COMMAND mode Use command "SHUTDOWN -i " and set the time = "99999" but I found out the "OK"
Install the patch. If not, probably a worm or worse: Sasser! This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc/scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' weblink Use View/Details to place files in an alphabetical order and ONLY remove the isass (Because of default fonts you must list the files alphabetically.
Sorry, I failed to mention that. All three in windows one in the service packet folder one in the system32 folder and one on some computers is in a folder called SoftwareDistribution. Domenico May 28, 2004 9:14 AM Hi Leo, Im still battleing away although i have a feeling i am aproaching the light. At some point a system file called svchost.exe starts to sap my cpu usually taking as much of the processing power as it can and my other programs run like molassas.
I'd be very tempted to go to their support site on the web and see if they have anything on this. http://ask-leo.com/archives/000114.html Eoghan May 18, 2004 9:34 AM I have done what the update has said to do but when i open the host file there is no list of sites. What antivirus software do you suggest i dl, and does this just sound like a sasser variant, or more than 1 virus?