Re: isass.exe

From: Malke (malke_at_nospoonnotreally.com)
Date: 08/17/04


Date: Tue, 17 Aug 2004 06:32:02 -0700

Larry wrote:

> I have the isass.exe and I need help. Norton doesnt
> acknowledge it and I have no way of dealing with it. Can
> anyone advise me?

It's Lsass, and you haven't given us enough information to get a good
answer. What is the exact error message? On the guess that you have a
Blaster or Sasser problem, here is some cleanup information:

Sasser or Blaster:
To stop the rebooting, go to Start>Run and type "shutdown -a" without
the quotes. For information about the worm, go here:

http://www.sarc.com/avcenter/venc/data/w32.sasser.worm.html

Get the worm off your system and then immediately patch XP:

http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx -
TechNet bulletin with download links
http://windowsupdate.microsoft.com

Install an antivirus program and keep it updated. Install a firewall. XP
has a built-in firewall, or there are free alternatives like Zone Alarm
or Sygate. Be aware that cleanup may be complex - we are now seeing
that infected computers usually have more than one variant of Sasser,
as well as one or more instance of a polybot worm from the
Gaobot/Agobot family.

What version of Norton? Are your definitions updated? Go here to get
help in making a good post:

http://www.dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

Then do come back and repost with all necessary details. There are lots
of people reading this newsgroup who want to help you (like me), but
you have to give us something with which to work.

Malke

-- 
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"


Relevant Pages

  • Re: Do I need to be on the internet to fix Sasser??
    ... It's important to install the patch first and then run the clean up tool. ... NEW WORM: SASSER ... Microsoft has learned about a worm identified as "W32.Sasser.worm" that is ... Anti-Virus software vendor for support on the Sasser or AgoBot viruses. ...
    (microsoft.public.security.virus)
  • Re: AVSERVE.EXE
    ... >> When I start my computer, the CPU goes wild. ... Sounds like you've gotten caught by the Sasser worm. ... Install an antivirus program and keep it updated. ... has a built-in firewall, or there are free alternatives like Zone Alarm ...
    (microsoft.public.windowsxp.general)
  • RE: error message and system shut down
    ... Your friend has the Sasser worm. ... Install an antivirus program and keep it updated. ... has a built-in firewall, or there are free alternatives like Zone Alarm ...
    (microsoft.public.windowsxp.general)
  • Re: Premature Shutdown
    ... worm and to install antivirus software on the PC. ... When accessing Windows Update site to ... >You have the highly-publicized Sasser worm, ...
    (microsoft.public.windowsxp.general)
  • Re: Premature Shutdown
    ... > worm and to install antivirus software on the PC. ... Make sure you install a firewall too. ... >>You have the highly-publicized Sasser worm, ... >>Ken Blake - Microsoft MVP Windows: ...
    (microsoft.public.windowsxp.general)