Results 1 to 6 of 6

Thread: Isass.exe

  1. #1
    tinkletoy Guest

    Default Isass.exe

    On several occasions Zone Alarm firewall has given me the elert about Isass.exe wanting to act as a server and access the Internet.
    I have denied permission because I did not know what it was.

    Then I found out by clicking on more information and it said it was OK to allow it.
    When I did a search for the file, nothing came up.
    If it was a system file it should have shouldn't it.
    When I did a search on the intenet I found out that it could be malware.
    In my task manager it shows it running under proccesses and that it is a system file.
    I am really confused and am being very cautious.
    Nothing seems to be compromised and none of the many virus, trojan and malware scans that I have done have come up with anything.
    If I have denied access to it, why does it show it running in the task manager under proccesses?
    Please advise.
    Thank you.

    Operating System:Windows XP Home Edition
    Product Name:ZoneAlarm (Free)
    Software Version:6.5

  2. #2
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: Isass.exe

    Hi

    Is that Isass.exe or Lsass.exe?

    Lsass.exe is a legit Windows component, if it is in the C\WINDOWS\System32 folder. Just look for it and right click it and examine the properties. The time and date should coincide with the Windows Install. Plus the version and owner can be found verifing if it is from Microsoft.

    Yes there are worms and various malware posing as lsass.exe
    These should be held in check if you have all of Microsoft the updates. And scan with an updated antivirus.

    Dening access in the ZA Program Control will not stop it from runninng. That requires the "Kill" in the right click Options in the ZA itself. So yes, it will still appear in the Task Manager.

    It does not require Internet access or any server rights of any kind. Just Trusted Access and a three green bar rating. Ask for internet access is acceptable.

    http://www.liutilities.com/products/...library/lsass/

    http://www.neuber.com/taskmanager/pr...lsass.exe.html

    http://ask-leo.com/can_i_delete_lsas...vchostexe.html


    http://ask-leo.com/what_are_lsass_ls...o_if_i_am.html


    http://www.processlibrary.com/directory/files/lsass/

    http://www.auditmypc.com/process/lsass.asp


    http://www.hardavenue.com/a/lsass.exe.php



    BAD LSASS.EXE....


    http://www.trendmicro.com/vinfo/viru...=WORM_SASSER.A

    http://www.pchell.com/virus/sasser.shtml


    http://www.bleepingcomputer.com/star....exe-9885.html

    Hope this helps...

    Oldsod

    Message Edited by Oldsod on 10-10-2006 08:14 PM
    Best regards.
    oldsod

  3. #3
    tinkletoy Guest

    Default Re: Isass.exe

    Thanks for the information.
    I do have SP2 and the only place I found Lsass was in prefetch.
    I guess I am OK.

  4. #4
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: Isass.exe

    Hi

    After all that? Did you actually check C\WINDOWS\system32 for the lsass.exe?

    Oldsod
    Best regards.
    oldsod

  5. #5
    tinkletoy Guest

    Default Re: Isass.exe

    Yes. it is there with the correct date.

  6. #6
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: Isass.exe

    Great! That the real deal, so all is okay

    Oldsod
    Best regards.
    oldsod

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •