isass.exe

[117]

I got an alert from Norton telling me a remote system was trying to access isass.exe on my pc. Norton classified this as low-risk, and advised that i Permit the access. Before i decided, i had a quick google, and discovered many pages saying that isass.exe was part of a trojan, but that for some reason Symantec don't include it in their databases! Most of the sites recommended running Adaware or Spybot, which i'm currently doing, so let's see what happens.....

[arfur]

My dad had that on his pc but cant remember the outcome, sorry.

[fac51]

i know this one isass.exe is a trojan but lsass.exe isnt and is a vital proggy!! i guess your's was in fact lsass

the difference being L or I which the trojan writer has made his trojan to look the same so people delete the proper one or get confused if you see what i mean - the vital proggy begins with an L (but in lower case) the trojan with an i so you need to check that but if norton isn't picking it up as a virus i would say you are good to go and let it access the net

[117]

ed, it was definitelt isass.exe, i checked it carefully and i'd already read the sites telling me not to confuse it with lsass.exe , they also told me that Symantec don't recognise isass.exe as a virus, so Norton therefore won't recognise it mate

[fac51]

are you really sure becuase i had the exact same problem with norton thus me knwoing about it. open your running processes with ctrl alt delete then hit the letter i and see if it jumps to that in the list if it only jumps to it with l then your ok. they look identical in the task manager and the i looks like a l.

if not then i dont know you need to get rid of it somehow and fast