Guru4u Forums

I got an alert from Norton telling me a remote system was trying to access isass.exe on my pc. Norton classified this as low-risk, and advised that i Permit the access. Before i decided, i had a quick google, and discovered many pages saying that isass.exe was part of a trojan, but that for some reason Symantec don't include it in their databases! Most of the sites recommended running Adaware or Spybot, which i'm currently doing, so let's see what happens.....

My dad had that on his pc but cant remember the outcome, sorry.

i know this one isass.exe is a trojan but lsass.exe isnt and is a vital proggy!! i guess your's was in fact lsass

the difference being L or I which the trojan writer has made his trojan to look the same so people delete the proper one or get confused if you see what i mean - the vital proggy begins with an L (but in lower case) the trojan with an i so you need to check that but if norton isn't picking it up as a virus i would say you are good to go and let it access the net

ed, it was definitelt isass.exe, i checked it carefully and i'd already read the sites telling me not to confuse it with lsass.exe , they also told me that Symantec don't recognise isass.exe as a virus, so Norton therefore won't recognise it mate

are you really sure becuase i had the exact same problem with norton thus me knwoing about it. open your running processes with ctrl alt delete then hit the letter i and see if it jumps to that in the list if it only jumps to it with l then your ok. they look identical in the task manager and the i looks like a l.

if not then i dont know you need to get rid of it somehow and fast