Ask Me Help Desk

Ask Me Help Desk (https://www.askmehelpdesk.com/forum.php)
-   Spyware, Viruses, etc. (https://www.askmehelpdesk.com/forumdisplay.php?f=477)
-   -   Is "windowssystem32lsass.exe" a virus or not? (https://www.askmehelpdesk.com/showthread.php?t=113617)

  • Jul 26, 2007, 05:12 AM
    ashley_jade
    Good day.:)
    After I log-on to my user account this message pop-up "C:\windows\system32\lsass.exe cannot be located. Please specify a specific location at the Search button".
    After I click the Ok button, the toolbar "Run" was deleted. However, if I log-in in a different user, the "Run" toolbar is present but I can't run the "msconfig"? What shall I do?

    Good day.:)
    After I log-on to my user account this message pop-up "C:\windows\system32\lsass.exe cannot be located. Please specify a specific location at the Search button".
    After I click the Ok button, the toolbar "Run" was deleted. However, if I log-in in a different user, the "Run" toolbar is present but I can't run the "msconfig"? What shall I do? I scan my computer using a updated Symantec Anti Virus but there is no virus found.
  • Jul 26, 2007, 05:44 AM
    jocafer13
    I got this from "http://www.liutilities.com/products/wintaskspro/processlibrary/isass/"

    Windows errors related to isass.exe ?
    Isass.exe is registered as the Optix.Pro virus which carries in it's payload, the ability to disable firewalls and local security protections, and a backdoor capability. Check that isass.exe is stable on your computer.

    Recommendation for isass.exe:
    DISABLE AND REMOVE isass.exe IMMEDIATELY. This process is most likely a virus or trojan. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet settings.

    VERY IMPORTANT!
    Determining whether isass.exe is a virus or a legitimate Windows process depends on the directory location it executes or runs from.

    I have a suggestion on how to disable this virus:
    1.)First, configure the folder options to view the hidden files to also see if the virus has a backup file.
    2.)If you see a backup, uncheck 'hidden' in the Properties it if it is hidden so you can rename it(including the original virus file) and then restart your computer. It should be disabled by then.
    3.)Now you can delete the virus normally.
  • Jul 26, 2007, 05:56 AM
    NeedKarma
    She asked about "lsass.exe" not "isass.exe"

    Lsass is a valid Windows service: lsass.exe Windows process - What is it?
  • Jul 26, 2007, 06:14 AM
    jocafer13
    I tried to search for Isass.exe but it shows the smaller isass.exe
  • Jan 19, 2008, 08:39 AM
    naag
    Lsass.exe contains a Lower Case "L", not an upper case "i"

    The one with the Lower Case "L" is a valid system process.

    The one with any case "i" is a VIRUS




    Quote:

    Originally Posted by jocafer13
    I got this from "http://www.liutilities.com/products/wintaskspro/processlibrary/isass/"

    Windows errors related to isass.exe ?
    isass.exe is registered as the Optix.Pro virus which carries in it's payload, the ability to disable firewalls and local security protections, and a backdoor capability. Check that isass.exe is stable on your computer.

    Recommendation for isass.exe:
    DISABLE AND REMOVE isass.exe IMMEDIATELY. This process is most likely a virus or trojan. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet settings.

    VERY IMPORTANT!
    Determining whether isass.exe is a virus or a legitimate Windows process depends on the directory location it executes or runs from.

    I have a suggestion on how to disable this virus:
    1.)First, configure the folder options to view the hidden files to also see if the virus has a backup file.
    2.)If you see a backup, uncheck 'hidden' in the Properties it if it is hidden so you can rename it(including the original virus file) and then restart your computer. It should be disabled by then.
    3.)Now you can delete the virus normally.


  • All times are GMT -7. The time now is 10:27 PM.