Isass.exe????

[VAL. H.]

Hi hoping somone can point me in the right direction.

My puter runs on: Windows XP home. My ISP is AOL 9.0, Broard band. My anti virous is Mcaffee.

This is basicly what happened: Mcaffee was due to be updated. But I couldn't download it from their site ofr some reason so I requested it through the post.

When it arrived I inserted the disc and noticed a new icon that I did not recognise 'a green mask type image' as king my to click on it to down load the latest anti virous program. I didn't recognise it as Mcaffee so I ignored it and inserted the new disc. The new mcaffee recogrised it as a potential threat recommending removal. I did this and again and again in total about five times. everything worked well as expected.

The next time I started the PC it got a third of the way through the start up and then gave me a black screen with a small box containing 'Isass.exe sytem error'

Any ideas where to go from here?

Cheers Val.

 

[Fanum]

Val....go to start>search and type in isass.exe.....it should find only one copy and that should be located in C:\Windows\System32.
If there's more than one copy, or it's elsewhere, you have a virus or a trojan..it's quite common, as issas.exe is to do with your logon account.

 

[Fanum]

More.....

There's a strong possibility that this is a virus, unfortunately. The LSASS process manages user logins, and as such is a common target for infections on PCs running various versions of Windows.

Here's a description of this virus from Trend Micro:

"This worm exploits the Windows LSASS vulnerability, which is a buffer overrun that allows remote code execution and enables an attacker to gain full control of the affected system. To propagate, it scans the network for vulnerable systems. When it finds a vulnerable system, this malware sends a specially crafted packet to produce a buffer overflow on LSASS.EXE. This worm can cause LSASS to crash and force Windows to restart."

Microsoft indicates in a security bulletin entitled Windows XP Users: What to do if your computer has been infected by Sasser that you should:

1. Disconnect from the Internet
2. Stop the shutdown cycle
3. Mitigate the vulnerability
4. Improve system performance
5. Enable a firewall
6. Reconnect to the Internet
7. Install the required OS update
8. Check for and remove Sasser

The exact steps are outlined on Microsoft's site, and they also link to a malware remover too, the Microsoft Windows Malicious Software Removal Tool.

 

[Fanum]

PS Have you tried f8 at startup and selecting 'last known good configuration' ?

Or if you can get into safe mode, try a system restore to your last backup point.

You have set a system restore point, haven't you?????

 

[judge]

AO(Hel)L and McAffecupforafee - you're not doing yourself any favours with that cocktail still I'm sure the ginga will sort you out

 

[VAL. H.]

AO(Hel)L and McAffecupforafee - you're not doing yourself any favours with that cocktail still I'm sure the ginga will sort you out

Ok, once I get the thing sorted whats the best IP and anti virous I should use?

 

[VAL. H.]

PS Have you tried f8 at startup and selecting 'last known good configuration' ?

Or if you can get into safe mode, try a system restore to your last backup point.

You have set a system restore point, haven't you?????

Thanks Bill, I'll try those things.

Not sure about a system restor point, but I expect so. A mate of mine set up the hard drive so it probably has.

 

[TJ]

Ok, once I get the thing sorted whats the best IP and anti virous I should use?

Hi V

If your not in a contract then take a look at BT or possibly Virgin. I have BT @ home (Work) but set the folks up on Virgin, touch wood no problems.

As many will say on here there is loads of good FREE software out there which does just as good if not better.
Here are just a few.
For your Firwall - www.zonealarm.com
Anti Virus - (AVG) www.grisoft.com
Anti Spyware - www.spybot.com

These are what I use and have had no problems. There are a few others as well. I'm no IT techi but if you need a hand give me a shout.

T

 

[VAL. H.]

Well I tried some of the things mentiond.

Pressing F8 on start up, and following the guide from there.

Each time I select a task the PC then tries to start up, but half way through it just stops and displays the message:
'lsass.exe system error. Object name not found'

Any ideas where I go from here?

 

[TJ]

Well I tried some of the things mentiond.

Pressing F8 on start up, and following the guide from there.

Each time I select a task the PC then tries to start up, but half way through it just stops and displays the message:
'lsass.exe system error. Object name not found'

Any ideas where I go from here?

Hi V

Have a read of this http://www.hardwareanalysis.com/content/topic/28079/ may be of some help.

T

 

[VAL. H.]

Hi V

Have a read of this http://www.hardwareanalysis.com/content/topic/28079/ may be of some help.

T

Hi Trev, Thanks I'll take a closer look at this later. Looks like the answer I'm looking for

Val.