wielki
join:2002-11-26
Fort Lauderdale, FL
|  [XP Home] isass.exe Trojan HELP
I've been trying to research on this Optix Pro Trojan but can find a solution to little avail. My computer is doing an auto Shhutdown every 5-10 min where it says isass.exe had terminated (not to be confused with lsass.exe). I've done multiple scans using many different products all fall short. Does anybody have any ideas short of reformatting? this isass.exe is in the system32 apparently yet its not |
|
Shootist
Premium
join:2003-02-10
Decatur, GA | Try the security forum. You will find all the answers there.
--
Shooter Ready--Stand By BEEP ******** |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC | reply to wielki
Does the message look like this ???
»forum.gladiator-antivirus.com/up···0535.jpg |
|
janderso1
Jim
Premium,MVM
join:2000-04-15
Saint Petersburg, FL | reply to wielki
This may be what you are looking for.
»securityresponse.symantec.com/av···bot.html
--
Jim Anderson |
|
John2g
Qui Tacet Consentit
Premium
join:2001-08-10
England
| reply to wielki
Removal instructions for removal of Optix Pro are here. You will have to scroll down quite a way.
»www.pestpatrol.com/PestInfo/o/optix.asp
--
Better to remain silent and be thought a fool, than to speak and remove all doubt. |
|
anthrorules
Premium
join:2003-09-14
Rollinsville, CO | reply to wielki
Check out:
»Man your battlestations - lsass.exe worm arrived.. |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
| reply to wielki
and if it is that..here is a tool to clean it 
W32.Sasser Removal Tool
»securityresponse.symantec.com/av···ool.html
--
Gladiator Security Forum »www.gladiator-antivirus.com/ Missing Kidshttp://www.missingkids.com/ |
|
Unreal2001
Mess With The Best Die Like The Rest
join:2001-12-27
San Jose, CA | reply to wielki
»securityresponse.symantec.com/av···ool.html
Seems to be down is it just me? |
|
anthrorules
Premium
join:2003-09-14
Rollinsville, CO | Works for me...what error message (if any) do you get when you access the web page? |
|
Unreal2001
Mess With The Best Die Like The Rest
join:2001-12-27
San Jose, CA | reply to wielki
Says it down.. :-( could some one upload the file to me. |
|
John2g
Qui Tacet Consentit
Premium
join:2001-08-10
England
| reply to wielki
There is a link to a sasser removal tool here
»MS releases Sasser worm variant removal tool
--
Better to remain silent and be thought a fool, than to speak and remove all doubt. |
|
wielki
join:2002-11-26
Fort Lauderdale, FL | reply to wielki
thanks it was the Sasser Worm, ran the FXsasser Utility twice to rid of it. |
|
PaloC
Premium
join:2003-07-24
Slovakia | reply to wielki
how to download the programm...
..if the worm keeps shutting me down?
It is not actually me but my brothers laptop, that is infected. Is there a way to stop the reboot process so i can download the removal tool? |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
| Yes see the post in this thread by DGDTrathole
»Win32.Sasser.c sasser lsass
--
Gladiator Security Forum »www.gladiator-antivirus.com/ Missing Kidshttp://www.missingkids.com/ |
|
loopy2003
join:2003-07-31
Schenectady, NY | reply to Unreal2001
Re: [XP Home] isass.exe Trojan HELP
Unreal,
Looks like you are infected. One of the side effects of the worm is to block access to Symantec, among other AV companies. |
|
MarcellusWallace
@4.15.x.x
| reply to wielki
Isass.exe appeared on my screen in a window making claims that authority had been granted to shut down the system in 60 seconds...and nothing could stop it. Not task manager, not anything. And the system shut down! Every single time I turned on the system.
ALL above posted suggestions were useless. BUT...I noticed it appeared only when connected to a network... so I loaded a freeware firewall I found on www.StillListener.com called Sygate Personal Firewall and this eliminated the Isass.exe problem. |
|
Shootist
Premium
join:2003-02-10
Decatur, GA
| You still have the virus on your box. Just because the firewall isn't letting it out to the net does mean you don't have it anymore.
The firewall is not a anti virus program and will not clean the infection.
--
Shooter Ready--Stand By BEEP ******** |
|
wielki
join:2002-11-26
Fort Lauderdale, FL | This I know, i ran Symantec removal and Microsoft's removal. |
|
biped
@adsl-dhcp.tel | reply to MarcellusWallace
to prevent your pc for shutting down, just set your time one day back. that will give you some time |
|
