What is Isass.exe?

what is it and how do you replace it? I have Windows XP home on my laptop, and it says that this file is missing. All I have to say is that i did not delete it, where did it go, and why wont windows start up without it. Is there like a boot disk that i can make with this file? Because for some reason the recovery disk has gone missing...


Thanks,
Jason

 

This is what I found with a google search:

isass - isass.exe - Process Information
Process File: isass or isass.exe
Process Name: isass
Description: Virus added to the system as a result of variant of the OPTIX PRO TROJAN that opens TCP port 3410 and allows a hacker to control an infected computer.
Company: N/A
System Process: No
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): Yes
Common Errors: N/A

 

im sorry, i typed it wrong, it is lsass.exe, not isass.exe, isass.exe is a trojan, its a little different i think

 

from LIUtilities:

WinTasks Process Library



lsass - lsass.exe - Process Information
Process File: lsass or lsass.exe
Process Name: Local Security Authority Service
Description: Windows Local Security Authority Server Process handles Windows security mechanisms. It verifies the validity of user logons to your computer or server. Technically, the software generates the process that is responsible for authenticating users for the Winlogon service.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No
Common Errors: N/A


Johanna

 

Borrow someone's XP Home cd and run an SFC (System File Check)
Start > Run > cmd
sfc /scannow

Try to boot into safe mode, or use your friend's cd to boot the computer. DO NOT attempt a repair or reinstall with that cd or you will be breaking the law and, worse, yours and your friend's comp will quit working.

Sounds like you just need to replace a system file, so sfc ought to do it. Post back with your progress, please.

Johanna

 

Odd that XP didn't replace it on it's own. Try pressing F8 when booting the computer, and select command prompt, and try this command.
copy c:\windows\system32\dllcache\lsass.exe c:\windows\system32
I am new to XP myself, and am not sure if you will be able to do this, Admin rights may stop you.

 

Lsass.exe System process Unexpectedly Quits

My sister and law's computer unexpectedly quit with a 1073741819 code. Everytime she try's to get on the internet this happens. From my understanding she may have a virus called the W32.Sasser.E.Worm.

I really am confused now, because the way you all are talking this is suppose to be on her computer. Anyway, what can I do to try and help her? She has not had this computer long, and Norton Virus is installed, but I can't seem to get it to scan for any virus.



Can somone give us some advice?

Thanks ahead of time.

 

Lsass.exe is a normal system file on XP. However, it was the target of the Sasser worm and if the system wasn't up to date on security patches it could have gotten hit by that worm. In fact, if the system isn't up to date on security patches there are quite a few baddies that will eat it alive.

Careful of the spelling too since about version #5 of Sasser (W32.Sasser.E.) places a file on the PC called Lsasss.exe (note the extra letter 's').

If Norton won't scan she has probably been hit. You can take a look Here and download a removal tool Symantec (Norton) has developed. It should work even if the normal AV won't run.

Also be a very good idea to run an online scan at one of the sites that offer the feature. RAV is good.

Since this now looks pretty much like a virus issue, moving the thread to Security.