Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I have these two processes running in task manager.Are any of the viruses?
ASROCK K7S8X M/B
AMD ATHLON 2000+XP@2ghz
384MB DDR 266MHZ
GEFORCE4 AGP8X 64MB
MAXTOR 60GB H/D
LITEON SOHW-1213S DVDRW
SAMSUNG SM-332B CDRW/DVD
QTEC AND STATICX SILENT COOLERS

hi,
issas.exe is the Sasser worm which is a critical threatcsrss.exe is a Microsoft Client/Server
i believe it is use for graphic. so it is safe.try to run an online anti virus scan.
http://www.pandasoftware.com/activescan/
and download the MS patches
http://v4.windowsupdate.microsoft.com/en/default.asp

sorry mate.I think it may be lsass(L not I).does this make any sense?(I have spybot s&d, avg, spywareblaster and adware and they havn't found anything!)
ASROCK K7S8X M/B
AMD ATHLON 2000+XP@2ghz
384MB DDR 266MHZ
GEFORCE4 AGP8X 64MB
MAXTOR 60GB H/D
LITEON SOHW-1213S DVDRW
SAMSUNG SM-332B CDRW/DVD
QTEC AND STATICX SILENT COOLERS

isass.exe may be a virus.please send this file to me with compressed file
Send suspecied file to me with compressed file.my email:virus@shanguo.com

hi, and sorry for the delay.
there is a big different now,
lsass.exe - Local Security Authority Service(safe), it is part of MS.
where
Process File: isass or isass.exe is a trojan.
issas.exe is a sassor virus.thats the thing with today's viurses, progammers become so creative and make virus names similar to normal processer file, or use weird names to make it hard for users to Identify them.
anyhow, having all that tools dont mean that you cant be infectedm, some viruses disable ur anti virus and u may not realize it.
u always should update ur anti virus definitions, and at least do an online scan once a week.here is a site that help u eximine the file, upload the file to the site and it will tells you if it is safe or not. good luck,
http://www.kaspersky.com/remoteviruschk.html

Description
This is a program which installs itself in your Windows/system32/dhcp folder. It does this so that windows prevents users from disabling or deleting it.Symptoms
It intermittently serves Java based pop ups while you are connected to the internet. Several clicks are required to shut the program down.Verification
You can see if you really have this problem by opening the task manager and clicking on the applications tab. If you see csrss.exe running, right click on go to process. If you see two versions of csrss.exe running, then you have been infected.Removal
1 .Search for csrss.exe in the search function of windows.
The legitimate version should live in the windows/system32/ folder. The hidden virus versions will live elsewhere.
2. Try to delete it. If windows won't let you delete it, then cut and paste it to your desktop or anywhere you can find it later.
3. Rename it and give it some other file type other than .exe.
4. Now you can delete it. If you still can't.
5. Restart your computer and then you can.Take that spyware and adware purveyors!

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |