Urgent Help Need: Critical Issue with Isass

[Tim]

Hi folks,

I need a help on my critical issue.

I have dell system with windows XP home edition install
by Dell. It works fine before. It suddenly gave me an
error message related to "Isass.exe" then it reboot my
system last night. After reboot, it lasts for about an
hour, then the error message popped up again and reboot
again. I tried to press Ctrl+Alt+Delete to terminated
the program (Isass.exe) but it couldn't be terminated.

Right now, my system will be reboot by Isass.exe about
evey hour and cannot stop it.

Could anyone know what Isass.exe is? Virus? How to
remove it? Or how to fix it?

If anyone know the solution, please help me out. I am
realy annoy by Isass.exe.

Thanks in advance.

Tim.

 

[Kenrick Fu]

Your computer is infected with a new Sasser worm exploiting the LSASS Buffer
Overrun Vulnerability.

To clean your system:

NOTE: If your system keeps restarting, you can abort the system shut down
by:
Click Start, click Run and type "shutdown -a" (without quotations),
then click OK.

1. Download and install the critical update IMMEDIATELY from
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

2. Press Ctrl + Alt + Delete to bring up the Task Manager and terminate the
"avserve.exe" process, then delete the avserve.exe from C:\Windows and
restart your computer.

 

[AnnonUser]

Hi folks,

I need a help on my critical issue.

I have dell system with windows XP home edition install
by Dell. It works fine before. It suddenly gave me an
error message related to "Isass.exe" then it reboot my
system last night. After reboot, it lasts for about an
hour, then the error message popped up again and reboot
again. I tried to press Ctrl+Alt+Delete to terminated
the program (Isass.exe) but it couldn't be terminated.

Right now, my system will be reboot by Isass.exe about
evey hour and cannot stop it.

Could anyone know what Isass.exe is? Virus? How to
remove it? Or how to fix it?

If anyone know the solution, please help me out. I am
realy annoy by Isass.exe.

Thanks in advance.

Tim.

Are you sure it's ISASS and not LSASS? It makes a difference as LSASS
is a Windows process.
Have you run you AV software? How about anti spy?

Download, install, update, and run:
Ad-Aware 6.0 - for removing spyware
http://www.lavasoftusa.com/

Spybot Search & Destroy - for removing spyware
http://www.safer-networking.org/

Post back.

 

[lynnet]

Sounds like a virus just by the name similar to
wisea..have 2 yr old Dell system and had to get total
deletion and reinstall Microsoft XP. But, before
everything shuts down like mine did, you can go to
symantec.com and scan for viruses and
doxdesk.com/parasite which helped me with instructions to
get rid of viruses I had...is free. Then there is Spybot
Search and Destroy which is a free download. Hope that
helps.

 

[Malke]

Sounds like a virus just by the name similar to
wisea..have 2 yr old Dell system and had to get total
deletion and reinstall Microsoft XP. But, before
everything shuts down like mine did, you can go to
symantec.com and scan for viruses and
doxdesk.com/parasite which helped me with instructions to
get rid of viruses I had...is free. Then there is Spybot
Search and Destroy which is a free download. Hope that
helps.

You have the Sassser worm. Here's the link to information:

http://www.sarc.com/avcenter/venc/data/w32.sasser.worm.html

Get the worm off your system and then immediately patch XP:

http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

Malke

 

[Tim]

Thanks to all folks. I can remove the worm and get
online now.

Thanks very much.

Tim.