IsAss aborting at shutdown

[Lee Jefferies]

I recently activated IIS and I looked at installing a SSL Certificate. Was
not too successful so I let it go. Shortly after it seemed like my system
was hacked. Some of my software was shown in a different language and other
things were wrong. Did a windows recovery and everytning seemed OK. Then I
noticed that shutdown was taking a long time. I installed UPHClean to
release the busy profiles. Then I started getting an abort in IsAss.exe
after Saving System Settings was complete. I have no idea how to find and
fix the problem with Isass.exe. I do feel it is appropriately named. Can
anyone steer me in the right direction.

 

[Art Renkes]

Sorry - can't offer any steering -- but I love your sense of humor.

I recently activated IIS and I looked at installing a SSL Certificate. Was
not too successful so I let it go. Shortly after it seemed like my system
was hacked. Some of my software was shown in a different language and other
things were wrong. Did a windows recovery and everytning seemed OK. Then I
noticed that shutdown was taking a long time. I installed UPHClean to
release the busy profiles. Then I started getting an abort in IsAss.exe
after Saving System Settings was complete. I have no idea how to find and
fix the problem with Isass.exe. I do feel it is appropriately named. Can
anyone steer me in the right direction.

Replace deadspam with yahoo to reply.

 

[RWN]

I picked this up from "Computercops";

"There is Lsass.exe, which is a legitimate Windows file.. and
Isass.exe.......which is not, in fact..it's added as a result of a
trojan. [in lower case... lsass (good) vs. isass (bad)]
The entry in Hijackthis should look like this...
O4 - HKLM\..\Run: [Services] Isass.exe

and can be "fixed" & after reboot a "search"..(Start->Search...etc) can
be done...to locate Isass.exe (Not Lsass)...& if found..delete"

(Google on Isass.exe will bring you plenty of hits.)

 

[Lee Jefferies]

Thanks Rob. I do not have Isass on my system it is Lsass. I searched for
it and I believe I can work through the solution. Thanks for setting me
straight.

I picked this up from "Computercops";

"There is Lsass.exe, which is a legitimate Windows file.. and
Isass.exe.......which is not, in fact..it's added as a result of a
trojan. [in lower case... lsass (good) vs. isass (bad)]
The entry in Hijackthis should look like this...
O4 - HKLM\..\Run: [Services] Isass.exe

and can be "fixed" & after reboot a "search"..(Start->Search...etc) can
be done...to locate Isass.exe (Not Lsass)...& if found..delete"

(Google on Isass.exe will bring you plenty of hits.)
--
Regards;
Rob
------------------------------------------------------------------------

Sorry - can't offer any steering -- but I love your sense of humor.



Replace deadspam with yahoo to reply.