The dreaded sass

[p.mc]

I got it within 30 secs of turning my firewall off to send a piccy through
messenger, is there a way to send piccys with messenger without turning
F\wall off? .
My AV pc-cillin quarentined it so I removed it with the tool from symantec
site then checked on Microsoft site with a tool to see if i was infected and
it came up "Not infected" but naughty me didn't turn off system restore
'cause I don't want to lose any snapshots of my system and now I've noticed
in task manager under proccesses Issass.exe is running! but my machine is
supposed to be clean. Is this a genuine exe, or is it sasser? if so do I
delete it and how.

TIA.


--
Regards
p.mc

For personal replies please leave or type signature
"p.mc" In the body of the message otherwise
posts will not be received.
Thanks

 

[roger]

Hi,

I got it within 30 secs of turning my firewall off to send a piccy through
messenger, is there a way to send piccys with messenger without turning
F\wall off? .
My AV pc-cillin quarentined it so I removed it with the tool from symantec
site then checked on Microsoft site with a tool to see if i was infected and
it came up "Not infected" but naughty me didn't turn off system restore
'cause I don't want to lose any snapshots of my system and now I've noticed
in task manager under proccesses Issass.exe is running! but my machine is
supposed to be clean. Is this a genuine exe, or is it sasser? if so do I
delete it and how.

TIA.

Lsass.exe is a genuine windows program. Just do an scan with the
latest antivirus definitions, but the presence of lsass.exe does not
mean anything per se.

However it imight be on one of your system restore points.

HTH