necrome 0 Report post Posted June 22, 2004 nak tanya sikit apa isaas.exe ni virus ke atau program biasa saja dalam winxp .... kalau boleh tolong terangkan sebab benda asik restart kan komputer saja dan kenapa LSA dalam masa yang sama error. Quote Share this post Link to post Share on other sites
mus3na 5 Report post Posted June 22, 2004 baca post lepas2 pasal spyware, virus, exploit, etc....... Quote Share this post Link to post Share on other sites
aRmsTer 0 Report post Posted June 22, 2004 isaas.exe ke lsass.exe?kemungkinan besar Sasser sudah menjangkiti pc anda Quote Share this post Link to post Share on other sites
necrome 0 Report post Posted June 23, 2004 makaseh Quote Share this post Link to post Share on other sites
Nazirul 0 Report post Posted June 23, 2004 Sasser.B [ Worm ] [ Active ] Effects: It restarts the computer. It spreads by exploiting the LSASS vulnerability. ------------------------------------------- Sasser.A [ Worm ] [ Active ] Effects: It restarts the computer. It spreads by exploiting the LSASS vulnerability. ------------------------------------------- Sasser.C [ Worm ] [ Active ] Effects: It restarts the computer. It spreads by exploiting the LSASS vulnerability. ------------------------------------------- Korgo.D [ Worm ] [ Active ] Effects: It opens several ports and connects to IRC servers. It spreads by exploiting the LSASS vulnerability. ------------------------------------------- Korgo.H [ Worm ] [ Active ] Effects: It opens several ports and connects to IRC servers. It spreads by exploiting the LSASS vulnerability. ------------------------------------------- Korgo.I [ Worm ] [ Active ] Effects: It opens several ports and connects to IRC servers. It spreads by exploiting the LSASS vulnerability. ------------------------------------------- Korgo.P [ Worm ] [ Active ] Effects: It connects to several web sites, to which it sends information and from which it downloads several files. It spreads by exploiting the LSASS vulnerability. ------------------------------------------- Sasser.E [ Worm ] [ Active ] Effects: It restarts the computer. It spreads by exploiting the LSASS vulnerability. ------------------------------------------- Bobax.A [ Worm ] [ Active ] Effects: It allows to send spam from the affected computer. It restarts the computer and spreads by exploiting the LSASS vulnerability. --------------------------------------------------------------------------------------semua berkaitan LSASSdetails : http://www.pandasoftware.com Quote Share this post Link to post Share on other sites
necrome 0 Report post Posted July 1, 2004 maaf tetapi kenapa benda ni boleh ada kat dalam registry ikut betul apa yang saya ketahui Isass.exe yalah program tetapi yang ni pula Isaas.Exe dan tidak dapat kena detect oleh mana mana antivirus seakan benda ni seperti bom jangka. .....confuse confuse Quote Share this post Link to post Share on other sites
Nazirul 0 Report post Posted July 2, 2004 cuba tekan ctrl + alt + del.. pegi tab processes.. ko akan jumpa lsass.exe ... apa tu? haha aku pun tak tau.. tapi rasanya file kat windows.. bukan worm.. bom jangka apatah lagi.. erm, mungkin file tu yg selalu jadi aim worm.. haha.. justmy2cents~ Quote Share this post Link to post Share on other sites
aRmsTer 0 Report post Posted July 2, 2004 LSASS=Local Security Authority Servicekeje die handle windows punye security mechanism mcm validate user yg logon windows ke hape ke... menjadi sasaran worm (sasser)isaas=aku pon tatau hapekebende mendealah nikemungkinan besar file ni dibuat oleh certain worm@virus... http://www.liutilities.com/products/wintas...slibrary/lsass/edited:aku baru terjumpe nih:-isass - isass.exe - Process InformationProcess File: isass or isass.exeProcess Name: isassDescription: Virus added to the system as a result of variant of the OPTIX PRO TROJAN that opens TCP port 3410 and allows a penggodam to control an infected computer.Company: N/ASystem Process: NoSecurity Risk ( Virus/Trojan/Worm/Adware/Spyware ): YesCommon Errors: N/A Quote Share this post Link to post Share on other sites
necrome 0 Report post Posted July 2, 2004 Minta Maaf mungkin cara saya membuat persoalan membuat anda bingung dengan benda yang saya tertanya tanya.ISASS.EXE = Process Information (Yang ni saya tahu)ISAAS.EXE = ?????????? (Yang ni saya tak tahu )Effect Komputer Tetiba Shutdown. Sekarang ni saya Guna Norton Anti Virus 2004 tetapi benda ni tidak kena detect sebagai worm /virus / scripts - tetapi bila check dalam registry kat komputer memang wujud fail ISAAS.EXE tetapi bila scan kat windows XP benda ni tak wujud langsung dan apabila saya sedang melakukan kerja guna komputer saya ni tetiba saja macam pop - up kuar dan bagi warning dalam masa beberapa saat komputer ini akan shutdown. (nasib baik cukup masa save keja) dan ini yang membuat saya tertanya tanya adakah ISAAS.EXE ini worm / virus / script ataupun sebaliknya. walaubagai manapun terima kaseh tentang penerangan ISASS.EXE . Quote Share this post Link to post Share on other sites
MenCaRi 10 Report post Posted July 2, 2004 hati hati dengan file yang kau tak tahu.mungkin ia virus. Quote Share this post Link to post Share on other sites
aRmsTer 0 Report post Posted July 2, 2004 ISASS.EXE = Process Information (Yang ni saya tahu)ISAAS.EXE = ?????????? (Yang ni saya tak tahu )silap tu... be careful pd huruf dia...LSASS(lsass.exe) = windows punya file...ISASS(isass.exe) = virus (refer pd my previous post)ISAAS(isaas.exe) = xtau lg... tp rasa2nya virus sbb ada kaitan dgn sasser kalu xsilapapa2 pon... donload n run bende ni duluhttp://securityresponse.symantec.com/avcenter/FxSasser.exe Quote Share this post Link to post Share on other sites
necrome 0 Report post Posted July 3, 2004 Setelah saya scan dengan menggunakan Tool encik aRmster berikan nampak benda ni still tidak kena detect dan komputer saya still clean tapi masi bermasalah nampaknya kena detect sampai habis - habisan hehehehe manalah tahu dapat discover benda baru dalam winxp ni. Quote Share this post Link to post Share on other sites
Nazirul 0 Report post Posted July 3, 2004 Sasser.B [ Worm ] [ Active ] Sasser.A [ Worm ] [ Active ] Sasser.C [ Worm ] [ Active ] Korgo.D [ Worm ] [ Active ] Korgo.H [ Worm ] [ Active ] Korgo.I [ Worm ] [ Active ] Korgo.P [ Worm ] [ Active ] Sasser.E [ Worm ] [ Active ] refer kat list tu.. dan cari removal utk setiap virus.. terdapat di mana² tidak semestinya sasser shj. yg akan mengrestart pc..ISASS.EXE = Process Information (Yang ni saya tahu)ISAAS.EXE = ?????????? (Yang ni saya tak tahu )kan ko dah tahu tu.. Quote Share this post Link to post Share on other sites
Rezolles Photography 0 Report post Posted July 3, 2004 senang ajer....ko search kat internet...tulis ad-ware...pastue download file adware tue scan komputer....ko leh tahu aper yg sedang merebak kat PC ko tue...leh tahu pasnie dier buat aper...restart ker shutdown ker....camtueuntuk maklumat lanjut antar email kat aku......aku jarang cek mesej kat cnie.... Quote Share this post Link to post Share on other sites
man2 0 Report post Posted July 5, 2004 hmm.. aku pernah gak kena camtuh.. bende tu ade kat direktory c:\ tapi tak pasti camne plak ejaan bende .exe tuh.. lebih kurang camtu la kot!! huhu.. tapi antivirus detect..cume tak bleh nak remove.. manual remove dalam windows pun tak buleh.. so ape yg aku buat lastly... aku masuk dalam dos, aku delete la dari situ.. huhu.. cun.. berjaya!! ok cun!!! Quote Share this post Link to post Share on other sites
necrome 0 Report post Posted July 5, 2004 ok makaseh atas maklumat yang diberikan kepada saya Quote Share this post Link to post Share on other sites
zairi 0 Report post Posted September 16, 2005 hmm.. aku pernah gak kena camtuh.. bende tu ade kat direktory c:\ tapi tak pasti camne plak ejaan bende .exe tuh.. lebih kurang camtu la kot!! huhu.. tapi antivirus detect..cume tak bleh nak remove.. manual remove dalam windows pun tak buleh.. so ape yg aku buat lastly... aku masuk dalam dos, aku delete la dari situ.. huhu.. cun.. berjaya!! ok cun!!!←camne cara nak remove dalam dos. boleh tunjuk caranya... Quote Share this post Link to post Share on other sites
dimenxion 0 Report post Posted September 16, 2005 (edited) pakai command dospastikan tahu di mana fail tersebut. bila masuk dalam dosdel c:\direktori_yang_ko_nak_deletecthnya kalau nak delete kat c drive koi masukkandel c:\virus-file.doc Edited September 16, 2005 by dimenxion Quote Share this post Link to post Share on other sites
