1.

Solve : Isass.exe PROBLEM?

Answer»

my comp will get to windows start up PAGE and then display this..

Isass.exe- system error

Insufficient system resources exist to complete the API

What does this meen and what can i do?It means you should post as much info about your flavor of Windows system information and what security apps you are running so we can assist further...

You're possibly infected, which takes as much info as you can provide.
The worm exploits the Windows LSASS vulnerability, which is a buffer overrun that allows remote code execution and enables an attacker to gain full control of the affected system. To propagate, it scans the network for vulnerable systems. When it finds a vulnerable system, this malware sends a specially crafted packet to produce a buffer overflow on LSASS.EXE. This worm can cause LSASS to crash and force Windows to restart."

Microsoft indicates in a security bulletin entitled Windows XP Users: What to do if your computer has been infected by Sasser that you should:

Disconnect from the Internet
Stop the shutdown cycle
Mitigate the vulnerability
Improve system performance
Enable a firewall
Reconnect to the Internet
Install the REQUIRED OS update
Check for and remove Sasser
The exact steps are outlined on Microsoft's site, and they also link to a malware remover too, the Microsoft Windows Malicious Software Removal Tool.


http://www.microsoft.com/security/malwareremove/default.mspx

I have my doubts that this is actually our ever-beloved worm. I think it's just a matter of mistaking the letters. But to be safe...

socialoutburst,
Copy EVERYTHING inside the quote box below (starting with dir) and paste it into Notepad. Go up to File > Save As... and click the drop-down box to change the "Save As Type" to "All Files". Save it as search.bat on your desktop.

Quote

dir C:\WINDOWS\system32\lsass.exe /a h > result1.txt
dir C:\WINDOWS\system32\isass.exe /a h > result2.txt

Open/run search.bat and it will produce two Notepad files (result1 and result2). Copy the contents of each file and paste them here.


This METHOD isn't surefire, but it searches for isass in its most common location. You should, of course, run a virus scan also.This is why a lack of info especially in an infection topic can set things in motion down many paths...follow CBMatts ADVICE and the suggestions on system specs and more specifics etc.......


Discussion

No Comment Found