isass.exe? – Process/file: isass.exe

File/archive: isass.exe
Process/task name: isass

Malicious program that uses a name similar to a legitimate Windows system process.

It should be noted that the Windows process is lsass.exe (with the letter l), while the malicious program is isass.exe (with the letter i).

One of the worms that uses that name is IRC/SdBot.YK and is usually located in c:\windows\system\isass.exe.

We have logs from other processes using the same file name:

• File: Isass.exe – Name: boby
The Isass.exe file and task is usually started together with Windows under the name of boby and the Isass.exe file or command.

Detected by Trend Micro security program as TSPY_BANKER-2.001 and also by Malwarebytes Anti-Malware as Heuristics.Reserved.Word.Exploit.

Note: The filename uses a capital «i» at its beginning to be confused with an «L». It is located in %System%

More information: http://www.trendmicro.com/vinfo/us/threat-encyclopedia/archive/malware/TSPY_BANKER-2.001

Tip: The Isass.exe process/program should NOT be started alongside the system. It can be a threat to system security.

• File: isass.exe – Name: isass.exe
The isass.exe file and task is usually started together with Windows under the name of isass.exe and the command or file isass.exe.

Detected by Sophos security software as Troj/Spy-VL Trojan malware and also by Malwarebytes Anti-Malware as Trojan.Clons Trojan-type malware

More information: https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~Spy-VL.aspx

Tip: The process/program isass.exe should NOT be started alongside the system. It can be a threat to system security.

• File: Isass.exe – Name: LocalFileSystem
The Isass.exe file and task is usually started together with Windows under the name of LocalFileSystem and the command or file Isass.exe.

Detected by Malwarebytes Anti-Malware security program as Trojan.Agent.E. The file is located in %System%, that is, the Windows System folder.

It is a malicious program of the Trojan type.

Tip: The Isass.exe process/program should NOT be started alongside the system. It can be a threat to system security.

Do you want to know if isass.exe is a virus or malware? See: Is isass.exe a virus?

Errors or problems with the isass.exe file?

Write to us and we will reply as soon as possible. IMPORTANT: remember to say the version of your operating system, the time and/or place where the error appears, and any other information that you think is relevant to help find the solution.