OK you start your task-manager on windows and you see a funny file called isass.exe and you immediately think, OK i have a virus ! and look around the net for an anti-virus, and clean, and the anti-virus tells you you have no virus, but still you search and you find out that isass.exe is a virus... now what to do ? well, virus folk always use new techniques to hide their viruses, isass.exe uses this technique.

the trick is that using a simple font, much like the one I'm using here the l and the i look the same, uppercase i and lowercase L look the same... now you might not believe me but yes... they use that glitch to hide the virus, so before you freak out you have to know if you really really have the right file.

Lsass.exe is a normal windows XP file that windows needs for running. ( the one that starts with an L as in Lucky me i have no virus )

and isass.exe is indeed a virus, now as I said because of the font on task-manager it's hard to tell one from the other. ( actually not hard but impossible ) if you don't believe me open your favorite editor and use the font Microsoft San serif and you will see.

now the thing is to find a program that will tell you indeed what you have, i recommend a free software called hijackthis, ( Google for it ) it will create a log file of all the programs you are running you an open it using a font that shows the i L difference, and see if you have to find an anti-virus.

if you have isass.exe clean it, if you only have Lsass.exe, relax !

keywords: ISASS.EXE, LSASS.EXE, windows XP, virus, clean, hijackthis

Links of interest: