ISASS.EXE application

Hi,
I am getting this error on start up
ISASS.EXE application error
then getting a black screen can move my mouse but nothig happens...
.. can't boot from safe mode/ last good config etc..

Any idea??

Hi ashvin,
You have the Optix Pro Virus. This one isn't to bad to clean up.
I'm new to this site, but I'm sure one of their authorized Malware
removers will be able to help you.
Regards,
Gil777t

Ohh.. I can't get the computer to start up.. thats the problem.. how to run that virus scan.. Ohh I got my mind not working actually.. never seen that error before.. I'm thinking to remove the hard disk and connect it externally to a pc and run a virus scan..

ashvin said:

Ohh.. I can't get the computer to start up.. that's the problem.. how to run that virus scan.. Ohh I got my mind not working actually.. never seen that error before.. I'm thinking to remove the hard disk and connect it externally to a pc and run a virus scan..

Click to expand...

If you are using Vista, do a forced shutdown and re-boot by doing the following. While you have the black screen showing hold down the power button til the computer shuts down then release the button. The computer will re-boot with a window open giving you the option to open up in safe mode. Use your scroll key arrows to select safe mode, press enter. You will only have 20 seconds to do this. Now when your in safe mode download MalwarebytesAnti-Malware Click Here. Run a full system scan, when it's done delete everything it finds. This is a very good program for your particular problem. All the infected files will be in MalwareBytes quarantine.If you have a problem because the software grabbed a valid entree, you can restore it from the quarantine file in MalwareBytes. I never had this happen with this particular Virus. If this doesn't work let me know and I''l give you another option better then the one you suggest.
Regards,
Gil777t

I can't get in safe mode.. it gives me the Lsass.exe error there as well.. I have removed the hard drive.. connected it and run a full virus scan.. When i runned the repair i did got bad clustered error.. imaging the hard drive now.. will see if that works..

ashvin said:

I can't get in safe mode.. it gives me the Lsass.exe error there as well.. I have removed the hard drive.. connected it and run a full virus scan.. When i runned the repair i did got bad clustered error.. imaging the hard drive now.. will see if that works..

Click to expand...

It would have been safer to download MalwareBytes from the good computer to a flash drive, then disconnect the infected computer from the internet and run the software that way. Just to check, you did try and boot into safe mode by tapping the F8 key before the windows logo appeared. You run the risk of of infecting the good computer the way you did it. Best of luck.
Regards,
Gil777t

ashvin, you really painted yourself into a corner. The isass.exe is a frequent port of entry for malware. I hope, after all this time around here, that you imaged your system and can easily pull an image in. If not, you better get on this bandwagon for the future because you may face a reinstall now.

hi whs, no i can't pull out an image.. already tried out much things.. getting fatal error even imaging the hard drive.. I have gone through replacing the hard drive with a new one and new windows installation.. but still have the other hard drive and really want to learn the way out to solve that Lsass.exe issue..

All I know is that the lsass.exe is a frequent entry point for malware. All you can do is frequent imaging so that you can set back if you get hit.
lsass.exe or isass.exe - virus or system file? Find out which process is good and which is evil.

Ashvin,
AS I told you in my post, you had the Optix Pro Virus, period. The solution is not to keep imaging your hard drive. The solution is to remove the malware. For your information all forms of Malware, Spyware, Adware,Trojans Rootkits etc. are forms of Viruses. The definition of Malware is Malicious-Software, a Virus. the particular Virus you had is one of the easier ones to remove. MalwareBytes has no problem removing this one. As far as getting the same message when you did a forced shutdown and re-boot into the safe mode window, that cannot happen. Downloading MalwareBytes from a non infected system to a flash drive the way I suggested will work flawlessly. You wasted your money buying a new hard drive for such a simple fix. The Isass.exe as well as a corrupt Lsass.exe Hive Keys are not the hard ones to clean up. I suggest you read in this forum perhaps as well as other forums on Virus removal. Looking at your profile in this forum, it should never have been a problem for you. Let me ask you this. After you did a clean install with the new hard drive did you download any files from the computer that was used to try and run a Virus scan? If you did, Guess what? both computers are highly likely now to be infected. If you take any advise at all, right now run full system scans with MalwareBytes on both computers with the instructions I suggested in my earlier post.
Please note: The infection you have is not instantly executed. It usually takes a couple of weeks to grab you. Yes, the hard drive that was taken out can be disinfected. You need to understand how to enter safe mode by either tapping the F8 key on start up, or through a forced shut down, or with the task manager. You also need to know how to use a HJT Log as well as a OTL Log. With all the surfing you do as well as all the links you may open, your at a severe disadvantage to all the scumbags out there. I wish you nothing but the best.
Regards,
Gil777t

Of course you don't want to image as long as the virus is on the system. You first have to get rid of it. Safest is a reinstall but you can try your luck with removal (usually not very successful). But from then on, you should image fequently starting with day1 after the reinstall.
For your future browsing you might also consider the use of Sandboxie.

whs said:

Of course you don't want to image as long as the virus is on the system. You first have to get rid of it. Safest is a reinstall but you can try your luck with removal (usually not very successful). But from then on, you should image fequently starting with day1 after the reinstall.
For your future browsing you might also consider the use of Sandboxie.

Click to expand...

I respectfully disagree, using MalwareBytes with these two Hive keys
is most effective. Try it!
Gil777t

Gil777t said:

whs said:

Of course you don't want to image as long as the virus is on the system. You first have to get rid of it. Safest is a reinstall but you can try your luck with removal (usually not very successful). But from then on, you should image fequently starting with day1 after the reinstall.
For your future browsing you might also consider the use of Sandboxie.

Click to expand...

I respectfully disagree, using MalwareBytes with these two Hive keys
is most effective. Try it!
Gil777t

Click to expand...

Understand. If you were successful with it, I accept your answer. But many times damage is left behind - maybe not in this case.

whs said:

Gil777t said:

whs said:

Of course you don't want to image as long as the virus is on the system. You first have to get rid of it. Safest is a reinstall but you can try your luck with removal (usually not very successful). But from then on, you should image fequently starting with day1 after the reinstall.
For your future browsing you might also consider the use of Sandboxie.

Click to expand...

I respectfully disagree, using MalwareBytes with these two Hive keys
is most effective. Try it!
Gil777t

Click to expand...

Understand. If you were successful with it, I accept your answer. But many times damage is left behind - maybe not in this case.

Click to expand...

Of course you are correct as you well know. Any time you use Malware or Virus removal software, bits of files can be left behind. That is why it is always suggested to use multiple programs to grab bits that the other one leaves behind. In many cases you also have to manually remove files, as well as write missing values. And yes! there are many instances where only a clean install will work. Here is the disclaimer to save you from having to post it.
I have used the way I suggested 8 to 10 times now without any problems, this is not to say the next 1/2 dozen times there won't be. It has been my experience if there are any problems removing Viruses or Malware with single software programs you will know it right away because you get hanging pages etc.
Regards,
Gil777t

I don't have this problem anyhow. I image my system and my data partition every second day to two 640GB disks of which one gets disconnected immediately after imaging. Thus I can always go back to a very recent (or older) image. That's why I always recommend imaging - it is so much easier to bail you out

whs said:

I don't have this problem anyhow. I image my system and my data partition every second day to two 640GB disks of which one gets disconnected immediately after imaging. Thus I can always go back to a very recent (or older) image. That's why I always recommend imaging - it is so much easier to bail you out

Click to expand...

Whether your new to computers or Steve Jobs, no one can argue with your methodology. That is what you call security redundance. I'm glad to see I'm in good company in regards to paranoia.
Gil777t

Ok guys, I am trying a new software called "avast bootable antivirus and recovery tools.. I can boot from cd and including the Malware bytes or any software I want to tailor add on it.. so when I boot from cd I can run the malware check on the hard drive, registy editing etc.. The pc is a test computer that I use in the workshop for backing up clients data or imaging hard drives..

I'm working on that Avast tool actually..

ashvin said:

Ok guys, I am trying a new software called "avast bootable antivirus and recovery tools.. I can boot from cd and including the Malware bytes or any software I want to tailor add on it.. so when I boot from cd I can run the malware check on the hard drive, registy editing etc.. The pc is a test computer that I use in the workshop for backing up clients data or imaging hard drives..

I'm working on that Avast tool actually..

Click to expand...

I don't use Avast, I think it was better in years past. I would run MalwareBytes first. Then SuperAntispyware next. Here is the link. SuperAntiSpyware Here. Why don't you try this first Ashvin, run MalwareBytes, then Superantispyware. If you still have difficulties after that you can try the new program. I don't understand, why don't you just download MalwareBytes and Superantispyware to your test computer then burn a disk, or use a flash drive. It is definitely better to run MalwareBytes first. I will not try to suggest any further solutions regarding this problem. Good Luck to you Ashvin.
Regards,
Gil777t

pk gil777t.. i'll give that a try.. thanks.. will post the feedback..