How can I remove "Worms" in my computer?

Question

Actually, I'm not sure if it is even a worm; my computer (laptop to be precise) seems to restart occassionaly for the past week. It keeps running a program "Isass.exe" even though I'm not asking it to do so... Please help! Is it too late for my computer? What sould I do?

Uhm... other than that... I'm a bit low on cash and... I've never thought of installing an effective anti-virus program in my computer since I don't really use the Internet nowadays.

Other than using anti-virus please...

Please consider that my computer isn't that high-end. Pentium 2, outdated GeForce... I don't use it for anything other than making my papers on the run.But it's not that worthless. It's pretty much close to me actually, it was the first computer I bought with my own money (thanks to my part-time job at Seven Eleven and savings); I'll try to save it in any way I could...

That said, since my computer isn't that fast, I could have a very hard time trying to root out that worm...

Answer 1

install from the link below a FREE copy 4 personal use and run a systems sweep regularly.

Answer 2

the problem mightn't be in lsass.exe.

lsass.exe (Local Security Authentication Server) is a critical and vital Windows' process, it handles computer's local security.

::::However:::: there are some malwares (virus, spyware, adware, etc) that use the process name lsass.exe or resembles one, like Isass.exe (notice the lowercase "L" being substituted to an Upper Case "i") in some fonts, uppercase i and lowercase L looks the same. If it is a isass.exe, you don't need to think twice, it's malware.

REAL lsass.exe lies on C:/Windows/System32, check with a program like: http://merijn.org/programs.php#startuplist if the process is located in that directory. If it is located in other place than System32, then it is a malware, if not it _MIGHT_ not be a virus.

List of known virus that use the name lsass.exe:
W32.Nimos.Worm - Symantec Corporation
W32.Sasser.E.Worm (Lsasss.exe) - McAfee
W32.HLLW.Lovgate.C@mm - Symantec Corporation

if it happens that the problem you're having is from the virus (which is very possible, since Sasser's symptom is occasional shutdowning), see here:
http://ask-leo.com/what_are_lsass_lsassexe_and_sasser_and_how_do_i_know_if_im_infected_what_do_i_do_if_i_am.html

And you don't need an expensive antivirus to get protected. Use AVG (http://free.grisoft.com/ ), they have a great (and of course free) antivirus. For Spyware and Adware handling, you might want to try Ad-aware (http://www.lavasoftusa.com/ ) and Spybot SD (http://www.safer-networking.org/ ). For a good free firewall take Zone Alarm (http://www.zonelabs.com/ )

Answer 3

Description: Isass.exe is located in the folder C:\Windows\System32. Known file sizes on Windows XP are 30720 bytes (69% of all occurrence), 529920 bytes, 60928 bytes, 893011 bytes, 791552 bytes.
Isass.exe is not a Windows system file. There is no description of the program. The process starts when Windows starts (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). The program is not visible. It is an unknown file in the Windows folder. Isass.exe is able to monitor applications, hide itself. Therefore the technical security rating is 76% dangerous, however also read the users reviews.

If Isass.exe is located in the folder C:\Windows then the security rating is 90% dangerous. File size is 744436 bytes. There is no description of the program. The program is not visible. It is located in the Windows folder, but it is not a Windows core file. It is not a Windows system file. The program uses ports to connect to LAN or Internet. Isass.exe is able to connect to Internet, record inputs, monitor applications.

"GLSetIT32" definitely not required. Added by a variant of the OPTIX PRO TROJAN!
"Isass" definitely not required.
Important: Some malware camouflage themselves as Isass.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the Isass.exe process on your pc whether it is pest. We recommend Security Task Manager for verifying your computer's security. It is one of the Top Download Picks of 2005 of The Washington Post and PC World.

Answer 4

You could use McAfee but I'd recommend that you should try to contact a professional computer expert because that looks more like a Sasa or a Trojan in the way that you said it restarts. Worm is named after the creature worm in the way that it 'digs and destroys' your files so it could take more than Anitivirus.

Answer 5

1) Visit http://www.download.com and download the following:

a) Ad Aware (by Lavasoft)

b) Spybot Search and Destroy (by Safer Networking)

c) then visit http://free.grisoft.com and download the free personal edition of AVG antivirus.

2) All of the above programs will need updating, then leave them to do a full system scan. You may be asked to reboot your computer a few times - that's ok.

3) Good luck!

Answer 6

worms and viruses run in the background making it hard for virus protection to get them, if you dont want to reformat then do the following, start your pc in safe mode as this will stop all background programs making it possible for you to take it off

Answer 7

Pay attention to Liars never....

Go to this site for a possible non-virus reason for your computer doing what it is doing. Item 7 covers your problem.

http://www.microsoft.com/windows/IE/community/columns/IEtopten.mspx

Answer 8

oops

you got the sasser worm

like about 4 years too late :3

Answer 9

Check out this.
http://www.file.net/process/isass.exe.html
http://www.2-spyware.com/file-isass-exe.html

Answer 10

Scan with an updated ANTIVIRUS