What is it?

Laughalotkpg

Thread Starter
Joined
Jan 14, 2019
Messages
21
When I use command netstat -aqn I see bound connections. Does this mean I have a snooper?
I traced the connection to a pid named isass.exe. Some web pages say its malware. Is that correct?
 

Couriant

James
Trusted Advisor
Spam Fighter
Joined
Mar 26, 2002
Messages
37,324
Is isass.exe malware
the LSASS.EXE file is a Windows System File, located at %WINDIR%\System32 (C:\Windows\System32) If it is showing that it was loaded elsewhere, then more than likley it's a fake and a virus/malware file.
 

Cookiegal

Karen
Administrator
Malware Specialist Coordinator
Joined
Aug 27, 2003
Messages
118,109
Is isass.exe malware
If that is indeed the name of the file and not the valid lsass.exe (starts with the letter "L" and not "I") then it likely is malware. You need to clarify the correct name of the file so we can determine where this thread needs to be.

I've merged the other thread into this one as it explains your concerns more.
 

Cookiegal

Karen
Administrator
Malware Specialist Coordinator
Joined
Aug 27, 2003
Messages
118,109
You can tell from it's location in the list that it starts with "L' and not "i" so it looks like the valid Local Security Authority Process service.

I'll moved this to the Networking forum for information on those connections.
 

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Members online

Top