skip to main content

Norton Program Alert that I don't understand.

16 years ago

First of all I have Windows XPSP2

Norton Antivirus 2007 the plain version, although I believe they added a firewall and other security stuff later.

Here is what popped up.

Program Alert: Low Risk

Explanation given: A remote system is attempting to access Microsoft Local Security Authority Shell on your computer.

Program: Isasse.exe

Wasn't sure if the beginning letter was an I or an L. Looked more like an I to me.

C:\windows\system 32

Date: 10/11/2007 12:44 AM

Protocol: UDP (Inbound)

Recommendation: Allow Always (Recommended)

Gives Remote Address plus Local address was also listed.

Since I didn't know what to do, I put in Block Instance and clicked OK. There is a block always but I didn't do that since I wasn't sure if it was a Trojan or a normal thing that Microsoft was wanting to install.

I did some research and saw that there is a Trojan/or Virus, (can't remember which) using the Isasse.exe

Does anyone have any idea what this is? I can't figure out why Norton would put low risk and then allow always (recommended) there. It made no sense to me, so that is why I put Block Instance there, so that it would by me some time to check this out.

Would this have been ok to allow or was this some sort of virus or trojan?

If I would block anything, is there a way that I can go in and unblock it in Norton? Remember this is Norton Antivirus 2007, I don't have the security suite.

All help would be greatly appreciated. Thank You.

thirdfrt!!!

Sort by:Oldest

Comments (4)

mikie_gw
16 years ago
Idont know...

I'd do an 'Advanced' search for two files simultaneously ;
isass.exe, lsass.exe

If its isass, thats probably a worm.
If its Lsass,exe and its in the windows /system32 folder (except probably L is lower case) thats a windows file that gives logon security clearances.
LSA Shell, LSASS, Local Security Authority System Service
- Which may be for your Norton updating, or possibly windows update.

Windows updates this month does change the owners on some security ID's(SID) so it may be that some things that autoupdate will need to have LSA Shell authorization before it can update. Anyhow- Sounds like what it was for you.
I would have given it temp access then crossed my fingers that my virus program doesnt pop and say it found a slimy sleazeball.
0
thirdfrt
Original Author
16 years ago
mikie,

Thank you for your post back to me. So far it hasn't popped up again but I only told it to block instance, not to block it permanently.

I would have given it temp access then crossed my fingers that my virus program doesnt pop and say it found a slimy sleazeball.

I saw nothing there that even said to give it temporary access.
What I finally found out from the recent history in Norton is this. Level: Low, Title: This one time you blocked Microsoft Local Security Authority Shell from accessing your network resources. Status: Blocked. Date: 10/11/2007 12:44:32 AM. The default action was to allow in Norton.

Is there anyway for me to unblock this in Norton, or will I have to just wait for it to try to access again? If not then how do I get it to access again, can I get it through Microsoft? How can I correct this mistake?

One thing for sure because Norton had it as a low risk, I thought it was the virus. Ugh!

thirdfrt!!!
0
Related Discussions
I don't understand a word of this!
Q
Comments (8)
Sounds like you already have internet working but your mail settings are off a notch... Perhaps look here.. Open Outlook Express Click on the menu item Tools, then select Accounts Click on the Mail tab if not already selected. Highlight MSN which hopefully is marked default. Click on Properties button. Click on the tab for Connections Now you should see a drop down box, change it to say dial up modem or something similar as apparetnly its trying to use a Network Connection which the norm if you have a high speed connection like dsl or cable. Think you need that box to say use the dial up modem. Hopefully thats the simple fix.
...See More
Something I don't understand.....
Q
Comments (10)
Everyone with a store bought computer should create a set of recovery disks Not only as Grandms so wisely points out, because of hard drive failure, but also in case you get Trojans. Right now I have a wicked case of Trojans on a computer brought to me and I am afraid to use the recovery console in case that too is corrupt. And I have no reason to suppose it is not corrupt since so much of this computer is inoperable. Luckily the owner has created a set of disks so I can do a recovery if all else fails.
...See More
I don't understand this
Q
Comments (12)
the problem is kath, yes you'll invest or save (what a joke that is, savings acct is paying me less than 1%) as you say, shame om me for not saving, but what happens the first disaster? do you honestly think a person (like the mudslide victims in ca) oops... can't touch my retirement money? and it's gone in an instant...then where do they go? i do realize ss is inefficent, and often not enough, but are you gonna take on parents/elders who can't afford to live any other way? we had my mother move it when she wanted to (not a good situation) but if she hadn't had ss, we'd be in such deep debt now, it boggles the mind...she was in and out of nursing facility, that would have had us on the street if we'd had to pay for it... and "your" money...this year dh paid about $5600 into fica and medicare. that's this year...nice bit of change...but he hasn't always paid that much...back in the 70's when he first started his career, we made under 10 grand...(and that was the 2 of us) so bet our fica and medicare were what? a couple of hundred? as for getting your money back, you are..your parents are... as for you'll be dead if they keep raising the age limit..can't challenge you on that one! lol...i just hope NOT!
...See More
I really don't understand......
Q
Comments (45)
The article kathy-ny linked above was interesting...but I found this tidbit incredible: The luxury home furnishings retailer is also upping its game on the merchandising front by expanding assortments in categories such as leather, raising the page count of the Source Book catalogs that it mails and adding catalogs in new categories such as rugs. What? In this day and age of paperless electronics, if you can't get your point across in 3,300 pages, 17 lbs. of catalogs, do you really think adding more pages is going to be helpful?!?! Even War and Peace is only 1,400 pages. And the size of the stores they're building is unbelievable. 70,000 sq ft? That's over 1 1/2 acres! Just imagine what they're going to have to do to prices to support that footprint! Yikes!
...See More
mikie_gw
16 years ago
You're temp block with norton probably times out when you reboot or after some kind of timer count_down. Won't be long - Don't worry, it'll either ask again
- or MicroSoft program doing it may already have a back up plan on how to get around firewalls and may already have done its thing.

You might run
msinfo32
Then on the menu bar View,,, put a checkmark at 'History
then highlight Software ... you'll may see something there that is related to that timeframe.
0
thirdfrt
Original Author
16 years ago
Thank you mikie,

I did do the msinfo32, and found nothing. The only date that it showed was Oct 13, 07.

I called the people who built this computer and they told me that since I had only put a one time block on it, that if it is a necessary program it will pop up again.

So, I am going to let it ride since my computer is running normally. If it pops up again I will know what to do with it next time. Thanks for your input mikie, I really appreciate it. "Smiles"

thirdfrt!!!
0

Related Stories

COFFEE WITH AN ARCHITECT 12-Step Program for Architecture

By Jody Brown Architecture, pllc

Addicted to architecture? We understand. Here's something that may help ... or not

WORKING WITH PROS Construction Contracts: How to Understand What You Are Buying

By Ventana Construction LLC

Learn how plans, scope of work and specifications define the work to be completed

PETS Garden Alert: 22 Plants to Keep Away From Pets

By Marianne Lipanovich

Avoid potential danger by keeping dogs and cats away from these landscaping and houseplant favorites

RED Trend Alert: Oxblood Red Enriches Autumn Style

By Becky Harris

Straight from the pages of fall fashion magazines, this deep red hue has arrived to warm up home decor and exteriors

GREEN BUILDING What's LEED All About, Anyway?

By Mariana Pickering (Emu Building Science)

If you're looking for a sustainable, energy-efficient home, look into LEED certification. Learn about the program and its rating system here

FUN HOUZZ Everything I Need to Know About Decorating I Learned from Downton Abbey

Mind your manors with these 10 decorating tips from the PBS series, returning on January 5

FUN HOUZZ Don’t Be a Stickybeak — and Other Home-Related Lingo From Abroad

By Mitchell Parker

Need to hire a contractor or buy a certain piece of furniture in the U.K. or Australia? Keep this guide at hand

MOST POPULAR Organizing? Don’t Forget the Essential First Step

By Laura Gaskill

Simplify the process of getting your home in order by taking it one step at a time. Here’s how to get on the right path

HOME TECH 3 Kitchen Contraptions You Won’t Believe

Pizza hot from the printer, anyone? These cooking gadgets harness imagination and high tech — and have price tags to match

LIFE You Said It: 'Don't Use Your Phone' and Other Tips of the Week

By Becky Harris

Memorable tips, tricks and quips from around Houzz this week. What are yours?

Sponsored

More Discussions

UPS needed - which ones?

9

sound missing on Dell

3

Problems with Outlook 2013

0

Upgrading Windows 11 from Home to Pro

2

Any suggestions for a very secure non-web-based email?

3