• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

damn nero 6 software messed up my pc

S

Solodays

Senior member
I just brought a memorex dual dvd-rw drive, the drive installation when smoothly, but eversince i installed the nero 6 memorex suite software that came with the dvd-rw drive and restart my pc for the software to take effect, eversince then i can't get back to windows, a system error message pop's up and then restarts again by itself and does the same thing over and over again. I really dont want to re-format my pc, there are alot of crucial files on the harddrive.

here's the error message:
Isass.exe system error
when trying to update an password, the return status indicates that the value provided as the current password is not current.


I have also tried safe mode, start normally etc..none works. Im wondering if there are any way to uninstall the nero software without going into windows, maybe that'll fix the problem.

plz help!
 
Isass.exe (lower case isass.exe) is part of a trojan downloader virus known as TROJ_ISAPASS.A (or Futro Trojan) that deletes .PWL (contain your local user names and passwords) files on the PC and performs key logging to capture your passwords and send them to a central location for malicious individuals to retrieve and gain access to your computer.

If you can't even get in to Safe Mode, recovering from the infection could be very difficult. If you have access to another PC (I assume you do since you posted here), you might want to create a Norton (or McAfee, or whatever your preference) boot floppy on that PC and run it on the computer that is having problems to see if it can remove the virus.

If that doesn't work, try using the Last Known Good boot option (use F8 as soon as you turn the computer on). If that will let you get in to Windows, immediately run a full system scan with your current anti-virus and spyware removal software on the PC to remove the threat.

If you aren't able to do either of these, you might have to format and re-install Windows, but definitely check back here for additional suggestions before you do that.
 
you might want to create a Norton (or McAfee, or whatever your preference) boot floppy on that PC and run it on the computer that is having problems to see if it can remove the virus.
Click to expand...


create a Norton boot floppy? what do you mean a norton floppy and scan it?


I didn't know this was a virus since it was fine todays, right after i install the nero programs and restart to take effect, then this problem showed up.

well..this is not my computer, i'm just installing the DVD drive for a friend. not sure if his pc is already infected with this virus before i install the dvd drive or not.

how'd you know about this isass.exe virus?
 
Yes, create a boot floppy (I think Norton calls it an Emergency Recovery Disk) and boot to that floppy disk on the computer that is having problems and scan the system from the floppy.


I've dealt with the Isass.exe virus before and it's not pretty, so I recognized the file name. I was able to get rid of the virus by running a virus scan from a boot floppy, so hopefully your results will be similar.

I go the information that I typed earlier from this site that came up in a simple Google search for the file name.
 
I did not know that you could create a norton floppy and scan without windows at the start up. so you just create a floppy disk using the norton program? I currently dont have norton, can i download a demo version from download.com and create one from there? could i create a floppy with ad-ware , spybot destroy?

so you dont think this isass.exe is associated with the nero program installation?
 
Definately try the "Last known good configuration..." option in the boot menu. Worst case you could try to do a MANUAL registry reset to the original factory registry settings, and then immediately afterwards boot into safemode and use system restore to roll the system back a week or more (don't just roll it back a day before this problem occured - that often doesn't work due to the way System Restore works).

That should undo the Nero install which triggered the problem. Then I would highly recommend you run a FULL virus scan in SAFE MODE.

Instructions for a manual registry reset here: http://support.microsoft.com/kb/307545

Hope this helps...
 
where do you create this norton floppy from? if you are talking about within the Norton program then i couldn't find Emergency Recovery Disk in Norton.
 
Originally posted by: FlyingPenguin
Definately try the "Last known good configuration..." option in the boot menu. Worst case you could try to do a MANUAL registry reset to the original factory registry settings, and then immediately afterwards boot into safemode and use system restore to roll the system back a week or more (don't just roll it back a day before this problem occured - that often doesn't work due to the way System Restore works).

That should undo the Nero install which triggered the problem. Then I would highly recommend you run a FULL virus scan in SAFE MODE.

Instructions for a manual registry reset here: http://support.microsoft.com/kb/307545

Hope this helps...
Click to expand...



yeah, i was thinking of going into recovery console. Do you really think this is cause by the Nero installation or some virus torjan? that site you linked seem helpful, i'll give it a try.
 
Actually, since I answered your post I've become aware of the Zotob virus (and many varients) which has spread like gangbusters the last few days, and that MIGHT be the culprit: http://www.f-secure.com/v-descs/zotob_a.shtml

It does cause the computer to reboot repeatedly.

I THINK you misspelled the process name. if it's Lsass then it's the Optix virus. If it's isass then (upper case i and lower case L look the same in arial) that's a legit windows service which happens to be the one affected by the Zotob virus.

My suspicion is that you do have the Zotob virus. I'd connect that drive as a spare on a another computer and do a thorough virus scan on it for starters.

After that if you still can boot it, worse case that manual registry restore I posted should at least allow you to get into safe mode and use system restore to go back a few weeks before the problem occured (and then I would recommend you immediately install the Zotob security patch).

Hope this helps...


 
My suspicion is that you do have the Zotob virus. I'd connect that drive as a spare on a another computer and do a thorough virus scan on it for starters.
Click to expand...


You mean take out the HD and install it on a working pc and scan it with that pc?
 
Originally posted by: FlyingPenguin
Yes, that's what I mean.
Click to expand...

Would booting off a cd (e.g. the Ultimate Boot CD) accomplish the same thing? If so, he might want to get the latest version (if the antivirus program has been updated for the zotob virii) and just try it that way. It might be less effort on his part.

If not, your method is the tried and true way.
 
No., as long as you don't run any programs from it.

But it would also be prudent to make sure your anti-virus is enabled and definitions are up to date.
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top