Norton Internet Security blocking lsass.exe

I have a Dell 9100 with XP and Norton Internet Security. I am getting the following alert from NIS:

Event Details:
Time: 9/5/2005 9:03:28 AM
Actor: C:\WINDOWS\system32\lsass.exe (PID=824)
Target: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
Action: Unauthorized access
Reaction: Unauthorized access stopped

I understand lsass.exe is needed for XP to operate properly. Scans show no viruses, etc. Does anyone know why NIS is blocking lsass.exe?

Thanks.

 

to be shure you have LSASS.EXE and not the bad ISASS.EXE

Do this press ctrl-alt-del click processes and type the letters I and see
if it go to ISASS.EXE if yes bad news you have a virus if not your okay.

 

Clark wants you to type the i key

the way he typed it makes it look like the L key...

 

In processes, lsass.exe is listed. Lsass.exe is not listed. I guess I have the virus. This computer was delivered in July 2005 from Dell with Norton Internet Security operational. Norton apparently has found the virus, but has not removed it.

Do you have suggestions as to its removal?

 

I now understand. isass (Isass) is the worm. lsass (Lsass) is the legitimate windows file. Thanks for the help.

 

if you do have the bad guy, i'd hop over the spyware section and post there. make sure you read all the pertinent sticky's before posting. namely the HJT sticky and the Basic Spyware removal sticky. best of luck to you