Welcome to Process-info.org library
Process-info.org is an online library of Computer Operating System's Processes, which helps you to identify processes running at background of computer operating system or at remote computers on your network.
Process-info.org contains a growing database of executable processes (mostly with .EXE extension) and DLL libraries. You can search for processes through search box or navigate alphabeticaly by starting letter of process name.
It is assumed that users are familiar with computer operating system they're using and agree with suggested changes. Process-info.org will not be held responsible, if changes you make cause a system failure.
sass.exe
Troj/Funsta-A
Warning! Potential Security Hazard!
System process “sass.exe” is reported as a Virus and Trojan!
Brief description of process
“sass.exe” process is reported as a Trojan, also known as a Trojan Horse. Trojan is a part of software, called malware (Malicious software). Trojan appears to be a friendly, relative secure application, for example a screensaver, but the main goal of Trojan application is performing hidden background tasks, especially installing a virus or backdoor application into operating system of victim. It can result, for example, into enabling remote access to computer, stealing data like bank account access, passwords stored in computer etc. Trojan can be received by email as an attachment (screensaver, multimedia postcard) or can be downloaded from internet (keygen, software for free, etc.).
“sass.exe” process is reported to be a virus. Virus is computer application, which can infect computer, replicate, modify (morph) and distribute itself to another computer (by internet, CD, DVD, Blueray, USB Flash disks, etc.) – it all can be happened without approval or knowledge of user. When virus is executed, it may cause damage to data stored in computer, it can change operating system settings, change performance of computer (it can eat free memory), it can modify networks settings and slowdown network connections. Viruses are mainly distributed over internet, as attachment in e-mails, downloaded from not trusted web sites, you can receive a virus from somebody in your contact list on your favorite instant messenger (ICQ, AOL, Yahoo messenger) as a file.
What to do with this process?
sass.exe
Reported as Virus
Yes!
Reported as Trojan Horse
Yes!
Reported as Spyware, Adware
Process status unknown
Developer
Part of
Troj/Funsta-A
Related news
Showing news related to process “sass.exe”
September 25, 2009 1:51:00 PM CEST
Backdoor.Win32.Clampi.a – This Trojan spy program is designed to steal confidential user data and remotely manage the victim machine. It is a Windows PE EXE file. It is 470 bytes in size. Installation When launched, the Trojan creates the following file: %AppData%\.exe
April 15, 2009 11:17:00 AM CEST
Trojan-Dropper.Win32.Agent.albv – This Trojan has a malicious payload. It is a Windows PE EXE file. It is 23552 bytes in size. Installation The Trojan copies its executable file as follows: %WinDir%\system\svhost.exe In order to ensure that the Trojan is launched automatically when the system is rebooted, the Trojan adds a link...
September 28, 2009 1:21:14 PM CEST
Trojan Downloader.Agent.UZM – A new Trojan Downloader was spammed today. Trojan is attached in zip archive to emails in HTML format with subject "Hot game" and body text that claims some Angelina Jolie or Lara Croft undressing game. xgame.zip attachment contains xgame.exe (20992B) which drops executes and deletes kernel driver C:\WINDOWS\System32\drivers\runtime.sys and downloads another downloader smartdrv.exe. runtime.sys runs injects and hides Iexplore.exe process and downloads another components. xgame.exe is detected as Trojan Downloader.Agent.UZM, smartdrv.exe is detected as Trojan Downloader.Agent.UZN, runtime.sys is detected as Trojan Downloader.Agent.THW and other downloaded components are detected as several variants of Trojan Backdoor.Ntrootkit.
October 5, 2009 3:55:41 PM CEST
I-Worm/Nuwar – We have a new wave of spammed mail messages containing link directing users to website where the worm could be downloaded. Emails contains short text and IP address of currently working pages with worm. In this case downloaded filename is withlove.exe and it's about 115kB in size. Websites and worm files changes every few minutes. AVG detects withlove.exe as I-Worm/Nuwar.L.
September 28, 2009 1:21:14 PM CEST
I-Worm/Nuwar – Propagation method of new Nuwar variant is still similar to its precedessors. Spammed mails with link in IP format directs users to the worm web pages where the users are prompted to download one of the worm files with the name funny.exe. Names of other downloadable files are kickme.exe and foolsday.exe. AVG detects this threat as I-Worm/Nuwar.R.
