
isass.exe
Why hasn't norton picked this up??
edit - hang on, it's actually Lsass.exe but with a lower case 'L' which makes it look like the sasser version which is 'isass' with an upper case 'i'. Look like the version I've got is a legitimate part of Windows.