Ism.exe

Is this a legitimate Windows program,or spyware?
--
Retired Boeing Bill

Retired Bill wrote:
> Is this a legitimate Windows program,or spyware?

The quickest way to get answers to these sorts of questions is to Google
the name. A search for "lsm.exe" brings up a lot of links indicating
that the file is the Microsoft Local Session Manager Service. This same
search also brings up links indicating that a handle leak may occur in
lsm.exe so if you're asking because you have issues and you see this
service running, that may be the cause.

http://support.microsoft.com/default.aspx/kb/933245


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

That MS link you included about a leak was for Lsm, not Ism.....
--
Retired Boeing Bill


"Malke" wrote:

> Retired Bill wrote:
> > Is this a legitimate Windows program,or spyware?
>
> The quickest way to get answers to these sorts of questions is to Google
> the name. A search for "lsm.exe" brings up a lot of links indicating
> that the file is the Microsoft Local Session Manager Service. This same
> search also brings up links indicating that a handle leak may occur in
> lsm.exe so if you're asking because you have issues and you see this
> service running, that may be the cause.
>
> http://support.microsoft.com/default.aspx/kb/933245
>
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

"Retired Bill" <> wrote in message
news:9D11CACC-97DA-44CF-89B8-...
> Is this a legitimate Windows program,or spyware?
> --
> Retired Boeing Bill

It may be ad-ware
see
http://www.microsoft.com/communities...5721333325&p=1

--

Mike Brannigan

Hi, Bill.

Malke's advice still applies: Google is your friend!"

I simply Copied Ism.exe from your original post (It's awfully hard to tell
upper-case I from lowercase l sometimes!) into Google's search box and got
1,240 hits. It looks like there are both legitimate applications and
suspect programs with that name.

Have you scanned your computer for viruses and other malware? Recently?

RC
--
R. C. White, CPA
San Marcos, TX

Microsoft Windows MVP
(Running Windows Live Mail 2008 in Vista Ultimate x64)

"Retired Bill" <> wrote in message
news:6416E935-353A-42F2-8F7F-...
> That MS link you included about a leak was for Lsm, not Ism.....
> --
> Retired Boeing Bill
>
>
> "Malke" wrote:
>
>> Retired Bill wrote:
>> > Is this a legitimate Windows program,or spyware?
>>
>> The quickest way to get answers to these sorts of questions is to Google
>> the name. A search for "lsm.exe" brings up a lot of links indicating
>> that the file is the Microsoft Local Session Manager Service. This same
>> search also brings up links indicating that a handle leak may occur in
>> lsm.exe so if you're asking because you have issues and you see this
>> service running, that may be the cause.
>>
>> http://support.microsoft.com/default.aspx/kb/933245
>>
>>
>> Malke

Bill,

I found a lot of hits for "ism.exe", it could be spyware, but I can't say
for sure.

I don't have it on my Vista Home Premium....
How did you find it?



--
http://get.live.com/wlmail/overview

"Retired Bill" <> wrote in message
news:6416E935-353A-42F2-8F7F-...
> That MS link you included about a leak was for Lsm, not Ism.....
> --
> Retired Boeing Bill
>
>
> "Malke" wrote:
>
>> Retired Bill wrote:
>> > Is this a legitimate Windows program,or spyware?
>>
>> The quickest way to get answers to these sorts of questions is to Google
>> the name. A search for "lsm.exe" brings up a lot of links indicating
>> that the file is the Microsoft Local Session Manager Service. This same
>> search also brings up links indicating that a handle leak may occur in
>> lsm.exe so if you're asking because you have issues and you see this
>> service running, that may be the cause.
>>
>> http://support.microsoft.com/default.aspx/kb/933245
>>
>>
>> Malke
>> --
>> Elephant Boy Computers
>> www.elephantboycomputers.com
>> "Don't Panic!"
>> MS-MVP Windows - Shell/User
>>

I saw it in task mgr, didn't remember if it was any good. I ended that
process and windows immeadiately re-booted. And it's still there and I'm
getting random popup browsers to various web sites. I've tried various spy
and rootkit removers but none remove it???
--
Retired Boeing Bill


"Dave" wrote:

> Bill,
>
> I found a lot of hits for "ism.exe", it could be spyware, but I can't say
> for sure.
>
> I don't have it on my Vista Home Premium....
> How did you find it?
>
>
>
> --
> http://get.live.com/wlmail/overview
>
> "Retired Bill" <> wrote in message
> news:6416E935-353A-42F2-8F7F-...
> > That MS link you included about a leak was for Lsm, not Ism.....
> > --
> > Retired Boeing Bill
> >
> >
> > "Malke" wrote:
> >
> >> Retired Bill wrote:
> >> > Is this a legitimate Windows program,or spyware?
> >>
> >> The quickest way to get answers to these sorts of questions is to Google
> >> the name. A search for "lsm.exe" brings up a lot of links indicating
> >> that the file is the Microsoft Local Session Manager Service. This same
> >> search also brings up links indicating that a handle leak may occur in
> >> lsm.exe so if you're asking because you have issues and you see this
> >> service running, that may be the cause.
> >>
> >> http://support.microsoft.com/default.aspx/kb/933245
> >>
> >>
> >> Malke
> >> --
> >> Elephant Boy Computers
> >> www.elephantboycomputers.com
> >> "Don't Panic!"
> >> MS-MVP Windows - Shell/User
> >>
>

Can't an MS MVP tellme if this is legitimate MS code??? It's not in the
persons answer below you in his home premium but it's in mine. I saw it in
task mgr, didn't remember if it was any good. I ended that process and
windows immeadiately re-booted. And it's still there and I'm getting random
popup browsers to various web sites. I;ve tried various spy and rootkit
removers but none remove it???
--
Retired Boeing Bill


"R. C. White" wrote:

> Hi, Bill.
>
> Malke's advice still applies: Google is your friend!"
>
> I simply Copied Ism.exe from your original post (It's awfully hard to tell
> upper-case I from lowercase l sometimes!) into Google's search box and got
> 1,240 hits. It looks like there are both legitimate applications and
> suspect programs with that name.
>
> Have you scanned your computer for viruses and other malware? Recently?
>
> RC
> --
> R. C. White, CPA
> San Marcos, TX
>
> Microsoft Windows MVP
> (Running Windows Live Mail 2008 in Vista Ultimate x64)
>
> "Retired Bill" <> wrote in message
> news:6416E935-353A-42F2-8F7F-...
> > That MS link you included about a leak was for Lsm, not Ism.....
> > --
> > Retired Boeing Bill
> >
> >
> > "Malke" wrote:
> >
> >> Retired Bill wrote:
> >> > Is this a legitimate Windows program,or spyware?
> >>
> >> The quickest way to get answers to these sorts of questions is to Google
> >> the name. A search for "lsm.exe" brings up a lot of links indicating
> >> that the file is the Microsoft Local Session Manager Service. This same
> >> search also brings up links indicating that a handle leak may occur in
> >> lsm.exe so if you're asking because you have issues and you see this
> >> service running, that may be the cause.
> >>
> >> http://support.microsoft.com/default.aspx/kb/933245
> >>
> >>
> >> Malke
>

The link you sent me to is the exact problem I'm having. I looked at that
site too and every since these popupsare acurring. None of the spyware and
malware and rootkit removers have worked. This is
awful...................... Is this an IE7 vunerability, shouls MS address
it?
--
Retired Boeing Bill


"Mike Brannigan" wrote:

> "Retired Bill" <> wrote in message
> news:9D11CACC-97DA-44CF-89B8-...
> > Is this a legitimate Windows program,or spyware?
> > --
> > Retired Boeing Bill
>
> It may be ad-ware
> see
> http://www.microsoft.com/communities...5721333325&p=1
>
> --
>
> Mike Brannigan
>

"Retired Bill" <> wrote in message
news:888F4DE3-87B3-4D3B-98BF-...
> The link you sent me to is the exact problem I'm having. I looked at that
> site too and every since these popupsare acurring. None of the spyware
> and
> malware and rootkit removers have worked. This is
> awful...................... Is this an IE7 vunerability, shouls MS
> address
> it?
> --
> Retired Boeing Bill
>
>

The link I provided includes the complete process for removal of ISM from
your system (scroll down).
Have you tried this?
It involves booting to safe mode then removing registry entries and on disk
files.

--

Mike Brannigan
"Retired Bill" <> wrote in message
news:888F4DE3-87B3-4D3B-98BF-...
> The link you sent me to is the exact problem I'm having. I looked at that
> site too and every since these popupsare acurring. None of the spyware
> and
> malware and rootkit removers have worked. This is
> awful...................... Is this an IE7 vunerability, shouls MS
> address
> it?
> --
> Retired Boeing Bill
>
>
> "Mike Brannigan" wrote:
>
>> "Retired Bill" <> wrote in message
>> news:9D11CACC-97DA-44CF-89B8-...
>> > Is this a legitimate Windows program,or spyware?
>> > --
>> > Retired Boeing Bill
>>
>> It may be ad-ware
>> see
>> http://www.microsoft.com/communities...5721333325&p=1
>>
>> --
>>
>> Mike Brannigan
>>