winsass.exe is a Trojan W32.Rbot-AUO. winsass.exe opens a back door on IRC channels. winsass.exe spreads via open network shares. Related files: %System%\winsass.exe More info: http://www.sophos.com/virusinfo/analyses... Removal: Kill winsass.exe process and remove winsass.exe from Windows startup using antivirus (also check How To Remove section)Startup Optimizer.