What is lsass.exe? Should I remove it?

by - - | Extension: exe

lsass.exe is the Local Security Authority Service by Microsoft, Inc, which is responsible for security policies enforcement and handles other Windows Security Mechanisms. Lsass.exe also verifies the identification of the user when he is logging on computer and generates the process responsible for his authentication when using Winlogon service. The lsass.exe process mainly operates in the system through its ability to create access tokens.

Note that lsass.exe is legitimate file which is vital to the system and needed for the PC's normal functionality. It is located in "C:\WINDOWS\SYSTEM32\" and can't be ended using the Task Manager.

lsass.exe is a system process, it is a safe file and does not pose any threat.

WARNING!!!

Some parasites, for example sasser worm, use lsass.exe filename to deceive the user by hiding their processes under the name of this file. Lsass.exe filename is used by OnTarget, Pexmor, Rontokbro, Satiloler, Crutle, Wowcraft and other variants of these malware parasites. So, you may have a virus that runs the same named process and silently works in background and performs harmful actions. In order to check your PC, run a full system scan with reputable anti-malware programs. We recommend using PlumbytesWebroot SecureAnywhere AntiVirus and Reimage.

Verdict - status of the file:

diagnosis required
2-spyware.com research center gathers and checks all information related to lsass.exe. We ask ourselves the questions like: Do this file pose a threat? Does the filename is exploited by Malware? and other. The final status of the file is purely our opinion.
DIAGNOSIS REQUIRED status means that this filename is exploited by the viruses. There can be the
dangerous file with the same name as the safe file. Use the Advice below:

Advice:

If your Computer seems Sluggish, or you see some unwanted Advertisements, redirects to the strange websites, then we recommend you to scan the system with reputable anti-spyware program. Do some FREE scan tests and you will see if there are some unwanted applications, whitch might be responsible for the tab stability of the system.
It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
Plumbytes
Malwarebytes Anti Malware
Webroot SecureAnywhere AntiVirus
lsass.exe screenshot
lsass.exe

Removal guides in other languages

Information updated:


Comments on lsass.exe

0
0
Guest
1. by Guest. 07/09/2005. 12:09:48
if i use internet , it will shutdown the computer in 60 second
lsass.exe, how can i fix it
0
0
Guest
if i use internet , it will shutdown the computer in 60 second
lsass.exe, how can i fix it
0
0
Guest
we have a problem about lsass, can you help me? how i remove this virus?
0
0
Guest
We have a problem in our company determining what day and time the virus entered the PC, when and how it affects the lsass.exe and what virus affects such file. Is it possible? we have until june 22, 2005, 0900 AM to know this or we will be fined. Pls help us
0
0
Guest
"system is shutting down. any unsaved changes will be lost. initiated by NT AUTHORITYSYSTEM
0
0
Guest
this file is terminate unexpedly and computer restart again and again .
please tell me what to do to resolve this problem.
thanks alot.
1
0
Guest
do I need to allow lsass to connect to the internet?
0
0
Guest
When I try downloading any file it gives me an error that my current security settings do not allow this file to be downloaded..I tried downloading the lsass.exe scanner & remover and am getting the same error..Active x control is enabled also..any one have a fix
0
0
Guest
Once the box comes up telling you your system is going to shutdown, go to run, then type in cmd.exe once a black box comes up. Type in "shutdown -a" (without quotes). And this will stop your computer from shutdown. THEN DELETE THE FILE USING lsass.exe its really not that hard. But this is a quick fix to stop the shutdown. ; )
0
0
Guest
How can i get in to Windows, an dhow can i get this virus deleted ?
More comments »

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)