Nibble Guru - Computing queries demystified Sunday, November 23, 2008
Home
My Account / Register
Login / Logout
Post your Problem!
Search

About Us
Contact Us



List Home > Operating System > Windows NT/2000/XP/2003 >   [ Post New Problem ]

Welcome back !
TrackingID : 1579
Posted : Monday, July 05th, 2004 06:54:17 AM
By : ashutosh
lsass - lsass.exe process - Spyware ?Configuration:
I have a process lsass - lsass.exe running. Is it a spyware? Operating System : Microsoft Windows 98, XP Dual Boot
CPU/Processor : Intel Pentium III 900 MHz
RAM : Actual:256 MB Max:2048 MB

Related Problems :
Comments :
Re: lsass - lsass.exe process - Spyware ? by Anonymous Ghost on July 05th, 2004 06:55:53 AM
No, this is a system process.

Process File: lsass or lsass.exe
Process Name: Local Security Authority Service
Description: Windows Local Security Authority Server Process handles Windows security mechanisms. It verifies the validity of user logons to your computer or server. Technically, the software generates the process that is responsible for authenticating users for the Winlogon service.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): None
Re: lsass - lsass.exe process - Spyware ? by tabriz on October 26th, 2004 12:33:11 AM
viruse !!
Re: lsass - lsass.exe process - Spyware ? by Anonymous Ghost on November 10th, 2004 12:45:42 AM
i have installed 2000 professional in my system but when i boot my system and connect to internet after some while my system reboot automatically
Re: lsass - lsass.exe process - Spyware ? by christopher on November 14th, 2004 06:59:00 PM
Any problems with rebooting or excessive CPU usage etc, are all caused by the internet worm called Sasser which exploits a vulnerability in unpatched Windows NT-based machines (which all use lsass.exe as part of their normal functioning).

lsass.exe on its own is not a virus of any kind, but a weakness in it is exploited by this worm virus to do things such as reinfect other machines (by scanning IP ranges) - this can cause some machines to reboot, as the IP scanning is done quite aggressively.

First of all, update your Windows machine from the Windows Update site, http://windowsupdate.microsoft.com . Then, head to http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html and download - AND RUN! - the Sasser removal tool.


Then update your virus checker definitions, as if it isn't picking up Sasser, and you DO have up-to-date virus definition files, you need a new virus checker.
Re: lsass - lsass.exe process - Spyware ? by Anonymous Ghost on December 26th, 2004 04:35:40 AM
Original file is not related to security threats, but it is used by some viruses. lsass.exe

Related Problems :
Post a Note :
UserName (not required in anonymous posts)
Password (not required in anonymous posts)
Post Anonymous (check this only if you wish to post anonymously.)
Subject
Comment (limited HTML allowed)



List Home > Operating System > Windows NT/2000/XP/2003 >   [ Post New Problem ]
Copyright © 2001-2008, Nibble Guru