Score UserComments If there is a space before ".exe" and it's started from HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, it is a virus. If not, probably a worm or worse: Sasser! mani This filename is used by some virus (in a different location though) and will be used to execute code. The lsass.exe which shuts down users PCs is the W32.Sasser Worm.
Score UserComments Lsass.exe is a process used by Microsoft's Local Security Authority Subsystem Service. splash_ LSASS.EXE or lsass.exe (Local Security Assistant is system file located in C:\Windows\Sytstem32, whereas ISASS.exe or isass.exe is the virus file Deutsch: Also, der Prozess lsass.exe ist in Ordnung, allerdings muss Use the resmon command to identify the processes that are causing your problem. After the file has been renamed, close the find window, click Start, Run, and type: nbtstat -R and press enter. http://www.neuber.com/taskmanager/process/lsass.exe.html
This file is required by Windows and works just fine. Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. xxx Sasser attacks this Windows process. Other verisons of lsass.exe (different directory, different capitalization on the file name) probably are.
If not in system32 folder, then it is a virus, otherwise completely harmless, and required to run the operating system. It verifies the validity of user logons to your PC/Server. Hit the internet connection properties and enhance the firewall if you use XP. Mostly you do not need to reboot.
The Sasser worm has a different filename. well its actually 'lsass.exe' and 'Isass.exe'. just have a good av and firewall installed and you should be fine although having said that i have got past norton security recently with this vuln with rBot. https://en.wikipedia.org/wiki/Local_Security_Authority_Subsystem_Service It verifies the validity of user logons to your PC/Server.
Naseer It causes many unvolentary shutdowns, shame on MS? The following link provides a list of default startup processes for W2K.. now you have a lot of time at your disposal to think about the problem. Don lsaas.exe has come up within a virus check and for all everyone keeps mentioned sasser virus this has identified troj_delf.db as the virus.
Destroy CDs/DVDs in Burning situation. this will give u time to work on it AB It affect logon G Patterson It's really dangerous when is infected 101 random shut down. It looks like its gone when it has not. I have no idea how to correct this problem Jana Legitimate XP file, is targeted by viruses, is NOT a worm/spyware.
Ritesh Bhardwaj it restarts the computer after few minutes gurpreet I dont know much.. help I don`t know nothing , but I need help getting rid of it Sasser abuses it. Bob The lsass.exe file is needed for logon authentication and is needed especially in a client/server environment. I did a reinstall of the OS.
if u r adminstrator of the computer Iftikhar aziz Don't confuses Isass.exe with Lsass.exe, under the right font they look the same. "I" is the virus "L" is a real system Lsass.exe, a perfectly legit running process not doing any harm. Madison To my knowledge, lsass.exe is NOT dangerous. That's why, use Linux, Solaris, MACOSX, uff, everything but not windows.....
Maur whenever i connect my ethernet cable to my pc, an error pops up with some error code which shuts down the computer within 60 seconds. The program is not visible. This should help you.
don't know how to remove it totaly as virus software dosen't.
If attacked you will have problems that even windows updates won't clear. But the vulnerability of it makes it dangerous. Firon LSASS.EXE does not seem to be a worm but part of network authentification process; check system32 directory it must be in there Andres when i enter into the net it No.
Paul THIS IS A COBRA FOR ANY COMPUTER JHAKKAS lsass.exe is not a virus. Foga Everywhere Claims It To Be A Windows App, But When I Didnt Block It From The Net, None Of My Internet Required Applications Worked. i think it is a real danger because i've got it and he produced me some damages...crashed hdd,can`t open my optical drives...that`s all Stan Mircea firewall caught it trying to talk lsass = local security authority subsystem serviece Kematian Well not to shit like other guys did i will tell u wot exact virus it is in 2 steps ( in forward
To what I know, it operates within Windows 7 and is a module to assist in the Winlogon process. it lurks within your network... Please help improve this article by adding citations to reliable sources. flat.
NEO if your computer begind to shutdown go to run then cmd and type in shutdown -a and it will stop it but only do this while you are virus scanning rahul soni Not much, but when the 60 sec thing comes up, go to run and enter shutdown -a. Once you have selected delete on next boot the file can then be right-click / deleted immediately See also: Link JMR There is also another file named "lssas.exe" Pay close attention In my case it was quarantined via TrendMicro but, anyway it affected most of our servers.
Lsas.exe is een systeem process, het is veilig en bevat geen enkel gevaar. Isass is evil... ph Symantec did not see anything weird. However, the good news is: it is nothing that antivirus doesn't handle.
Tracey system shutdowning sure wish someone would just say it in lay man's terms how to get rid of these 'timeout' and computer freezes. Please, i need help here. Turn off your modem before you start up your computer to give you time without the shutdown box popping up and shutting you down!