Informationen über die lsass.exe Datei

"lsass.exe" ist der lokale Sicherheitsdienst. Er überprüft die Gültigkeit der Benutzeranmeldungen und Zugriffsrechte für Ihren PC. Mehr Infos

Wichtig: Die Datei "lsass.exe" befindet sich im Ordner C:\Windows\System32. Wenn das nicht der Fall ist, handelt es sich bei lsass.exe um einen Virus, Spyware, Trojaner oder Worm! Überprüfen Sie dieses z.B. mit Anti-Spy.Info.

Viren mit gleichem Namen:
W32.Nimos.Worm - Symantec Corporation
W32.Sasser.E.Worm (Lsasss.exe) - McAfee
W32.HLLW.Lovgate.C@mm - Symantec Corporation

So urteilen andere User über diese Datei

Bewertung Urteil Verfasser it works depends and shut down the system at random Altair Microsoft Local Security Authority Service: Windows critical process for user authorization and loging Martin windows crashes by the sasser worm. When it is infected it doesn't run neither regedit. anthony symantec associated the "sasser worm" with this Anthony Falls Windows wieder automatisch runterfährt, hat man den Sasser Virus. Man kann das unterbrechen indem man: Start - Ausführen und dann "shutdown -a" eingibt. Ein Remove-Tool gibt es auch.  Quelle: Link Stephan Part of the Windows OP system Lisa As before has been mentioned, a completely innocent system process and a dangerous virus come with the same name. No need for panic but keep your eyes open. Virus removal information can help determining whether you're dealing wtih fake lsass.exe or not. LordScav PC shuts down the system with code 1073741819  Quelle: Link Mark It is required for Win2000 & XP to work. Viruses (Sasser) attack it! Joe If you have the Sasser worm: abort shutdown by going to run and enter cmd, then type shutdown -a, make sure you update windows entirely  Quelle: Link thanks Computer reboots at random, patch helped immediately Robert When I'm connected to the net. it times me out and reboot my computer Antonio Bell Prozess beenden fährt PC herunter. Der lokale Sicherheitsdienst lsass.exe steuert die Richtlinien für User. Wenn Sie nicht als Administrator angemeldet sind, und nur auf bestimmte Dateien zugriff haben, ist die lsass.exe dafür verantwortlich. Versuchen Sie sich mit einem falschen Usernamen anzumelden, wird die lsass.exe dieses feststellen und den Zugriff auf das Betriebssystem verhindern. This file has been causing problems lately... it keeps on "terminating unexpectedly", so the whole computer has a system shutdown in one mintute Githoniel There was a virus in my pc with the same name. Whenever I enter to the net it infecting in 20 seconds. I cleaned it very difficult by updating windows security and using special cleaners for this virus. Mehmet Ali ALTAN im windows eingabefeld "shutdown -a" eingeben....dadurch wird der pc nicht heruntergefahren...ist aber nur eine vorübergehende lösung da der virus...noch nicht entfernt ist frank Lsass.exe is not a virus Sawyer its either the sasser worm or its not the problem JoSe AnDrEs McAfee says nothing about this virus creating any file named lsass.exe. It does say that the virus causes the computer to reboot by crashing the lsass.exe process. Subsequent error messages mention this legitimate process as having failed. There is NO need to remove lsass.exe it is a vital system file in a networked computer.  Quelle: Link Marshall has a key in registry wich allows ir to reload each time you conect to the net. use a virus removal tool in safe mode and you may get lucky  Quelle: Link Kalhau I was infected by Sasser. This file is not reliable. Farid sabotages Messenger restart in 60seconds error Matt Error messages containing lsass.exe indicate Sasser-worm. lsass.exe is NOT part of the worm, it's save. Cruel Device As has been said, the worm exploits a bug in lsass.exe that causes it to crash. Lsass.exe is NOT the worm itself. If it were a worm, it certainly wouldn't be advertising itself by displaying a message with its own name in it. Troy This is not a virus, the Sasser worm attacks the lsass process and that is why your computer may shutdown, since the worm stops the lsass process from working Samantha Lsass.exe (lsass) and Isass.exe (isass) is not the same but looks like same...lsass is good, isass is the bad one gunni I was infected by this 30 minuteas after going on the net Bob Der lokale Sicherheitsdienst lsass.exe (Local Security Authority Subsystem) steuert die Richtlinien für User. Aus gegebenen Anlass: Es gibt einige hilfreiche Links zum Sasser Virus, welcher sich der lsass.exe bedient. DataFighter The Windows File itself isn't dangerous, what everyone here is describing is a virus that fakes the windows filename - so lets not get paranoid about every lsass.exe we see... Martyn Just use Windows Explorer to check the date of the file against other files in c:\windows\System32. If you find lots of files with the same date it usually means it's a required Windows file. Another way to check files is to do a right-click on their name then select Properties and look at the various info listed there. Helvetica i have done research on this program and i think people are getting confused with sasser virus this lsass is a system program if you remove it your computer is left wide open for an attacker as lsass.exe is a security program to verify computers on your network so dont panic! hackman In the Windows/system32 folder it is a necessary file. Anywhere else and it's a virus! Caution, Blueyonder will tell you to search for sasser files and if you find lsass.exe to delete it - don't if it's the legit one! id1250 lsass.exe is part of the operating system with file extention .exe.hdmp or .exe.mdmp its part of the sasser worm virus. It looks like its gone when it has not. don't know how to remove it totaly as virus software dosen't. Jon Sasser victim A default startup process which controls log on security. The following link provides a list of default startup processes for W2K..  Quelle: Link Die Salomon If it is a System proces it isn't dangerous, But if the process is in your name it's a virus Myr gue pusing ngadepin masalah ini, karena kasusnya masih jarang. dan terjadi pada saat koneksi ke internet icha Isass.exe and lsass.exe is allmost the same, they can be mixed up and are hard do repair VirusKiller harmless security file that can crash and cause shutdown, if this happens go into c:\windows\System32 and run lsass.exe to bring it back to life :) Smash lsass.exe doesn't control security, it's merely used by winlogon to authenticate users. Winlogon will then react on whether the user is properly authed or not. Die, Die Salomon PC shuts down the system with code 1073741819 causes the computer to reboot! John It causes your machine to reboot over and over Addy Authentication service located in various places, but should only run out of c:\winnt\system32. Other seemingly safe locations are C:\winnt$NtServicePackUninstall$, c:\winnt\$NtUninstall*, c:\winnt\ServicePackFiles\i386, or c:\winnt\system32\dllcache. BrianG Windows critical updates include this file. It is imperitive that you have the latest updates to be protected from viruses/worms/trojans Doug It's just the same name as the Sasser virus, but it is a f*cking Windows Process  Quelle: Link Dj Project Ho This is due to the sasser virus (and variations) attacking the whole system 32. It will cause your computer to shutdown in approximately 62.5 seconds. In the code: the time to shut down - 62.5s is found. Whenever you access the internet certain sites (with http) activate it; then you have the allocated time to shutdown. Other variations include shutdown times of 30s and 124s. The worm is rapidly transmitted over a LAN and replicates instantly. However, the good news is: it is nothing that antivirus doesn't handle. DaV_serveR Nicht viel, nur sie von einem Deutschem (?) programmiert wurde. Hoffentlich ist er im Bau, wenn nicht sollte er mir besser nich übern weg laufen. Dennis I have this on my computer and it's working fine. No problems with restarting or otherwise... Mike B. because not securty all files  Quelle: Link palani.s its reboot the ststems with in 1 min ramesh_2k12000@yahoo.com it will reboot my pc unexpectedly and randomly,without any special reason santiago Very annoying... Always reboots my computer before the system updates have a change to download! It's a totally new comp too, so I don't see how it could be a virus. xxx Sasser attacks this Windows process. lsass.exe is not a virus itself, it is shutdown by the worm. help I don`t know nothing , but I need help getting rid of it Sasser abuses it. Update Windows often to prevent problems. Kachiko When i seeee (YOUR COMPUTER WILL BE SHUTDOWN AFTER 60 SEC) simply go to ms dos and type "shutdown -a"...........  Quelle: Link Naseer It causes many unvolentary shutdowns, shame on MS? Jarmo Its just a normal OS file. If you have problems with your computer shutting you down saying there was an error with it...Then you should look into the sasser virus. Once you update to the windows xp service packet 2 you will have the lsass.exe file in two if not 3 folders. All three in windows one in the service packet folder one in the system32 folder and one on some computers is in a folder called SoftwareDistribution. If the file is in any or all of these directories it is fine. Solace Real windows file (unless tampered with). Love reading others lack of knowledge here on the subject..  Quelle: Link Poindexter i know that i had service pack 2 for xp and when i removed it back to the previous service pack 1, it gave me lsass.exe and services.exe is missing and the screen goes blank viktor vasquez Seems to keep my hard drive busy Lloyd Plueschow This file compels the PC to reboot showing one minute alert message. Aatif Ijaz It reboots your system at any time jami i've deleted 6 of the same virus in last few hours called W32.HLLW.Gaobot.gen with filename lsass.exe so somethings up Travis This is not a harmful process Prashan some from my LAN said that he do it (shut down my pc) and i heard there is a patch for windows that stop's it but i can't find it if you find it plese please tell me @ radumirelro@yahoo.com Radu Mirel (Romania) it works depends and shut down the system at random Anup Deb My system always used to shut down when i opened the internet. This was a problem when i had to send mail and while studying. When I ran Stinger i found that my system was run down by viruses i didnt knew existed on m system. Thanks to Stinger. I am also going to update my OS with the patch from MS Anuradha Jaganathan Isass.exe (the virus version) will shut down your computer when you just made a connection to the internet for a couple of seconds/minutes. After that, it will give you a warning window, that the computer will shut down after __ seconds  Quelle: Link Bastiaan there are 2 proceses: Lsass and Isass (in lowercase: lsass na isass). If you have the proces starting with i -- that's the worm. If you have proces starting with l -- that's windows file for logon :) Anyone who thinks this is "dangerous" has no idea what they're doing. This is a core security authentication file. Anyone who marked this dangerous is confusing it with "lsas.exe," the Sasser virus. A S Windows Operating System File, Service Authentication. If not in system32 folder, then it is a virus, otherwise completely harmless, and required to run the operating system. ph Symantec did not see anything weird. But it sure seems like it's taking up alot of processor power. Also svchost seems to be running quite high Charlie There is very important that you see in Windows Task Manager\processes is it lsass.exe or lsasss.exe !!! Lsasss.exe is Saser virus! zack It reboots your system at any time giving me 1 Min to close the application. I have no idea how to correct this problem Jana Legitimate XP file, is targeted by viruses, is NOT a worm/spyware. Infection of this file is due to negligance of user. Mat. M. (System Developer) It stop others from viewing your file over the LAN Marc Lesther Not a worm - Sasser has different filenames  Quelle: Link Sue looks it locks and shutdown the pc euge its normal windows proces... ;-) threw away my computer  Quelle: Link jim jacobs It cause shutdown  Quelle: Link Babanelos Sakis It causes system hangs and shut downs. if you are having problems opening regedit, try booting in safe mode and then going to the regedit icon and renaming it to : regedit.scr : This opens the file as a Screen saver and will open regedit. :) MunkY lsass.exe...i'm not sure if it is the cause of my .doc converted to .exe file as i save it in diskettes.... sonic Lsass.exe have the same name then the file in system32 directory. Open the internet, then an error box from Microsoft appear(send the prob. to Microsoft...) then click dont send. A timer is lauch at this moment and you have 1 minute to find something. 1 solution is to fdisk /mbr because if you try to format c:, the worm still on your hard drive. Not dangerous but very bored! Bob The lsass.exe file is needed for logon authentication and is needed especially in a client/server environment. The sasser virus is a completely different thing, if your computer begins a countdown to shutdown when you open a web browser or when you start up messenger, then you are infected by the sasser worm. Get cleaned up by running AVG free from www.grisoft.com Timmy McTimmunce LSASS.EXE is necessary for the XP OS. Symantec has a removal tool for all variants of Sasser which I would recommend you run. Before you run the tool, ensure that you have disabled System Restore. Clean the infection (if any) and update your OS by installing or re-installing the latest service pack and critical updates SuperMe lsass.exe is part of windows OS. If you delete it, or confuse this with a virus, you are retarded and shouldn't be using computers. Check the spelling and it's location people!!!!! not you Legitimate part of WinXP that sasser worm can exploit. MS site has free check to confirm whether your file is OK or not.  Quelle: Link Steve M. Its an .exe file but doesnot harm . It irritates a lot due to abrupt message for shutdown within 60 secs. Rohit if lsass.exe can provide a shutdown im not so sure. but if than try it with shutdown -a .. only on XP, and not other admin Lsass is a normal windows system process, but it is part of a very large security hole in windows. You have to download the patch from microsoft to fix it. You can disable the shutdown by running services,msc from the run option in start menu, selecting Remote procedure call, and selecting the recovery tab, and setting all of the boxes to "restart service". Preacher It makes the computer not able to get to Win (normal & safe mode). Repair or format needed. Michael It causes shutdown, spreads in the network and generates a huge traffic.  Quelle: Link Amit Ganguly it reboots ur computer and disables the internet / network Jens it works depends and shut down the system at random Mathias Trolle Nielsen Bitte helfen Sie anderen Benutzern, wenn Sie mehr über lsass.exe wissen. Ihre Meinung:  --- keine Wertung ---  1 (sicher)  2  3 (neutral)  4  5 (gefährlich) Was wissen Sie über diese Datei: Link für weitere Infos: Ihr Name:

Search Results for lsass.exe in

• Google
• Discussion boards

Weitere Dateien und Prozesse