Information about lsass.exe file

"lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC/Server. It generates the process responsible for authenticating users for the Winlogon service. This process is performed by using authentication packages such as the default Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates inherit this token. More info

Note: The lsass.exe file is located in the c:\windows\System32 folder. In other cases, lsass.exe is a virus, spyware, trojan or worm! Check this with Anti-Spy.Info.

Virus with same name:
W32.Nimos.Worm - Symantec Corporation
W32.Sasser.E.Worm (Lsasss.exe) - McAfee
W32.HLLW.Lovgate.C@mm - Symantec Corporation

User feedback

Rating Opinion From it works depends and shut down the system at random Altair Microsoft Local Security Authority Service: Windows critical process for user authorization and loging Martin windows crashes by the sasser worm. When it is infected it doesn't run neither regedit. anthony symantec associated the "sasser worm" with this Anthony Falls Windows wieder automatisch runterfährt, hat man den Sasser Virus. Man kann das unterbrechen indem man: Start - Ausführen und dann "shutdown -a" eingibt. Ein Remove-Tool gibt es auch.  link for more info Stephan Part of the Windows OP system Lisa As before has been mentioned, a completely innocent system process and a dangerous virus come with the same name. No need for panic but keep your eyes open. Virus removal information can help determining whether you're dealing wtih fake lsass.exe or not. LordScav PC shuts down the system with code 1073741819  link for more info Mark It is required for Win2000 & XP to work. Viruses (Sasser) attack it! Joe If you have the Sasser worm: abort shutdown by going to run and enter cmd, then type shutdown -a, make sure you update windows entirely  link for more info thanks Computer reboots at random, patch helped immediately Robert When I'm connected to the net. it times me out and reboot my computer Antonio Bell Prozess beenden fährt PC herunter. Der lokale Sicherheitsdienst lsass.exe steuert die Richtlinien für User. Wenn Sie nicht als Administrator angemeldet sind, und nur auf bestimmte Dateien zugriff haben, ist die lsass.exe dafür verantwortlich. Versuchen Sie sich mit einem falschen Usernamen anzumelden, wird die lsass.exe dieses feststellen und den Zugriff auf das Betriebssystem verhindern. This file has been causing problems lately... it keeps on "terminating unexpectedly", so the whole computer has a system shutdown in one mintute Githoniel There was a virus in my pc with the same name. Whenever I enter to the net it infecting in 20 seconds. I cleaned it very difficult by updating windows security and using special cleaners for this virus. Mehmet Ali ALTAN im windows eingabefeld "shutdown -a" eingeben....dadurch wird der pc nicht heruntergefahren...ist aber nur eine vorübergehende lösung da der virus...noch nicht entfernt ist frank Lsass.exe is not a virus Sawyer its either the sasser worm or its not the problem JoSe AnDrEs McAfee says nothing about this virus creating any file named lsass.exe. It does say that the virus causes the computer to reboot by crashing the lsass.exe process. Subsequent error messages mention this legitimate process as having failed. There is NO need to remove lsass.exe it is a vital system file in a networked computer.  link for more info Marshall has a key in registry wich allows ir to reload each time you conect to the net. use a virus removal tool in safe mode and you may get lucky  link for more info Kalhau I was infected by Sasser. This file is not reliable. Farid sabotages Messenger restart in 60seconds error Matt Error messages containing lsass.exe indicate Sasser-worm. lsass.exe is NOT part of the worm, it's save. Cruel Device As has been said, the worm exploits a bug in lsass.exe that causes it to crash. Lsass.exe is NOT the worm itself. If it were a worm, it certainly wouldn't be advertising itself by displaying a message with its own name in it. Troy This is not a virus, the Sasser worm attacks the lsass process and that is why your computer may shutdown, since the worm stops the lsass process from working Samantha Lsass.exe (lsass) and Isass.exe (isass) is not the same but looks like same...lsass is good, isass is the bad one gunni I was infected by this 30 minuteas after going on the net Bob Der lokale Sicherheitsdienst lsass.exe (Local Security Authority Subsystem) steuert die Richtlinien für User. Aus gegebenen Anlass: Es gibt einige hilfreiche Links zum Sasser Virus, welcher sich der lsass.exe bedient. DataFighter The Windows File itself isn't dangerous, what everyone here is describing is a virus that fakes the windows filename - so lets not get paranoid about every lsass.exe we see... Martyn Just use Windows Explorer to check the date of the file against other files in c:\windows\System32. If you find lots of files with the same date it usually means it's a required Windows file. Another way to check files is to do a right-click on their name then select Properties and look at the various info listed there. Helvetica i have done research on this program and i think people are getting confused with sasser virus this lsass is a system program if you remove it your computer is left wide open for an attacker as lsass.exe is a security program to verify computers on your network so dont panic! hackman In the Windows/system32 folder it is a necessary file. Anywhere else and it's a virus! Caution, Blueyonder will tell you to search for sasser files and if you find lsass.exe to delete it - don't if it's the legit one! id1250 lsass.exe is part of the operating system with file extention .exe.hdmp or .exe.mdmp its part of the sasser worm virus. It looks like its gone when it has not. don't know how to remove it totaly as virus software dosen't. Jon Sasser victim A default startup process which controls log on security. The following link provides a list of default startup processes for W2K..  link for more info Die Salomon If it is a System proces it isn't dangerous, But if the process is in your name it's a virus Myr gue pusing ngadepin masalah ini, karena kasusnya masih jarang. dan terjadi pada saat koneksi ke internet icha Isass.exe and lsass.exe is allmost the same, they can be mixed up and are hard do repair VirusKiller harmless security file that can crash and cause shutdown, if this happens go into c:\windows\System32 and run lsass.exe to bring it back to life :) Smash lsass.exe doesn't control security, it's merely used by winlogon to authenticate users. Winlogon will then react on whether the user is properly authed or not. Die, Die Salomon PC shuts down the system with code 1073741819 causes the computer to reboot! John It causes your machine to reboot over and over Addy Authentication service located in various places, but should only run out of c:\winnt\system32. Other seemingly safe locations are C:\winnt$NtServicePackUninstall$, c:\winnt\$NtUninstall*, c:\winnt\ServicePackFiles\i386, or c:\winnt\system32\dllcache. BrianG Windows critical updates include this file. It is imperitive that you have the latest updates to be protected from viruses/worms/trojans Doug It's just the same name as the Sasser virus, but it is a f*cking Windows Process  link for more info Dj Project Ho This is due to the sasser virus (and variations) attacking the whole system 32. It will cause your computer to shutdown in approximately 62.5 seconds. In the code: the time to shut down - 62.5s is found. Whenever you access the internet certain sites (with http) activate it; then you have the allocated time to shutdown. Other variations include shutdown times of 30s and 124s. The worm is rapidly transmitted over a LAN and replicates instantly. However, the good news is: it is nothing that antivirus doesn't handle. DaV_serveR Nicht viel, nur sie von einem Deutschem (?) programmiert wurde. Hoffentlich ist er im Bau, wenn nicht sollte er mir besser nich übern weg laufen. Dennis I have this on my computer and it's working fine. No problems with restarting or otherwise... Mike B. because not securty all files  link for more info palani.s its reboot the ststems with in 1 min ramesh_2k12000@yahoo.com it will reboot my pc unexpectedly and randomly,without any special reason santiago Very annoying... Always reboots my computer before the system updates have a change to download! It's a totally new comp too, so I don't see how it could be a virus. xxx Sasser attacks this Windows process. lsass.exe is not a virus itself, it is shutdown by the worm. help I don`t know nothing , but I need help getting rid of it Sasser abuses it. Update Windows often to prevent problems. Kachiko When i seeee (YOUR COMPUTER WILL BE SHUTDOWN AFTER 60 SEC) simply go to ms dos and type "shutdown -a"...........  link for more info Naseer It causes many unvolentary shutdowns, shame on MS? Jarmo Its just a normal OS file. If you have problems with your computer shutting you down saying there was an error with it...Then you should look into the sasser virus. Once you update to the windows xp service packet 2 you will have the lsass.exe file in two if not 3 folders. All three in windows one in the service packet folder one in the system32 folder and one on some computers is in a folder called SoftwareDistribution. If the file is in any or all of these directories it is fine. Solace Real windows file (unless tampered with). Love reading others lack of knowledge here on the subject..  link for more info Poindexter i know that i had service pack 2 for xp and when i removed it back to the previous service pack 1, it gave me lsass.exe and services.exe is missing and the screen goes blank viktor vasquez Seems to keep my hard drive busy Lloyd Plueschow This file compels the PC to reboot showing one minute alert message. Aatif Ijaz It reboots your system at any time jami i've deleted 6 of the same virus in last few hours called W32.HLLW.Gaobot.gen with filename lsass.exe so somethings up Travis This is not a harmful process Prashan it works depends and shut down the system at random Anup Deb Isass.exe (the virus version) will shut down your computer when you just made a connection to the internet for a couple of seconds/minutes. After that, it will give you a warning window, that the computer will shut down after __ seconds  link for more info Bastiaan there are 2 proceses: Lsass and Isass (in lowercase: lsass na isass). If you have the proces starting with i -- that's the worm. If you have proces starting with l -- that's windows file for logon :) Anyone who thinks this is "dangerous" has no idea what they're doing. This is a core security authentication file. Anyone who marked this dangerous is confusing it with "lsas.exe," the Sasser virus. A S Windows Operating System File, Service Authentication. If not in system32 folder, then it is a virus, otherwise completely harmless, and required to run the operating system. ph Symantec did not see anything weird. But it sure seems like it's taking up alot of processor power. Also svchost seems to be running quite high Charlie There is very important that you see in Windows Task Manager\processes is it lsass.exe or lsasss.exe !!! Lsasss.exe is Saser virus! zack It reboots your system at any time giving me 1 Min to close the application. I have no idea how to correct this problem Jana Legitimate XP file, is targeted by viruses, is NOT a worm/spyware. Infection of this file is due to negligance of user. Mat. M. (System Developer) It stop others from viewing your file over the LAN Marc Lesther Not a worm - Sasser has different filenames  link for more info Sue looks it locks and shutdown the pc euge its normal windows proces... ;-) threw away my computer  link for more info jim jacobs It cause shutdown  link for more info Babanelos Sakis Like many other Windows system processes, virii can take the name of this file, however, this file is also an essential file for the Windows OS. The Sasser Worm is the most common problem associated with it. The Sasser Worm attacks the file, and as a safety precaution, Windows shuts down so it can restart a fresh copy of the file. The problem is not normally with the file itself. Updating Windows will fix this problem. Xtra_Zero It's legit, but could get hijacked if not patched properly and no updated antivirus. Service packet 2 lololol! LouDaman This file has a lot of flaws which viruses target ie sasser virus. If attacked you will have problems that even windows updates won't clear. Your better off either going into safe mode to run your antivirus then or reformatting Al Hession The process by itself is not dangerous, but it is easily infected by virus sasser, who has harmful effects. Alberto M. Vernieri (Argentina) Something to do with windows authentication. When LSASS.exe is corrupted by Sasser or one of its variants, it causes Windows to reboot. From what I understand, anything that causes LSASS to operate improperly will cause the NT Authority Service to reboot the computer. You stop the reboot process by typing "shutdown -a" from a command prompt. Jason B. (illinois) Ist nicht gefährlich. Achtung nicht mit Isass.exe (isass) zu verwechseln Meister.Þrøpper«« system file Ciccero It causes system hangs and shut downs. if you are having problems opening regedit, try booting in safe mode and then going to the regedit icon and renaming it to : regedit.scr : This opens the file as a Screen saver and will open regedit. :) MunkY lsass.exe...i'm not sure if it is the cause of my .doc converted to .exe file as i save it in diskettes.... sonic Lsass.exe have the same name then the file in system32 directory. Open the internet, then an error box from Microsoft appear(send the prob. to Microsoft...) then click dont send. A timer is lauch at this moment and you have 1 minute to find something. 1 solution is to fdisk /mbr because if you try to format c:, the worm still on your hard drive. Not dangerous but very bored! Bob The lsass.exe file is needed for logon authentication and is needed especially in a client/server environment. The sasser virus is a completely different thing, if your computer begins a countdown to shutdown when you open a web browser or when you start up messenger, then you are infected by the sasser worm. Get cleaned up by running AVG free from www.grisoft.com Timmy McTimmunce LSASS.EXE is necessary for the XP OS. Symantec has a removal tool for all variants of Sasser which I would recommend you run. Before you run the tool, ensure that you have disabled System Restore. Clean the infection (if any) and update your OS by installing or re-installing the latest service pack and critical updates SuperMe lsass.exe is part of windows OS. If you delete it, or confuse this with a virus, you are retarded and shouldn't be using computers. Check the spelling and it's location people!!!!! not you Legitimate part of WinXP that sasser worm can exploit. MS site has free check to confirm whether your file is OK or not.  link for more info Steve M. Its an .exe file but doesnot harm . It irritates a lot due to abrupt message for shutdown within 60 secs. Rohit if lsass.exe can provide a shutdown im not so sure. but if than try it with shutdown -a .. only on XP, and not other admin Lsass is a normal windows system process, but it is part of a very large security hole in windows. You have to download the patch from microsoft to fix it. You can disable the shutdown by running services,msc from the run option in start menu, selecting Remote procedure call, and selecting the recovery tab, and setting all of the boxes to "restart service". Preacher It makes the computer not able to get to Win (normal & safe mode). Repair or format needed. Michael It causes shutdown, spreads in the network and generates a huge traffic.  link for more info Amit Ganguly it reboots ur computer and disables the internet / network Jens it works depends and shut down the system at random Mathias Trolle Nielsen needs windows operating systems .causes frequent shut downs but hardly any loss of data porque That it keep shutting down the Windows Station... YK93 It also causes my PC to reboot over and over - Windows never starts up Frank I found both lsass.exe and lsass.dll in my PC. My PC was shut down in 1 mins after I connected to broadband. It displays "lsass.exe terminated unexpectfully with status code 128. System shutting down in ...". Found "W32.Spybot.Worm" and some other Adwares in my PC. The worm also exists in "system32\crss.exe and spoolscv.exe".Symantec gives suggestions to remove the virus Ben "lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC/Server. It generates the process responsible for authenticating users for the Winlogon service. Voskuh Use KB835732 patch from Microsoft, depending on OS version, find stinger.exe (McAfee) to kill sasser Johan Does A not harmful process , don't missmatch with lsasss.exe releated about sasser. Édgar It generates the process responsible for authenticating users for the Winlogon service. This process is performed by using authentication packages such as the default Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates inherit this token. Arun C (Amrita) Keeps shutting down computer while on the net. I removed it from windows/system directory and it fixed the problem. shane just purchased new computer with Win XP.What is written here explains my problem. Never come across this before in older Windows. Obviously a case of looking into the cures posted. Thanks to those of you who bothered. Chas I found it after I disabled xp`s firwall and alg.exe dissapeared dave seems to be both a system process and a virus Gordon This file appears to shut down your computer as soon as you try to run the windows update. Is there another way of running the update without going online irwinhkp Diese lsass.exe fuhr mein System runter solange ich mich über comundo ins Netz wählte. Seit ich auf T-Online umgestiegen bin, keine Probleme mehr trotz selben OS. Kaffee-Klaus Please help me email to raptor101@swiftdsl.com.au as lsass is in my C:\windows\fonts\lsass.exe and when removed sucks my system James It kills the internet access and lan security Andriyana Tresnawan the file takes care of your passwords etc... Mike Bringt das System zum Absturz Filip The virus forces my system to reboot given 30 seconds within which i'm to save my work, Ibro if it gives shutdawn window, do this... goto start and run and type "shutdawn -a" and u will be happy IT'S NOT DANGEROUS!!! system file WHAT?!?!?! its a windows file the pimpChimP So far know one has given a solution to this problem. This is NOT harmful. Sheesh people - learn a little about your computer before you post a message saying this is a virus! Dean This file name is the title to a window which states "When trying to update a password, this return status indicates that the value provided as the current password is not correct". And about a second afterwards, system reboots without a chance to go into my desktop even to run the shutdown -a command which I've read stops the constant reboot :( So not sure how to get out of this one. And my CD drive is not recognizing any CD, so I can't run a QuickRestore program to put system back to original settings. Any suggestions, I would greatly appreciate it. fernandez@jose-arturo.com Sasser affects this system file, when no infection is not dangerous Reo seems like the virus was named after the process to make people wory when they explore the running processes ;-) Not a Worm just a leech-This File will hang your PC when booting very annoying Herbert Matthews shuts down computer everytime you are connected to the internet doesnt seem to affect my computer thought when i have windows xp firwall on. To activate the windows XP firewall click on control panel, network and internet connections, My network places(in top left hand corner), view my network places(top left hand corner) then right click on my local area connection, click properties, click advanced and click the little box so a tick will appear in it to enable it. Turn off your modem before you start up your computer to give you time without the shutdown box popping up and shutting you down! Matt An OS file in Windows XP. Used to authorise logons. Local Sever Security Authorisation Service. For those worried about the virus, simply do not connect to the internet without installing a firewall before establishing a connection! Those who threw away their PC's are a bit silly. Fixes for the sasser viruses can be d/loaded from another pc. Paul lsass.exe ist der Wurm Sasser. Geben sie einfach bei ausführen shutdown -a ein und das Problem ist erstmal gelöst. PPA Hab Isass exe beim win xp start drinne und es sperrt mir das xp ab bzw lässt mich garnicht rein. Hat wer ne ahnung wie ich beim systemstart vorher in die msconfig komme ?  link for more info Boris Frickmann mein rechner fährt dauernd runter und die datei kann ich nicht löschen. es bleibt mir nur noch format C: doch das ist viel arbeit.  link for more info hahgehweh Kann den Wurm SASSER enthalten; Removal tools siehe Link  link for more info DA THIS IS A COBRA FOR ANY COMPUTER JHAKKAS lsass.exe is not a virus. It is a working program of WinXP. My school's network manager even had trouble understanding this and the network security kept calling me to tell me I had a virus. Good lord the incompetence is abundant. NOT SASSER VIRUS Sucks..I can't get into safe mode, My computer starting shutting down..Now It won't even boot up into windows..Keeps saying lsass.exe error found.. I don't know how to fix it..It keeps shutting down all my virus programs I scan with too..HELP CherryKissies it is a virus (worm) generated from source code of sasser. i think it is a real danger because i've got it and he produced me some damages...crashed hdd,can`t open my optical drives...that`s all Stan Mircea firewall caught it trying to talk to s207-81-158-224.bc.hsia.telus.net, I would say it can be misused somehow Al Schemmer This file is not a virus. If you have any third party appllications or vb programs which calls the windows api's and if the function fails then their will be lsass.exe error adil akthar when i am in the LAN after a few seconds on my screen apear that error ho said that my pc is shuting down in 60 sec. i don't have this problem when i am connected to the internet. i have the windows 2000 pro operating system and i don't know haw to get reed of this error sergiulic lsass is a vital system file which can be afected by sasser virus and it causes system shutdown in 60 sec. omjaiswal Lsass.exe is not a virus benjamin It shuts down my computer so I changed a setting on my computer and now there is no sign of error now but I am wondering if it will harm my hard drive as it is 1 day old Michelle I am updating my xp EVERY DAY and just yesturday I tried to start my laptop and at log on, it gives me a lsass.exe-system error message saying that An invalid parameter was passed to a service or function. I update my computer every day and have all the service packs installed. lsasser? lsass = local security authority subsystem serviece Kematian Well not to shit like other guys did i will tell u wot exact virus it is in 2 steps ( in forward sorry for my english aint so good in spelling it ) ok 1 step : LSASS:exe is windows proces and u cant work without it and it isnt virus. 2 step but LSASS:exe can be harmed by virus which is taking some part off your internet conection and bombing some who knows where ip, Many hackers send virus which atack yours LSASS.exe and when LASASS.exe is atcked he is no longer your old windows pal he becomes bad and starts riping your conection all wot u can do is format and upgrade only windows to the last Griffit A fake lsass.exe got into my pc and causes a shutdown after internet communication. It appears as though the lsass service just crashes. Put xp sp2 on my PC and no problems since. Ellwood Getting on web, about 1 minute later, a system message appears, the pc will shut down in 60 seconds. Additionally the message requests to close all running programms, as active files could be lost. After 60 seconds windows xp crashs. No chance to work on web. alex k. I don't know what it is but it is taking up half my cpu usage for no reason Hercle it reboots ur computer and disables the internet / network rahul Due to this system will shut down within 60 seconds Murty Critical process for user authentication and logging Read article on Microsoft official site Maham People who have nagative comments such as "causes computer to shut down at random".. you have another problem. I would suggest trying a better virus program and firewall. This file is required by Windows and works just fine. John it become dangerous only when it is not in safe hands, since this file is associated with the windows logon authentiction, so if some one gets control over this file its easy for a hacker to get into your system and he can run any script batch file with out knowing you and this is why we several times see that system behaves randomly as if some one is shuting down or closing applications. Hadi I only know that LSASS.EXE (not ISASS) will be blocked by Virusscan Enterprice 8.0.0 (McAfee) because its a standard blocking role. Its not clear to me why. McAfee seems to think that its a risk file?! Yvo it shuts down the system in 60 seconds Sad Kann den Wurm SASSER enthalten. Shuts down the system at anytime. Mustafa Zulqarni lsass.exe systemshell, not a virus. capslock it just restart my pc again and again faiz the great Use protection, then you will avoid diseases! SivertDaHaX it works depends and shut down the system at random noman it knocked out my other computer, and i can't get back in frank cracolice Nothing except it can cause an error that will reboot the server Jonathan Hijacks MSN and attempts to spread itself while disrupting Browser and other processes The Illusionist Isass is nothing but it's a type of sassar virus who can easily removed by any blaster antivirus. rahul soni Not much, but when the 60 sec thing comes up, go to run and enter shutdown -a. This will by you some time Matthew Smith smitty86ca@hotmail.com vital security process, patch your system and keep your system clean and you won't have the 60 second shutdown timer! Firon LSASS.EXE does not seem to be a worm but part of network authentification process; check system32 directory it must be in there Andres when i enter into the net it automatically shut down with status code1073741819. so i am not in a position to use net. and i do not know how to rectify this. mani This filename is used by some virus (in a different location though) and will be used to execute code. In my case it executed an Iroffer app (IRC XDCC Deamon). Just check the location of the file. If it's not "C:\Windows\System32\lsass.exe" then you should be alarmed! DutchKid i have reformated my computer 4 times and still have the same problem Jesse The virus file (lsass.exe) has been cunningly and brilliantly disguised as the system file (lsass.exe). The name of the virus file begins with an upper case or capital "I" (EYE), whereas the name of the system file (lsass.exe) begins with a lower case or small "L" (EL). To an untrained eye, the difference between is visible only if the system font is changed. For more info, check at http://www.softwarepatch.com/tips/isass.html  link for more info Major Geek as it is found in the operatining system and also in windows updates it does not seem to be a virus file size is 13 312 byte should be fine SaTeR Reboots the system at anytime (random) is a the slowing down of the pc is the virus part but the reboot message which u cant cancel is a spyware HHH if it fails, it makes system crash flyed It has to do something with the Security settings for the windows vishwas My computer would not load up to start.. Windows system error file name no found. Had to do a complete recovery with recovery disk and lost all my personal information. Don lsaas.exe has come up within a virus check and for all everyone keeps mentioned sasser virus this has identified troj_delf.db as the virus. Tracey isasss.exe wäre sasser! nicht isass.exe jörn system shutdowning sure wish someone would just say it in lay man's terms how to get rid of these 'timeout' and computer freezes. DJA This file is just for the graphical interface. Jasper Wammes its not so dangereous. Hit the internet connection properties and enhance the firewall if you use XP. And the problem is over.. Ayhan This will shutdown the system with error messege system32/lsass.exe,so u need to go to cmd and give cammand as shutdown -a then it wil stop the system shut down so u can download the security taskmanager and run so that it wil recover this error ranjith Windows System file...when u`ll see again that shutdown message just go to Start- Run and type shutdown -a Puffi its just puts unwanted files in your local disk jimmylfc it shutdowns IDE of Microsoft Visual InterDev It's a system file using for logon process Dinesh Sanas "C:\WINDOWS\System32\lsass.exe" is not a virus/worm/adware/spyware. "lsasss.exe" with the extra "s" in any location is dangerous and should be deleted as it is related to the Sasser/My Doom worm. Preston Mathis - Certified Computer Engineer there is a lsass.exe error,LSA Shell Hettiarachchi PC is in a constant reboot cycle - LSASS.EXE - system error "When trying to update a password, this return status indicates that the value provided as the current password is not correct" and then reboots. Cannot F8 into any startup mode without getting this error - safe mode, command prompt, ect. Pastor Don It just shut down my system after showing me acountdown for i min. flat. V.annoying prashant It is an essential Windows Process, if it encounters an error or is terminated your system WILL shutdown after 60 seconds and I know of no way to stop that from happening. There are malicious processes under the same name, sometimes you can tell if they're fake if they're under a user name other than SYSTEM. Some viruses also infect this file, but it IS an important Windows component, so don't "fix" it by attempting to delete it. Update Windows to prevent it from getting infected, there also may be an update that fixes the infection. Anti-virus programs should now fix problems caused by Sasser Maccam94 OS file in Windows XP/2000 as long it is localized in /system32... If not, probably a worm or worse: Sasser! The problem (for the OS file) is to let him outbound to internet or not... Kusanagi I blocked it in Zone Alarm (access & Server)...no difference Richard WTF people, it's killing your machines and you don't even know it!! prophet legit system file but vulnerable to attack - so use firewall jumbaya when connected to net it shows timer of 30 seconds and shuts down  link for more info Vishal this will shutdown my pc without asking to me. Nitesh this shuts the computer at random and I have to reboot manually. 4 months I have it moulaf Lsas.exe ist eine Datei von Windows (Probieren Sie es mal zu löschen ;)) holt euch doch Linux :D zed`O This has been affecting my PC lately by subsequent shutdowns. As soon as I try to connect to the ineternet shutdown takes place after a warning message within 1:00 min Udaya XP startet bei mir nicht mehr. Es kommt sofort die Fehlermeldung "lsass.exe -Systemfehler" Die Sicherheitskontenverwaltung konnte nicht initalisiert weren... Zu einer Benutzeranmeldung komme ich gar nicht. Auch der abgesicherte Modus bringt mich nicht weiter. Seltsam ist auch, dass beim Booten der primary master nicht gefunden wird, aber trotzdem XP zu starten versucht. Tommi lsass.exe is harmless, its been said hundreds of times, Its a system process for handling user logins, if u think its a virus or some other danger to your PC, end the process, but you will need to reboot after you do because it will crash the system. And you cant say Isass is suceptable to viruses because every file no just system files are prone to virus attacks, so get over it. Its harmless Si UK it disable MSN messenger & make system busy black is a spyware Rick Interesting it seems to be infecting dvrs and is pair with a mpr file John I had what appeared to be the Sasser Worm, but my system checked out clean. Norton, McAfee, et.al. all gave my system a clean bill of health. After a week and a half, of everything from doing a system restore to an earlier date to doing a Windows repair, I found that my local c:\windows\system32\drivers\etc\hosts file was very obsolete. There is no good reason to have something other than the default (localhost definition) when on a network. Restoring the file to factory values, cleared up my lsass.exe, userinit.exe, and svchost.exe abort issues as I connected to the correct network servers. Lou if u need time to work on your computer before it shuts down go into the date setting and put it a couple of days back. this will give u time to work on it AB If you know more about lsass.exe, share your knowledge and help other users. Your opinion:  --- don't know ---  1 (not dangerous)  2  3 (neutral)  4  5 (dangerous) What do you know about this file: Link for more details: Your Name:

Search Results for lsass.exe in

• Google
• Discussion boards

Other files