Anti-Spy.Info > File library > lsass.exe

Information about lsass.exe file

File: lsass.exe
Name: Local security authentication server
Product: Windows
Manufacturer: Microsoft
Risk factor (Virus/Trojan/Spyware): Rating

"lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC/Server. It generates the process responsible for authenticating users for the Winlogon service. This process is performed by using authentication packages such as the default Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates inherit this token. More info

Note: The lsass.exe file file should appear only the C:\Windows\System32\ folder. If you happen to find this file in a different folder, it is possible that your lsass.exe is in reality a malicious file. Many trojans and viruses try to cloak their real identity by using the names of legitimate files. Any time that you encounter a suspicious process, you should verify the digital signature and the file path, for example using Anti-Spy.Info.

Virus with same name:
W32.Nimos.Worm - Symantec Corporation
W32.Sasser.E.Worm (Lsasss.exe) - McAfee
[email protected] - Symantec Corporation

User feedback

There were 3595 user requests for that file. 84 users classify it as harmless. 6 users classify it as not so dangerous. 39 users classify it as neutral. 35 users considered the file to be suspicious. 84 users classify it as bad and recommend to delete lsass.exe. 31 users didn't classify it ("don't know").

Ratingit works depends and shut down the system at random Altair
RatingMicrosoft Local Security Authority Service: Windows critical process for user authorization and loging Martin
Ratingwindows crashes by the sasser worm. When it is infected it doesn't run neither regedit. anthony
Ratingsymantec associated the "sasser worm" with this Anthony
RatingFalls Windows wieder automatisch runterfährt, hat man den Sasser Virus. Man kann das unterbrechen indem man: Start - Ausführen und dann "shutdown -a" eingibt. Ein Remove-Tool gibt es auch.  link for more info Stephan
RatingPart of the Windows OP system Lisa
RatingAs before has been mentioned, a completely innocent system process and a dangerous virus come with the same name. No need for panic but keep your eyes open. Virus removal information can help determining whether you're dealing wtih fake lsass.exe or not. LordScav
RatingPC shuts down the system with code 1073741819  link for more info Mark
RatingIt is required for Win2000 & XP to work. Viruses (Sasser) attack it! Joe
RatingIf you have the Sasser worm: abort shutdown by going to run and enter cmd, then type shutdown -a, make sure you update windows entirely  link for more info thanks
RatingComputer reboots at random, patch helped immediately Robert
RatingWhen I'm connected to the net. it times me out and reboot my computer Antonio Bell
RatingProzess beenden fährt PC herunter. Der lokale Sicherheitsdienst lsass.exe steuert die Richtlinien für User. Wenn Sie nicht als Administrator angemeldet sind, und nur auf bestimmte Dateien zugriff haben, ist die lsass.exe dafür verantwortlich. Versuchen Sie sich mit einem falschen Usernamen anzumelden, wird die lsass.exe dieses feststellen und den Zugriff auf das Betriebssystem verhindern.
RatingThis file has been causing problems lately... it keeps on "terminating unexpectedly", so the whole computer has a system shutdown in one mintute Githoniel
RatingThere was a virus in my pc with the same name. Whenever I enter to the net it infecting in 20 seconds. I cleaned it very difficult by updating windows security and using special cleaners for this virus. Mehmet Ali ALTAN
Ratingim windows eingabefeld "shutdown -a" eingeben....dadurch wird der pc nicht aber nur eine vorübergehende lösung da der virus...noch nicht entfernt ist frank
RatingLsass.exe is not a virus Sawyer
Ratingits either the sasser worm or its not the problem JoSe AnDrEs
RatingMcAfee says nothing about this virus creating any file named lsass.exe. It does say that the virus causes the computer to reboot by crashing the lsass.exe process. Subsequent error messages mention this legitimate process as having failed. There is NO need to remove lsass.exe it is a vital system file in a networked computer.  link for more info Marshall
Ratinghas a key in registry wich allows ir to reload each time you conect to the net. use a virus removal tool in safe mode and you may get lucky  link for more info Kalhau
RatingI was infected by Sasser. This file is not reliable. Farid
Ratingsabotages Messenger restart in 60seconds error Matt
RatingError messages containing lsass.exe indicate Sasser-worm. lsass.exe is NOT part of the worm, it's save. Cruel Device
RatingAs has been said, the worm exploits a bug in lsass.exe that causes it to crash. Lsass.exe is NOT the worm itself. If it were a worm, it certainly wouldn't be advertising itself by displaying a message with its own name in it. Troy
RatingThis is not a virus, the Sasser worm attacks the lsass process and that is why your computer may shutdown, since the worm stops the lsass process from working Samantha
RatingLsass.exe (lsass) and Isass.exe (isass) is not the same but looks like same...lsass is good, isass is the bad one gunni
RatingI was infected by this 30 minuteas after going on the net Bob
RatingDer lokale Sicherheitsdienst lsass.exe (Local Security Authority Subsystem) steuert die Richtlinien für User. Aus gegebenen Anlass: Es gibt einige hilfreiche Links zum Sasser Virus, welcher sich der lsass.exe bedient. DataFighter
RatingThe Windows File itself isn't dangerous, what everyone here is describing is a virus that fakes the windows filename - so lets not get paranoid about every lsass.exe we see... Martyn
RatingJust use Windows Explorer to check the date of the file against other files in c:\windows\System32. If you find lots of files with the same date it usually means it's a required Windows file. Another way to check files is to do a right-click on their name then select Properties and look at the various info listed there. Helvetica
Ratingi have done research on this program and i think people are getting confused with sasser virus this lsass is a system program if you remove it your computer is left wide open for an attacker as lsass.exe is a security program to verify computers on your network so dont panic! hackman
RatingIn the Windows/system32 folder it is a necessary file. Anywhere else and it's a virus! Caution, Blueyonder will tell you to search for sasser files and if you find lsass.exe to delete it - don't if it's the legit one! id1250
Ratinglsass.exe is part of the operating system with file extention .exe.hdmp or .exe.mdmp its part of the sasser worm virus. It looks like its gone when it has not. don't know how to remove it totaly as virus software dosen't. Jon Sasser victim
RatingA default startup process which controls log on security. The following link provides a list of default startup processes for W2K..  link for more info Die Salomon
RatingIf it is a System proces it isn't dangerous, But if the process is in your name it's a virus Myr
Ratinggue pusing ngadepin masalah ini, karena kasusnya masih jarang. dan terjadi pada saat koneksi ke internet icha
RatingIsass.exe and lsass.exe is allmost the same, they can be mixed up and are hard do repair VirusKiller
Ratingharmless security file that can crash and cause shutdown, if this happens go into c:\windows\System32 and run lsass.exe to bring it back to life :) Smash
Ratinglsass.exe doesn't control security, it's merely used by winlogon to authenticate users. Winlogon will then react on whether the user is properly authed or not. Die, Die Salomon
RatingPC shuts down the system with code 1073741819
Ratingcauses the computer to reboot! John
RatingIt causes your machine to reboot over and over Addy
RatingAuthentication service located in various places, but should only run out of c:\winnt\system32. Other seemingly safe locations are C:\winnt$NtServicePackUninstall$, c:\winnt\$NtUninstall*, c:\winnt\ServicePackFiles\i386, or c:\winnt\system32\dllcache. BrianG
RatingWindows critical updates include this file. It is imperitive that you have the latest updates to be protected from viruses/worms/trojans Doug
RatingIt's just the same name as the Sasser virus, but it is a f*cking Windows Process  link for more info Dj Project Ho
RatingThis is due to the sasser virus (and variations) attacking the whole system 32. It will cause your computer to shutdown in approximately 62.5 seconds. In the code: the time to shut down - 62.5s is found. Whenever you access the internet certain sites (with http) activate it; then you have the allocated time to shutdown. Other variations include shutdown times of 30s and 124s. The worm is rapidly transmitted over a LAN and replicates instantly. However, the good news is: it is nothing that antivirus doesn't handle. DaV_serveR
RatingNicht viel, nur sie von einem Deutschem (?) programmiert wurde. Hoffentlich ist er im Bau, wenn nicht sollte er mir besser nich übern weg laufen. Dennis
RatingI have this on my computer and it's working fine. No problems with restarting or otherwise... Mike B.
Ratingbecause not securty all files  link for more info palani.s
Ratingits reboot the ststems with in 1 min [email protected]
Ratingit will reboot my pc unexpectedly and randomly,without any special reason santiago
RatingVery annoying... Always reboots my computer before the system updates have a change to download! It's a totally new comp too, so I don't see how it could be a virus. xxx
RatingSasser attacks this Windows process. lsass.exe is not a virus itself, it is shutdown by the worm. help
RatingI don`t know nothing , but I need help getting rid of it
RatingSasser abuses it. Update Windows often to prevent problems. Kachiko
RatingWhen i seeee (YOUR COMPUTER WILL BE SHUTDOWN AFTER 60 SEC) simply go to ms dos and type "shutdown -a"...........  link for more info Naseer
RatingIt causes many unvolentary shutdowns, shame on MS? Jarmo
RatingIts just a normal OS file. If you have problems with your computer shutting you down saying there was an error with it...Then you should look into the sasser virus. Once you update to the windows xp service packet 2 you will have the lsass.exe file in two if not 3 folders. All three in windows one in the service packet folder one in the system32 folder and one on some computers is in a folder called SoftwareDistribution. If the file is in any or all of these directories it is fine. Solace
RatingReal windows file (unless tampered with). Love reading others lack of knowledge here on the subject..  link for more info Poindexter
Ratingi know that i had service pack 2 for xp and when i removed it back to the previous service pack 1, it gave me lsass.exe and services.exe is missing and the screen goes blank viktor vasquez
RatingSeems to keep my hard drive busy Lloyd Plueschow
RatingThis file compels the PC to reboot showing one minute alert message. Aatif Ijaz
RatingIt reboots your system at any time jami
Ratingi've deleted 6 of the same virus in last few hours called W32.HLLW.Gaobot.gen with filename lsass.exe so somethings up Travis
RatingThis is not a harmful process Prashan
Ratingit works depends and shut down the system at random Anup Deb
RatingIsass.exe (the virus version) will shut down your computer when you just made a connection to the internet for a couple of seconds/minutes. After that, it will give you a warning window, that the computer will shut down after __ seconds  link for more info Bastiaan
Ratingthere are 2 proceses: Lsass and Isass (in lowercase: lsass na isass). If you have the proces starting with i -- that's the worm. If you have proces starting with l -- that's windows file for logon :)
RatingAnyone who thinks this is "dangerous" has no idea what they're doing. This is a core security authentication file. Anyone who marked this dangerous is confusing it with "lsas.exe," the Sasser virus. A S
RatingWindows Operating System File, Service Authentication. If not in system32 folder, then it is a virus, otherwise completely harmless, and required to run the operating system. ph
RatingSymantec did not see anything weird. But it sure seems like it's taking up alot of processor power. Also svchost seems to be running quite high Charlie
RatingThere is very important that you see in Windows Task Manager\processes is it lsass.exe or lsasss.exe !!! Lsasss.exe is Saser virus! zack
RatingIt reboots your system at any time giving me 1 Min to close the application. I have no idea how to correct this problem Jana
RatingLegitimate XP file, is targeted by viruses, is NOT a worm/spyware. Infection of this file is due to negligance of user. Mat. M. (System Developer)
RatingIt stop others from viewing your file over the LAN Marc Lesther
RatingNot a worm - Sasser has different filenames  link for more info Sue
Ratinglooks it locks and shutdown the pc euge
Ratingits normal windows proces... ;-)
Ratingthrew away my computer  link for more info jim jacobs
RatingIt cause shutdown  link for more info Babanelos Sakis
RatingLike many other Windows system processes, virii can take the name of this file, however, this file is also an essential file for the Windows OS. The Sasser Worm is the most common problem associated with it. The Sasser Worm attacks the file, and as a safety precaution, Windows shuts down so it can restart a fresh copy of the file. The problem is not normally with the file itself. Updating Windows will fix this problem. Xtra_Zero
RatingIt's legit, but could get hijacked if not patched properly and no updated antivirus. Service packet 2 lololol! LouDaman
RatingThis file has a lot of flaws which viruses target ie sasser virus. If attacked you will have problems that even windows updates won't clear. Your better off either going into safe mode to run your antivirus then or reformatting Al Hession
RatingThe process by itself is not dangerous, but it is easily infected by virus sasser, who has harmful effects. Alberto M. Vernieri (Argentina)
RatingSomething to do with windows authentication. When LSASS.exe is corrupted by Sasser or one of its variants, it causes Windows to reboot. From what I understand, anything that causes LSASS to operate improperly will cause the NT Authority Service to reboot the computer. You stop the reboot process by typing "shutdown -a" from a command prompt. Jason B. (illinois)
RatingIst nicht gefährlich. Achtung nicht mit Isass.exe (isass) zu verwechseln Meister.Þrøpper««
Ratingsystem file Ciccero
RatingIt causes system hangs and shut downs. if you are having problems opening regedit, try booting in safe mode and then going to the regedit icon and renaming it to : regedit.scr : This opens the file as a Screen saver and will open regedit. :) MunkY
Ratinglsass.exe...i'm not sure if it is the cause of my .doc converted to .exe file as i save it in diskettes.... sonic
RatingLsass.exe have the same name then the file in system32 directory. Open the internet, then an error box from Microsoft appear(send the prob. to Microsoft...) then click dont send. A timer is lauch at this moment and you have 1 minute to find something. 1 solution is to fdisk /mbr because if you try to format c:, the worm still on your hard drive. Not dangerous but very bored! Bob
RatingThe lsass.exe file is needed for logon authentication and is needed especially in a client/server environment. The sasser virus is a completely different thing, if your computer begins a countdown to shutdown when you open a web browser or when you start up messenger, then you are infected by the sasser worm. Get cleaned up by running AVG free from Timmy McTimmunce
RatingLSASS.EXE is necessary for the XP OS. Symantec has a removal tool for all variants of Sasser which I would recommend you run. Before you run the tool, ensure that you have disabled System Restore. Clean the infection (if any) and update your OS by installing or re-installing the latest service pack and critical updates SuperMe
Ratinglsass.exe is part of windows OS. If you delete it, or confuse this with a virus, you are retarded and shouldn't be using computers. Check the spelling and it's location people!!!!! not you
RatingLegitimate part of WinXP that sasser worm can exploit. MS site has free check to confirm whether your file is OK or not.  link for more info Steve M.
RatingIts an .exe file but doesnot harm . It irritates a lot due to abrupt message for shutdown within 60 secs. Rohit
Ratingif lsass.exe can provide a shutdown im not so sure. but if than try it with shutdown -a .. only on XP, and not other admin
RatingLsass is a normal windows system process, but it is part of a very large security hole in windows. You have to download the patch from microsoft to fix it. You can disable the shutdown by running services,msc from the run option in start menu, selecting Remote procedure call, and selecting the recovery tab, and setting all of the boxes to "restart service". Preacher
RatingIt makes the computer not able to get to Win (normal & safe mode). Repair or format needed. Michael
RatingIt causes shutdown, spreads in the network and generates a huge traffic.  link for more info Amit Ganguly
Ratingit reboots ur computer and disables the internet / network Jens
Ratingit works depends and shut down the system at random Mathias Trolle Nielsen
Ratingneeds windows operating systems .causes frequent shut downs but hardly any loss of data porque
RatingThat it keep shutting down the Windows Station... YK93
RatingIt also causes my PC to reboot over and over - Windows never starts up Frank
RatingI found both lsass.exe and lsass.dll in my PC. My PC was shut down in 1 mins after I connected to broadband. It displays "lsass.exe terminated unexpectfully with status code 128. System shutting down in ...". Found "W32.Spybot.Worm" and some other Adwares in my PC. The worm also exists in "system32\crss.exe and spoolscv.exe".Symantec gives suggestions to remove the virus Ben
Rating"lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC/Server. It generates the process responsible for authenticating users for the Winlogon service. Voskuh
RatingUse KB835732 patch from Microsoft, depending on OS version, find stinger.exe (McAfee) to kill sasser Johan Does
RatingA not harmful process , don't missmatch with lsasss.exe releated about sasser. Édgar
RatingIt generates the process responsible for authenticating users for the Winlogon service. This process is performed by using authentication packages such as the default Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates inherit this token. Arun C (Amrita)
RatingKeeps shutting down computer while on the net. I removed it from windows/system directory and it fixed the problem. shane
Ratingjust purchased new computer with Win XP.What is written here explains my problem. Never come across this before in older Windows. Obviously a case of looking into the cures posted. Thanks to those of you who bothered. Chas
RatingI found it after I disabled xp`s firwall and alg.exe dissapeared dave
Ratingseems to be both a system process and a virus Gordon
RatingThis file appears to shut down your computer as soon as you try to run the windows update. Is there another way of running the update without going online irwinhkp
RatingDiese lsass.exe fuhr mein System runter solange ich mich über comundo ins Netz wählte. Seit ich auf T-Online umgestiegen bin, keine Probleme mehr trotz selben OS. Kaffee-Klaus
RatingPlease help me email to [email protected] as lsass is in my C:\windows\fonts\lsass.exe and when removed sucks my system James
RatingIt kills the internet access and lan security Andriyana Tresnawan
Ratingthe file takes care of your passwords etc... Mike
RatingBringt das System zum Absturz Filip
RatingThe virus forces my system to reboot given 30 seconds within which i'm to save my work, Ibro
Ratingif it gives shutdawn window, do this... goto start and run and type "shutdawn -a" and u will be happy
RatingIT'S NOT DANGEROUS!!! system file WHAT?!?!?!
Ratingits a windows file the pimpChimP
RatingSo far know one has given a solution to this problem.
RatingThis is NOT harmful. Sheesh people - learn a little about your computer before you post a message saying this is a virus! Dean
RatingThis file name is the title to a window which states "When trying to update a password, this return status indicates that the value provided as the current password is not correct". And about a second afterwards, system reboots without a chance to go into my desktop even to run the shutdown -a command which I've read stops the constant reboot :( So not sure how to get out of this one. And my CD drive is not recognizing any CD, so I can't run a QuickRestore program to put system back to original settings. Any suggestions, I would greatly appreciate it. [email protected]
RatingSasser affects this system file, when no infection is not dangerous Reo
Ratingseems like the virus was named after the process to make people wory when they explore the running processes ;-)
RatingNot a Worm just a leech-This File will hang your PC when booting very annoying Herbert Matthews
Ratingshuts down computer everytime you are connected to the internet doesnt seem to affect my computer thought when i have windows xp firwall on. To activate the windows XP firewall click on control panel, network and internet connections, My network places(in top left hand corner), view my network places(top left hand corner) then right click on my local area connection, click properties, click advanced and click the little box so a tick will appear in it to enable it. Turn off your modem before you start up your computer to give you time without the shutdown box popping up and shutting you down! Matt
RatingAn OS file in Windows XP. Used to authorise logons. Local Sever Security Authorisation Service. For those worried about the virus, simply do not connect to the internet without installing a firewall before establishing a connection! Those who threw away their PC's are a bit silly. Fixes for the sasser viruses can be d/loaded from another pc. Paul
Ratinglsass.exe ist der Wurm Sasser. Geben sie einfach bei ausführen shutdown -a ein und das Problem ist erstmal gelöst. PPA
RatingHab Isass exe beim win xp start drinne und es sperrt mir das xp ab bzw lässt mich garnicht rein. Hat wer ne ahnung wie ich beim systemstart vorher in die msconfig komme ?  link for more info Boris Frickmann
Ratingmein rechner fährt dauernd runter und die datei kann ich nicht löschen. es bleibt mir nur noch format C: doch das ist viel arbeit.  link for more info hahgehweh
RatingKann den Wurm SASSER enthalten; Removal tools siehe Link  link for more info DA
Ratinglsass.exe is not a virus. It is a working program of WinXP. My school's network manager even had trouble understanding this and the network security kept calling me to tell me I had a virus. Good lord the incompetence is abundant. NOT SASSER VIRUS
RatingSucks..I can't get into safe mode, My computer starting shutting down..Now It won't even boot up into windows..Keeps saying lsass.exe error found.. I don't know how to fix it..It keeps shutting down all my virus programs I scan with too..HELP CherryKissies
Ratingit is a virus (worm) generated from source code of sasser. i think it is a real danger because i've got it and he produced me some damages...crashed hdd,can`t open my optical drives...that`s all Stan Mircea
Ratingfirewall caught it trying to talk to, I would say it can be misused somehow Al Schemmer
RatingThis file is not a virus. If you have any third party appllications or vb programs which calls the windows api's and if the function fails then their will be lsass.exe error adil akthar
Ratingwhen i am in the LAN after a few seconds on my screen apear that error ho said that my pc is shuting down in 60 sec. i don't have this problem when i am connected to the internet. i have the windows 2000 pro operating system and i don't know haw to get reed of this error sergiulic
Ratinglsass is a vital system file which can be afected by sasser virus and it causes system shutdown in 60 sec. omjaiswal
RatingLsass.exe is not a virus benjamin
RatingIt shuts down my computer so I changed a setting on my computer and now there is no sign of error now but I am wondering if it will harm my hard drive as it is 1 day old Michelle
RatingI am updating my xp EVERY DAY and just yesturday I tried to start my laptop and at log on, it gives me a lsass.exe-system error message saying that An invalid parameter was passed to a service or function. I update my computer every day and have all the service packs installed. lsasser?
Ratinglsass = local security authority subsystem serviece Kematian
RatingWell not to shit like other guys did i will tell u wot exact virus it is in 2 steps ( in forward sorry for my english aint so good in spelling it ) ok 1 step : LSASS:exe is windows proces and u cant work without it and it isnt virus. 2 step but LSASS:exe can be harmed by virus which is taking some part off your internet conection and bombing some who knows where ip, Many hackers send virus which atack yours LSASS.exe and when LASASS.exe is atcked he is no longer your old windows pal he becomes bad and starts riping your conection all wot u can do is format and upgrade only windows to the last Griffit
RatingA fake lsass.exe got into my pc and causes a shutdown after internet communication. It appears as though the lsass service just crashes. Put xp sp2 on my PC and no problems since. Ellwood
RatingGetting on web, about 1 minute later, a system message appears, the pc will shut down in 60 seconds. Additionally the message requests to close all running programms, as active files could be lost. After 60 seconds windows xp crashs. No chance to work on web. alex k.
RatingI don't know what it is but it is taking up half my cpu usage for no reason Hercle
Ratingit reboots ur computer and disables the internet / network rahul
RatingDue to this system will shut down within 60 seconds Murty
RatingCritical process for user authentication and logging Read article on Microsoft official site Maham
RatingPeople who have nagative comments such as "causes computer to shut down at random".. you have another problem. I would suggest trying a better virus program and firewall. This file is required by Windows and works just fine. John
Ratingit become dangerous only when it is not in safe hands, since this file is associated with the windows logon authentiction, so if some one gets control over this file its easy for a hacker to get into your system and he can run any script batch file with out knowing you and this is why we several times see that system behaves randomly as if some one is shuting down or closing applications. Hadi
RatingI only know that LSASS.EXE (not ISASS) will be blocked by Virusscan Enterprice 8.0.0 (McAfee) because its a standard blocking role. Its not clear to me why. McAfee seems to think that its a risk file?! Yvo
Ratingit shuts down the system in 60 seconds Sad
RatingKann den Wurm SASSER enthalten.
RatingShuts down the system at anytime. Mustafa Zulqarni
Ratinglsass.exe systemshell, not a virus. capslock
Ratingit just restart my pc again and again faiz the great
RatingUse protection, then you will avoid diseases! SivertDaHaX
Ratingit works depends and shut down the system at random noman
Ratingit knocked out my other computer, and i can't get back in frank cracolice
RatingNothing except it can cause an error that will reboot the server Jonathan
RatingHijacks MSN and attempts to spread itself while disrupting Browser and other processes The Illusionist
RatingIsass is nothing but it's a type of sassar virus who can easily removed by any blaster antivirus. rahul soni
RatingNot much, but when the 60 sec thing comes up, go to run and enter shutdown -a. This will by you some time Matthew Smith [email protected]
Ratingvital security process, patch your system and keep your system clean and you won't have the 60 second shutdown timer! Firon
RatingLSASS.EXE does not seem to be a worm but part of network authentification process; check system32 directory it must be in there Andres
Ratingwhen i enter into the net it automatically shut down with status code1073741819. so i am not in a position to use net. and i do not know how to rectify this. mani
RatingThis filename is used by some virus (in a different location though) and will be used to execute code. In my case it executed an Iroffer app (IRC XDCC Deamon). Just check the location of the file. If it's not "C:\Windows\System32\lsass.exe" then you should be alarmed! DutchKid
Ratingi have reformated my computer 4 times and still have the same problem Jesse
RatingThe virus file (lsass.exe) has been cunningly and brilliantly disguised as the system file (lsass.exe). The name of the virus file begins with an upper case or capital "I" (EYE), whereas the name of the system file (lsass.exe) begins with a lower case or small "L" (EL). To an untrained eye, the difference between is visible only if the system font is changed. For more info, check at  link for more info Major Geek
Ratingas it is found in the operatining system and also in windows updates it does not seem to be a virus file size is 13 312 byte should be fine SaTeR
RatingReboots the system at anytime (random) is a the slowing down of the pc is the virus part but the reboot message which u cant cancel is a spyware HHH
Ratingif it fails, it makes system crash flyed
RatingIt has to do something with the Security settings for the windows vishwas
RatingMy computer would not load up to start.. Windows system error file name no found. Had to do a complete recovery with recovery disk and lost all my personal information. Don
Ratinglsaas.exe has come up within a virus check and for all everyone keeps mentioned sasser virus this has identified troj_delf.db as the virus. Tracey
Ratingisasss.exe wäre sasser! nicht isass.exe jörn
Ratingsystem shutdowning
Ratingsure wish someone would just say it in lay man's terms how to get rid of these 'timeout' and computer freezes. DJA
RatingThis file is just for the graphical interface. Jasper Wammes
Ratingits not so dangereous. Hit the internet connection properties and enhance the firewall if you use XP. And the problem is over.. Ayhan
RatingThis will shutdown the system with error messege system32/lsass.exe,so u need to go to cmd and give cammand as shutdown -a then it wil stop the system shut down so u can download the security taskmanager and run so that it wil recover this error ranjith
RatingWindows System file...when u`ll see again that shutdown message just go to Start- Run and type shutdown -a Puffi
Ratingits just puts unwanted files in your local disk jimmylfc
Ratingit shutdowns IDE of Microsoft Visual InterDev
RatingIt's a system file using for logon process Dinesh Sanas
Rating"C:\WINDOWS\System32\lsass.exe" is not a virus/worm/adware/spyware. "lsasss.exe" with the extra "s" in any location is dangerous and should be deleted as it is related to the Sasser/My Doom worm. Preston Mathis - Certified Computer Engineer
Ratingthere is a lsass.exe error,LSA Shell Hettiarachchi
RatingPC is in a constant reboot cycle - LSASS.EXE - system error "When trying to update a password, this return status indicates that the value provided as the current password is not correct" and then reboots. Cannot F8 into any startup mode without getting this error - safe mode, command prompt, ect. Pastor Don
RatingIt just shut down my system after showing me acountdown for i min. flat. V.annoying prashant
RatingIt is an essential Windows Process, if it encounters an error or is terminated your system WILL shutdown after 60 seconds and I know of no way to stop that from happening. There are malicious processes under the same name, sometimes you can tell if they're fake if they're under a user name other than SYSTEM. Some viruses also infect this file, but it IS an important Windows component, so don't "fix" it by attempting to delete it. Update Windows to prevent it from getting infected, there also may be an update that fixes the infection. Anti-virus programs should now fix problems caused by Sasser Maccam94
RatingOS file in Windows XP/2000 as long it is localized in /system32... If not, probably a worm or worse: Sasser! The problem (for the OS file) is to let him outbound to internet or not... Kusanagi
RatingI blocked it in Zone Alarm (access & Server) difference Richard
RatingWTF people, it's killing your machines and you don't even know it!! prophet
Ratinglegit system file but vulnerable to attack - so use firewall jumbaya
Ratingwhen connected to net it shows timer of 30 seconds and shuts down  link for more info Vishal
Ratingthis will shutdown my pc without asking to me. Nitesh
Ratingthis shuts the computer at random and I have to reboot manually. 4 months I have it moulaf
RatingLsas.exe ist eine Datei von Windows (Probieren Sie es mal zu löschen ;)) holt euch doch Linux :D zed`O
RatingThis has been affecting my PC lately by subsequent shutdowns. As soon as I try to connect to the ineternet shutdown takes place after a warning message within 1:00 min Udaya
RatingXP startet bei mir nicht mehr. Es kommt sofort die Fehlermeldung "lsass.exe -Systemfehler" Die Sicherheitskontenverwaltung konnte nicht initalisiert weren... Zu einer Benutzeranmeldung komme ich gar nicht. Auch der abgesicherte Modus bringt mich nicht weiter. Seltsam ist auch, dass beim Booten der primary master nicht gefunden wird, aber trotzdem XP zu starten versucht. Tommi
Ratinglsass.exe is harmless, its been said hundreds of times, Its a system process for handling user logins, if u think its a virus or some other danger to your PC, end the process, but you will need to reboot after you do because it will crash the system. And you cant say Isass is suceptable to viruses because every file no just system files are prone to virus attacks, so get over it. Its harmless Si UK
Ratingit disable MSN messenger & make system busy black
Ratingis a spyware Rick
RatingInteresting it seems to be infecting dvrs and is pair with a mpr file John
RatingI had what appeared to be the Sasser Worm, but my system checked out clean. Norton, McAfee, all gave my system a clean bill of health. After a week and a half, of everything from doing a system restore to an earlier date to doing a Windows repair, I found that my local c:\windows\system32\drivers\etc\hosts file was very obsolete. There is no good reason to have something other than the default (localhost definition) when on a network. Restoring the file to factory values, cleared up my lsass.exe, userinit.exe, and svchost.exe abort issues as I connected to the correct network servers. Lou
Ratingif u need time to work on your computer before it shuts down go into the date setting and put it a couple of days back. this will give u time to work on it AB
If you know more about lsass.exe, so post it here.
Your opinion:
Your info
about that file:
Website with further details:
Your Name:

Search Results for lsass.exe in

Other files

alg.exe csrss.exe ctfmon.exe dllhost.exe explorer.exe internat.exe lsass.exe mdm.exe msmsgs.exe mstask.exe regsvc.exe services.exe smss.exe spoolsv.exe svchost.exe system winmgmt.exe wmiexe.exe wmiprvse.exe wscntfy.exe wuauclt.exe [all]
© Anti-Spy.Info