Arcade File Downloads Support Forum
Email
Confirm email
Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!
Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

lsass.exe


Click here to Run a Free Scan for lsass.exe Related Errors

What is it?
Local Security Authentication Server - lsass.exe

What does it do?
lsass.exe - It generates the process responsible for authenticating users for the Winlogon service. This process is performed by using authentication packages such as the default Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates inherit this token.

You will not be able to end this through task manager!

From MS


The lsass.exe which is from Microsoft is located at c:windowsSystem32lsass.exe . there's a few viruses that have been found to run as lsass.exe to hide from you.Fix lsass.exe Errors: Free Scan

Recommendation: Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings


lsass.exe is a Windows System File and should be in a system directory. If it is then this application is safe.

Startup DB Entries:
( 1 ) "Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder"
( 2 ) "Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder"
( 3 ) "Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder"
( 4 ) "Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder"
( 5 ) "Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder"
( 6 ) "Added by the DSPY-A TROJAN! Note - this is not the legitimate lsass.exe process which should not normally figure in Msconfig/Startup!"
( 7 ) "Added by the MARKTMAN-C TROJAN! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
( 8 ) "Added by the BDOOR-IU BACKDOOR! Note - this is not the legitimate
( 9 ) "Added by the AHKER.G WORM! Note - this is not the legitimate lsass.exe process which should not appear in Msconfig/Startup!"
( 10 ) "Added by several variants of the AHKER WORM! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
( 11 ) "Detected by Symantec as the SILLYFDC WORM! See here. Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup!"
( 12 ) "Added by the RATSOU.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a DebugUserMode subfolder of the Winnt or Windows folder"
( 13 ) "Added by the ALCOP-B WORM! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder"
( 14 ) "Added by the VOUMIT-A WORM! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""mirc32"" folder"
( 15 ) "Added by the PUNYA-B WORM! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup!"

Disclaimer

Every attempt has been made to ensure the information about lsass.exe is accurate but alot of malware applications try to pose as valid applications. If it is something other than what was posted above please leave some feedback in the forum.
Printer Friendly

User Comments
TammyTried to start computer and getting error message lsass.exe operation failed
MeganI tried to start up my computer this morning and instead of letting me log in it popped up a notice about lsass.exe. After I clicked "OK" the screen just remained blank. How am I supposed to get rid of the virus if I can't log into the computer to delete it? (I'm on a school computer right now.)
Andi CI don't know if you got your answer yet, but I'm trying to remove the bad copy of lsass.exe by slaving the drive to another computer, that way the operating system and any softwares for that drive aren't running and you can run scans, and manipulate files without having to be able to bootup (from my experience the lsass error i was getting wouldn't even let me bootup, and the lsass.exe that was a bad file was hidden even with hidden and system files showing in the folder it was in).
nameI can't even get to my use log on screen. All I get is a message stating my ls.ass.exe file has the wrong parameters. All I can do is reboot, and that just brings up the message again.
JuanI got the lsass.exe and a box that reads samlib.dll not found . I cant even get the OS to star. what can I do?
SSwhen trying to boot up/logon XP, i get the lsass.exe error message box. when I select o.k. screen goes blank again. How do I get rid of this if I can't get pass the message box?
gormaniliusthe date is 4/21 I just got this too, same as the 2 posters b4 me. I tried safe mode, no go, tried last good configuration, no go. I am about to try cmd prompt, which I have no clue what to do after. press f8 at startup to get to these options
sandeeplogin properly but err showing every time lsass.exe has been curpt. how can be repair for this give me the positive solution

Submit your comment Comments ARE moderated! Please only submit once!

Windows Files
lsass.exe | alg.exe | csrss.exe | Svchost.exe | Spoolsv.exe | wowexec.exe | dwwin.exe | ctfmon.exe | wuauclt.exe | wmiprvse.exe | Winlogon.exe | Smss.exe | msmsgs.exe | cidaemon.exe | rundll32.exe | mdm.exe | ntvdm.exe | ntdll.dll | explorer.exe | msdxm.ocx | wisptis.exe | iexplore.exe | wdfmgr.exe | PDVDServ.exe | gcasdtserv.exe | wscntfy.exe | DLLhost.exe | shdoclc.dll | Winmgmt.exe | cisvc.exe |
Copyright 2003-2009 I Am Not A Geek Inc.
Table 'iamnotageek.files' doesn't exist