What is LSASS ?

Posted On 2011-01-30 by FortyPoundHead
Tags: Security Glossary 
Views: 729

lsass.exe is part of the security system that comes along with Microsoft Windows. The task of lsass.exe is to verify the validity of users when they log onto the PC.

By ending the lsass process you may encounter some difficulties when using Windows.

However lsass.exe may sometimes be a trojan horse or downloader disguised to look like an innocent process.

The lsass.exe file is located in the System32 folder, or C:\Windows\System32. If it is located anywhere else on the hard drive or computer, it is not a legitimate program and should immediately be deleted or quarantined. You should never delete or tamper with the file if it is located in the system32 directory.

The only way to determine whether the lsass.exe running is legitimate is to run a full scan of the computer.

About the Author

has posted a total of 1974 articles.

Comments On This Post

No comments on this post yet!

Do you have a thought relating to this post? You can post your comment here. If you have an unrelated question, you can use the Q&A section to ask it.

Or you can drop a note to the administrators if you're not sure where you should post.

Your IP address is:

Before you can post, you need to prove you are human. If you log in, this test goes away.

Code Links