Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I pressed ctrl alt delete to get the task manager and then I went to processes and I scrolled down and I seen a program called Lsass.exe and I recognized that from windows mentioning it with the sasser virus any way I have mcaffe anti virus I did checks and I went with the windows sasser check on their website and it found no problem, but then when I manually try to end the program by right clicking it and pressing end program it says it cannot because it is critical and for the past week my computer has been acting starnge it automatically turned off twice and the picture is all screwed up at times like little black squares quickly appering and dissaperingin a second especially when I play warcraft (game) please help me!!

lsass.exe is Windows Local Security Authority Server Process handles Windows security mechanisms. It verifies the validity of user logons to your computer or server. Technically, the software generates the process that is responsible for authenticating users for the Winlogon service. (http://www.liutilities.com/products/wintaskspro/processlibrary/lsass/)
My advice: Don't ever tweak with lsass.exe or any other processes unless you know exactly what you are doing. Or would you rather paralyze your computer?

Just curious...is it spelled exactly the way you typed it here on this post?
I ask because I also have it in my task mgr., but mine has different capitalization letters.
~Tommyo

Process File: lsass or lsass.exe
Process Name: Local Security Authority Service
Description: Windows Local Security Authority Server Process handles Windows security mechanisms. It verifies the validity of user logons to your computer or server. Technically, the software generates the process that is responsible for authenticating users for the Winlogon service.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No
Common Errors: N/AKTTD
Though I walk through the valley of Microsoft, I shall fear no OS for skills are with me

When I responded there was zero responces. After I hit post there where 3 other replies but that is life sometimes.
KTTD
Though I walk through the valley of Microsoft, I shall fear no OS for skills are with me

Wait a minute . . . did you get this message:
MESSAGE
the system process 'C:\windows/system32\lsass.exe' terminated unexpectedly with status code -1073741819 the system will now shutdown and restart.then it gives me 60 secs till it shutsdown
If you did, you have sasser.

Thanks Kevin and XpUser...guess I need not worry about it neither; even though mine is spelled differently. Thanks for the info!
~Tommyo

tommyo,
NP :-))
BTW I checked the net for the difference between Lsass and lsass. Didn't find any credible links regarding this.

regarding post number 6 and 2 for 6 no i am not getting it and for 2 it is spelled lsass.exe thank you for replying

I have windows 2000 server. I'm registering strange things happening in different OS.
It seemn that LSASS.exe (capitalized that way) is the Local Security Authority Service in windows 2000. but it's a virus in XP.
In XP the Local Security Authority Service process is named lass.exe
So LSASS.exe is a virus in XP!
In Win 2000 Server LSASS.exe it should be the Microsoft Local Security Authority Service, but strangely something has changed my net interface with a new layer of TCP/IP service that was not deletable, and I was not able to get to internet anymore. But I was able to see internet TV as it use mbone protocol.
Stinger removal tool of McAfee was not able to datach any virus.
The win2000 server was patch agains sasser, and had also zoneallarm free. The server was patched to the 30 july with winbdows update.
I suppose there is new version of sasser.
Loris Palmerini

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |