I have three Lsass.exe files on my pc c:\WINDOWS\$NTServicePackUninstall$\Lsass.exe c:\WINDOWS\system32\Lsass.exe c:\WINDOWS\ServicePackFiles\i386\Lsass.exe From what I was reading on the net I only should have one in the system32 folder. Is this normal or am I infected? Pc is running fine, only one Lsass.exe runs in task manager . Thanks!

I reckon you're pretty safe with lsass.exe where they are. Some advice on the net gets way out of date especially as OS updates are added. As long as you have good anti-virus & firewall shouldn't be a problem. V...

Windows NT4/2000/XP/2003 only. LSASS is the Local Security Authentication Server. It verifies the validity of user logons to your PC/Server (in technical jargon : it generates the process that is responsible for authenticating users for the Winlogon service). Recommendation : An integral part of the operating system, leave alone provided that its full path as shown in The Ultimate Troubleshooter is either C:\WinNT\System32\LSASS.exe (Windows 2000) or C:\Windows\System32\LSASS.exe (Windows XP/2003). If the path is anything else then you may have a virus

Please be sure of the program...ie... Lsass or lsass..the caps make a difference. Also it should only be running from c:\windows\system32 It will show as SYSTEM in your task manager. the other two you mention can also be on your computer in the locations you mention. As long as only the one lsass is running in your task manager and it is running from SYSTEM you should be OK. HTH D4Dog "beauty is in the eye of the beer-holder"

The Following Microsoft Windows XP Services/Processes Running will use the C:\WINDOWS\System32\Lsass.exe IPSEC Services Net Logon NT LM Security Support Provider Protected Storage Security Accounts Manager

My intake of the three Lsass.exe are as follows: c:\WINDOWS\$NTServicePackUninstall$\Lsass.exe This file is part of the pre-sp2OS. It is not running. c:\WINDOWS\system32\Lsass.exe This is the only one that is running. c:\WINDOWS\ServicePackFiles\i386\Lsass.exe This file is part of the Windows File Protection. It is not running. i_XpUser

Thank you XpUser! I have all thoes services disabled, is it ok that it's still running? IPSEC Services Net Logon NT LM Security Support Provider Protected Storage Security Accounts Manager