What is the Lsassexe Process

What is the Lsass.exe Process

Windows runs many processes in the background that are necessary and helpful to the proper running of your system. Hackers are aware of this and have written Trojans and malware which mimic these processes and open your computer up to viruses, keyboard logging and other security threats.

One of these processes is lsass.exe. The file is used for local security authentication and most likely you have at least one instance of lsass.exe running for it is a legitimate file. The process verifies the user logon and generates a token that is used by other authentication processes such as msgina.dll that allows access to your system. The legitimate file is in the folder C:WindowsSystem32. and usually runs in the background during the normal operation of your system.

Hackers have created a Trojan by the same or a similar name which fools the operating system into allowing it to run or download malicious software without your being aware of it. A bogus instance of the lsass.exe can be used to infect your computer with additional viruses and steal passwords, credit card numbers, internet banking and personal information. An infected computer is open to being taken over by a remote user and it can compromise the security of any network the computer may be connected to.

The lsass.exe malware is known by different names and is usually downloaded by spyware or packaged with a virus so as to allow the infector access to your system. Some of the names it goes by are; Trojan.W32.Webus, W32.Nimos.Worm,W32.Sasser.E.Worm and W32.HLLW.Lovegate.C@mm. Some of these packages masquerade as the lsass.exe file by naming the Trojan file lsasss.exe

In all instances you can use the following free registry scanning software located at the site;

Download and Scan your PC here







to scan for the virus and rid your system of any instances of the malware. If you have multiple instances of the lsass.exe file running then you are more than likely infected and need to rid your system of the Trojan before a hacker can steal your personal information or download more viruses or spyware on your computer. Check your computer today for this internet pest.