Lsass.exe is the Local Security Authentication Server. This is the operating system module that processes the log in ID and password pair entered by users when they log in. If the user ID/password pair is found in the database, lsass.exe creates the user’s access token and attaches it to the process that launches the user’s shell. Otherwise, the process will return an error message to the user that his credentials are not valid. The file is located in the C:\Windows\System32 folder. A screen shot of the error is shown below.
Can Lsass.exe be a virus, Trojan, Worm or other Malware?
Yes, it can be. There are several known malware files that use the name lsass.exe but they are not located in the C:\Windows\System32 folder such as the W32.Nimos.Worm, W32.Sasser.E.Worm (Lsasss.exe), and W32.HLLW.Lovgate.C@mm.In fact, if it is not located in the correct folder, it probably is some form of malware. Anytime you are getting system errors, the first thing you should do is run a complete scan of your computer for viruses, worm, spyware, Trojans and other forms of malware.
How to Fix a Lsass.exe Error
The easiest way to fix this problem is to follow these steps:Once you have completed all of these steps, the problem should be resolved.
- Run a good registry cleaner and fix any and all problems that might exist in the registry
- Run a complete virus and malware scan just in case it is some form of malware
- If that doesn’t fix the problem, use the repair console to check and fix the windows operating system files
- If that doesn’t work or just don’t know how to use the recovery console, go to http://www.microsoft.com/security/malwareremove/default.aspx and download Microsoft’s Malicious Software Removal Tool and follow the directions
Conclusion
Routine maintenance of your computer is necessary to keep it running properly. You should do the following at least monthly:If you follow that schedule you should not have very many problems.
- Run a full virus, spyware and malware scan
- Run a good registry cleaner
- Defrag your hard drive
- Do a system state backup
No comments:
Post a Comment