Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works

lsass, what is it?!

  • Please log in to reply



    New Member

  • Member
  • Pip
  • 8 posts
In my task manger there is program running called lsass.exe. I looked it up and found that it might be the sasser worm. I'm trying to learn how to remove viruses and other things manually. My computer is not showing any symptoms of it, like the shut down timer or the lsass error thing. I got a sasser remover from symantec, but it didn't pick up anything thing. I don't know if it''s anything to worry about, or what to do from here. Need some help.
  • 0




    Trusted Helper

  • Retired Staff
  • 2,138 posts
Hi there,

lsass.exe is a legitimate process belonging to Windows. Starting from SP2, all Windows installations have this process. The sasser worm indeed has the same name, but runs from a different directory. If you want to make a checkup to make sure you aren't infected, please post an HijackThis log:

Click here to download HJTInstall.exe
  • Save HJTInstall.exe to your desktop.
  • Doubleclick on the HJTInstall.exe icon on your desktop.
  • By default it will install to C:\Program Files\Trend Micro\HijackThis .
  • Click on Install.
  • It will create a HijackThis icon on the desktop.
  • Once installed, it will launch Hijackthis.
  • Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
  • Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
  • Come back here to this thread and Paste the log in your next reply.
  • DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

  • 0

Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP