Re: lsass.exe

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Wes

Sorry my error by typing fast. It is obviously reversed. Sheees I do not believe I did that. Thanks for the heads up

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"Wesley Vogel" <123WVogel955@xxxxxxxxxxx> wrote in message news:uAJZLfcNGHA.3936@xxxxxxxxxxxxxxxxxxxxxxx
That is incorrect.

Lsass.exe is *usually* a good file and Isass.exe is *always* a bad file.

Lsass.exe is the LSA Shell (Export Version) or Local Security Authority
Subsystem Service
http://support.microsoft.com/dllhelp/?dlltype=file&l=55&alpha=Lsass..exe&S=1&x=13&y=10

Lsass.exe is a process which also relates to trojan and worm security
threats spread via e-mails and peer-to-peer sharing networks such as Kazaa.
The trojans allows attackers to access your computer from remote locations,
stealing passwords, Internet banking and personal data. It is a registered
security risk and should be removed immediately.
http://www.liutilities.com/products/wintaskspro/processlibrary/lsass/

The Lsass.exe which is from Microsoft is located at
c:\windows\System32\Lsass.exe.

isass.exe is registered as the Optix.Pro virus which carries in it's
payload, the ability to disable firewalls and local security protections,
and a backdoor capability.
http://www.liutilities.com/products/wintaskspro/processlibrary/isass/

TROJ_ISAPASS.A - ISASS.EXE
http://process.networktechs.com/isass.exe.php

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:eQAJU2bNGHA.2604@xxxxxxxxxxxxxxxxxxxx,
Peter Foldes <okf22@xxxxxxxxxxx> hunted and pecked:
Isass.exe is a OS component Lsass.exe is a sasser virus

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"ANONYMOUS" <ANONYMOUS@xxxxxxxxxxxxxx> wrote in message
news:43F90F43.EA2FF022@xxxxxxxxxxxxxxxxx
It could be either!! Windows has its own authntication process but some
viruses are also called by the same name:

See here:

http://www.neuber.com/taskmanager/process/lsass.exe.html

hth


Ivan wrote:

Hi all.

This question am sure pops up every so often.. Though I'm yet after
reading all replies to thrads made in the past, able to come up with a
straight conclussion..

We're running a server and lsass.exe takes up to about 98% of
resources, causing us to having to reboot it every few days..

If it is a component of the Window OS, then spyware programs (such as
spybot or adaware) would not find it, right?

Is it something needed by Windows or can it be somehow deleted (or,
should it be)..

Thanks to all..

.

Relevant Pages

  • Re: What is csrss.exe?
    ... As you found out you cannot rely on answers on the newsgroup as gospel. ... Also any site that says a name is a Trojan with an offer to download it's software to fix the problem is a Trojan in itself just trying to sell you their software. ... It's been a core component of the Windows desktop since at least Windows 2000. ... Then in another paragraph it says 'The Microsoft Client Server Runtime Server subsystem' ...
    (microsoft.public.windows.vista.security)
  • Re: lsass.exe
    ... Lsass.exe is the LSA Shell or Local Security Authority ... Subsystem Service ... Lsass.exe is a process which also relates to trojan and worm security ... MS-MVP Windows Shell/User ...
    (microsoft.public.windowsxp.general)
  • Re: SBS 2003 Fax Sharepoint Routing
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... reinstall the Windows fax service to test? ... it means that the installation didn''t go ...
    (microsoft.public.windows.server.sbs)
  • Re: Intermittant GPO failure to apply
    ... Windows XP. ... If so, if you create a new group policy on SBS 2003 domain, does the issue ... Produced By Microsoft MimeOLE V6.00.3790.1830 ... |> Welcome to our SBS newsgroup. ...
    (microsoft.public.windows.server.sbs)