lsass.exe process

[Guest ~~Alan~~]

What is the lsass.exe process in the Task Manager? I see I/O reads and

writes against this process and this is after an O/S rebuild. The CPU

Utilizzation is very minimal, almost nothing at all if that much.

 

WinXP SP3

 

 

thanks,

~alan

[Guest Malke]

Re: lsass.exe process

 

~~Alan~~ wrote:

> What is the lsass.exe process in the Task Manager? I see I/O reads and

> writes against this process and this is after an O/S rebuild. The CPU

> Utilizzation is very minimal, almost nothing at all if that much.

>

> WinXP SP3

 

http://www.google.com/search?hl=en&q=lsass.exe&btnG=Search

 

Lsass.exe is an integral part of Windows.

 

Malke

--

MS-MVP

Elephant Boy Computers - Don't Panic!

FAQ - http://www.elephantboycomputers.com/#FAQ

[Guest ~~Alan~~]

Re: lsass.exe process

 

thank you. That's what I eventually learned. Is the ongoing I/O traffic

normal?

 

~alan

 

"Malke" <malke@invalid.invalid> wrote in message

news:OZLI1qx7IHA.3480@TK2MSFTNGP03.phx.gbl...

> ~~Alan~~ wrote:

>

>> What is the lsass.exe process in the Task Manager? I see I/O reads and

>> writes against this process and this is after an O/S rebuild. The CPU

>> Utilizzation is very minimal, almost nothing at all if that much.

>>

>> WinXP SP3

>

> http://www.google.com/search?hl=en&q=lsass.exe&btnG=Search

>

> Lsass.exe is an integral part of Windows.

>

> Malke

> --

> MS-MVP

> Elephant Boy Computers - Don't Panic!

> FAQ - http://www.elephantboycomputers.com/#FAQ

>

[Guest David H. Lipman]

Re: lsass.exe process

 

From: "~~Alan~~" <a.shepro@gmail.com>

 

| thank you. That's what I eventually learned. Is the ongoing I/O traffic

| normal?

 

| ~alan

 

Alan:

 

What is really needed is the fully qualified path to LSASS.EXE

If it is; %windir%\system32\lsass.exe then it is the legitimate module of the OS kernel

known as the Local Security Authority Subsystem Service.

 

If LSASS.EXE is executed from any other are of the OS such as %windir% or C:\Program

Files\Common Files then there is a problem, most likely malware.

 

 

--

Dave

http://www.claymania.com/removal-trojan-adware.html

Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp