Home > General > Lsass.exe
Fixes for the sasser viruses can be d/loaded from another pc. It has come back twice for me and it's a load of trouble. It worked for me. It appears as though the lsass service just crashes. http://longtermpolicy.net/general/windows-config-lsass-exe.html
Antivirus programs can detect and clean this file if it has become infected. Other processes that the user initiates inherit this token for them that says it a viruse are scare mungering, yes if it fails ur pc will shut down, See also: Link X At random encounters (about at least once in 20 minutes, but mostly every 5 minutes) it keeps my system BUSY by drawing 80% CPU load on a PIII-866 running XP Does yours freeze even when you're not doing something particularly CPU intensive? over here
It's a mess. Microsoft has long since patched the vulnerability that allowed the virus to infect Windows. Apply the necessary security updates and protect the file from infection / replacement. Ritesh Bhardwaj it restarts the computer after few minutes gurpreet I dont know much..
Aatif Ijaz It reboots your system at any time jami i've deleted 6 of the same virus in last few hours called W32.HLLW.Gaobot.gen with filename lsass.exe so somethings up Travis This I understand it's not the virus, but how do I get rid of it?!?! username/password pairs) for local logins (that is, logins to your workstation in a workgroup environment)- passing login credentials to your domain controller and getting responses for domain logins- enforcing some aspects There is NO need to remove lsass.exe it is a vital system file in a networked computer.
rude1 lsass.exe is apparently modified by a Trojan Horse named TROJ_HOLAX.C. System shutting down in ...". d. Visit Website As long as said file is located in c:\windows\System32\lsass.exe it's the real file.
The file is not a Windows core file. If lsass.exe is located in a subfolder of C:\Windows, the security rating is 80% dangerous. Once you have selected delete on next boot the file can then be right-click / deleted immediately See also: Link JMR There is also another file named "lssas.exe" Pay close attention The lsass.exe which shuts down users PCs is the W32.Sasser Worm.
That's nothing out of the ordinary; I have five running on one machine and four on another. More and more harmfull stuff is being sent out with window file names, using1instead of l, I instead of l etc..... Naseer if it keeps happening just create a new batch file with this code: ":START" (newline) "shutdown -a" (new line) "GOTO START". See also: Link Die Salomon If it is a System proces it isn't dangerous, But if the process is in your name it's a virus Myr Isass.exe and lsass.exe is allmost
removing this file will cause windows to stop functioning it is required for security authentication, if your machine is shutting down chances are you have the sasser worm, see symantecs website If it is spelt with an "i" (or any other letter, for that fact), it is the worm, but if it spelled with and "L", then don't delete or stop it, xxx Sasser attacks this Windows process. Antivirus and have run the patch in Windows, still not removed it might be some kind of worm called blaster or sasser but cant clean it yet, I consider it's dangerous.
That doesn't say that someone either has or hasn't figured out how to misuse, or potentially abuse it. To remove usea programme like Gipin Softwares Move on Boot which will remove ANY file that will not delete. I had the Korgo.worm and its that which uses flaws in lsass.exe and RPC to shutdown your machine.
and you can use this command on run "shutdown -a" to prevent shutdown Cüneyt Uğur If broadband cable is connected then only this "Lsass.exe error windows shutting down in 60 sec"
now you have a lot of time at your disposal to think about the problem. which looks the same. Edsel virus is having the same name as this file.. I have run one of the Symantec fix tool, but the issue persists.
Caution, Blueyonder will tell you to search for sasser files and if you find lsass.exe to delete it - don't if it's the legit one! Aamir Lsass.exe ís obviously a windows process. At the end, I need to reformat my computer and reinstall all the software i want to use.. Dayanand.J this file lock your computer if u leave the computer for more then 15 minuter.then u must restart.
The older computer which was previously shutting down now works fine. !!!