Is the lsass.exe process a virus, spyware or malware?
Process description:
Local Security Authentication Server
| Author: | Microsoft |
| Part of: | Windows |
Other viruses are known to disguise themselves with this process name, so ensure the process is running from C:\Windows\System32. If this is not the case, the process could be a virus, malware or spyware.
No visitors have rated the threat level of this process.
0% DANGEROUS |
0% NORMAL |
0% SAFE |
0% UNKNOWN |
Common location(s):
C:\Windows\System32
 | Visitor comments |
... rated this process as safe
Fahad Suleman
The process lsass.exe is the Local Security Authentication Server. It is a safe file from Microsoft and is responsible for security policy enforcement within the operating system, verifies users logging on to a Windows computer or server, handles password changes, and creates access tokens. It also writes to the Windows Security Log.
Whenever a user tries to access the computer, lsass checks if the user's identification is valid or not. The system uses lsass.exe to prevent unwanted users from accessing any private information. Also the file lsass handles user password modifications. If authentication is successful, lsass generates the user's access token, which is used to launch the initial shell. This token includes the file's security descriptor, which contains the necessary information to process user authentication.
Forcible termination of this windows process will result in the Welcome Screen losing its accounts and you will be prompted to restart your computer.
Whenever a user tries to access the computer, lsass checks if the user's identification is valid or not. The system uses lsass.exe to prevent unwanted users from accessing any private information. Also the file lsass handles user password modifications. If authentication is successful, lsass generates the user's access token, which is used to launch the initial shell. This token includes the file's security descriptor, which contains the necessary information to process user authentication.
Forcible termination of this windows process will result in the Welcome Screen losing its accounts and you will be prompted to restart your computer.
 | Add comment |
previous process
next process
