Summary: Lsass.exe and svchost.exe are required system files for Windows NT, 2000 and XP. If you delete them without care your system may become unbootable.
Can I delete lsass.exe? svchost.exe?
If you're running Windows XP, 2000, 2003, or NT - Absolutely NOT.
These are required system files. Windows won't run without them. See these articles for more information:
•
Related:
Ask Leo! - Svchost and Svchost.exe - Crashes, CPU maximization, viruses, exploits and more.
Ask Leo! - What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?
Ask Leo! - Where is it alright for svchost.exe to be?
Article C1962 - May 30, 2004
i cant seem to shut down my computer the usual way..instead i am required to open my task manager every time, end task ISASS. exe before i could turn it off... i believe it is infected by a virus or something...how can i resolve this?..please help.
Posted by: aubrey david at February 26, 2008 1:53 AMHi Leo, I have deleted lsass.exe & smss.exe after my laptop infected with Funny IST scandal from the registry. I was not aware that these are windows files and essential for system to run. Now I am not able to boot my laptop, is there any solution for this?
Thanks in advance.
Posted by: Rajesh at June 6, 2008 2:43 AMRajesh.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
You'll probably have to perform a repair-reinstall of
Windows.
http://ask-leo.com/how_should_i_reinstall_windows.html
Leo
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
iD8DBQFISWVdCMEe9B/8oqERAqAHAJ0WP2AWyZ6FhBXO99IKaVElTiPv+ACgh5yD
Posted by: Leo at June 6, 2008 9:27 AM07Y3OgPfx3SDoqALQz0EQCE=
=YMZP
-----END PGP SIGNATURE-----
I'm confused, got a alert from norton internet security, indication low risk, so what to do block or grant access to the internet for lsass.exe, pls help. Thanks all for the comments.
Posted by: Jimmy Wong at August 23, 2008 12:31 AMUh, Yeah, I kind of sent svchost to the recycle and screwed up my computer.
Posted by: Trina at November 20, 2008 11:59 PMI connected my stuffedup harddisk as a slave and was able to copy paste a svchost.exe file into windows32 but i cant seem to activate it.
I really want my files back!!
Everythings due at school now so acessing files is kind of crucial!
PLEASE HELP LEO!!!!!
K, Leo,
Posted by: Trina at November 21, 2008 12:14 AMI've just read some more posts and im saddened to find out the SAFEST THING to do is reload windows. . . are there any LESS SAFE options that allow me to still keep my files?
PLEASE HELP LEO!!!
Sorry Here is my predicament saidmore clearly.
Posted by: Trina at November 21, 2008 12:24 AMI deleted svchost.exe
I found a copy of svchost.exe
I put it in the windows32 file
My computer sees it and says theres an error (sorry dunno what it is right now)
Is there a way of properly activating it or fixing it.
I wouldlike to avoid reloading windows.
PLEASE HELP (Hope this was clearer)
hi Leo, can you help me w/ my problem of SVCHOST.EXE that is eating up my memory/cpu usage.. i'm using windows xp sp2,can i have a step by step manual correction for this matter...
Posted by: Vince at April 1, 2009 6:29 PMthanks!
Hello
My svchost.exe i guess it is infected
because each time i upload a file to my hosting, it looks fine, but after a while , i see a java script line added to my index page and this is malaware . in google my sites started showing that it this site might harm your pc.
i made format to my pc, and again i was attacked by the same problem,
I tried 4 different hosting companies, they said that someone has access to my passwords to do that, i changed password and still same problem.
i was reading http://www.liutilities.com/products/wintaskspro/processlibrary/svchost/
so how to deal with that?
Posted by: mike at May 9, 2009 2:43 PMthanks
I have three or more entries of svchost.exe in TasK Manager.
When I end the svchost process with the highest CPU-time
after som time i get the message that a shutdown is coming.
For that I am prepared in cmd to abort that shutdown.
Is this a virus.
I have a screenshot of task manager but I do not know how to send it to you.
Zone Alarm detected 55 attempts to go outbound.
Before that I had 1175 viruses all of them with names of
movies.
I removed them with a trial of Avira Pro.
I am using Virtual PC on a Mac G4 (QuickSilver) 2 processors
and 1.5 Gb core.
Have a nice day!!
Posted by: Frank Rojer at May 18, 2009 8:29 PM