What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?

Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.

hi

my computer before the windows is up is showing the lsass message and then immidiatly reboots so i cant access the start button and stop the shutdown in the way you indicated !!
what to do?
thanks
arick

Gee: You'll need to boot into safe mode, or boot from floppy or CD and move the file back. It's a required system component.

Hi,

I know I was dumb when I went to regedit and deleted all keys related to "lsass"..Now the system crashes ... started with only blue screen... I am using Window XP...what should I do?

Many thanks in advance!

HA

PS: I am trying to search article in this site but the link is disable...If you dont mind, pls help me this time.

I believe you're facing a repair/reinstall of Windows. Boot from your Windows CD and follow the prompts for a repair.

im getting a lsass.exe - unable to locate component
this application has failed to start because LSASRV.dll was not found. Re-installing the application may fix this problem.

i get this everytime i turn on my computer and once i click ok the screen just stays black. Starting under safe mode it does the same thing. Could use a little help please.

The best option is a repair-install from your Windows CDs.

Anybody can use CA's e-Trust anti virus, version 7.1 to got rid off lsass.exe

Just install the s/w and scan ur machine with latest definition file. Ur problem is resolved.

Thanks

spyware parasites tries to use various file names similar to legitimate system files. lsass.exe file is no different. It is legitimate file but exploited a lot by parasites.
http://www.2-spyware.com/file-lsass-exe.html

Leo:
regarding the instruction to lookup hosts file with notepad, mine only works if I enter (Start - Run) C:\windows\... and then select notepad from the "what to open with" window that pops up. Also, I use SpySweeper which keeps all its list of sites etc - appended with "SpySweeperCSS" - in the hosts file, following the top entry of "local host".

I'm using Windows XP Pro SP2.

Thought you'd like to know. Others may be experiencing the same difficulty, or variation with access through Start/Run menu.

Regards

V

sir,
my computer is in the problem. How i can delete the lsass.exe from my pc

To post a comment on "What are "LSASS", "LSASS.EXE" and "Sasser" and how do I know if I'm infected? What do I do if I am?", please return to that article's main page.