Local Security Authority Subsystem Service: Difference between revisions

Content deleted Content added
m Reverted edits by 93.37.249.238 (talk) (HG)
m Added details about the way some malicious developers name files to trick users.
Line 4:
Forcible termination of <tt>lsass.exe</tt> will result in the Welcome screen losing its accounts, prompting a restart of the machine.
 
Because lsass.exe is a crucial system file, its name is often faked by malware. The lsass.exe file used by Windows is located in the folder C:\Windows\System32. If it is running from any other ___location, that lsass.exe is most likely a virus, spyware, trojan or [[Worm (computing)|worm]]. Due to the way some systems display fonts, malicious developers may name the file something like Isass.exe (capital "i" instead of a lowercase "L") in efforts to trick users into installing or executing a malicious file instead of the trusted system file. <ref>http://www.errorboss.com/exe-files/lsass-exe/</ref>
 
==See also==