Local Security Authority Subsystem Service: Difference between revisions

Revision as of 18:55, 16 January 2018

Revision as of 11:35, 22 January 2018

Line 4:

Forcible termination of <tt>lsass.exe</tt> will result in the Welcome screen losing its account/s, prompting a restart of the machine.

Because lsass.exe is a crucial system file, its name is often faked by malware. The lsass.exe file used by Windows is located in the [[Directory (computing)|directory]] <code>%WINDIR%\System32</code>. If it is running from any other ___location, that lsass.exe is most likely a [[Computer virus|virus]], [[spyware]], [[Trojan horse (computing)|trojan]] or [[Worm (computing)|worm]]. Due to the way some systems display fonts, malicious developers may name the file something like Isass.exe (capital "Li" instead of a lowercase "l") in efforts to trick users into installing or executing a malicious file instead of the trusted system file.<ref>{{cite web|url=http://www.errorboss.com/exe-files/lsass-exe/ |title=The Best Way To Remove Lsass.exe Virus - Fix Lsass Process |publisher=Errorboss.com |date= |accessdate=2016-05-24}}</ref>

==References==