What does the lsass.exe file do?

Free PC Check

Take advantage of our free computer check to identify problems with lsass.exe

Scan your computer for free with the Windows Repair Tool. This tool repairs Windows and improves its performance. Scans are free. A premium version is available for purchase.

What you should know about lsass.exe Local Security Authority Process

lsass.exe is a Windows system file. The file lsass.exe is found in the C:\Windows\System32 directory. Frequently occurring are file sizes such as 13,312 bytes (71% of all these files), 22,528 bytes as well as 12 other variants.
The program executes in the background, and can only be terminated using Windows Task Manager. It contains Microsoft's digital signature. This confirms its authenticity. The application is connected to a server on the Internet or in your local network. For this reason, 10% of all experts consider this file to be a possible threat. The probability that it can cause harm is high.

lsass.exe is a system file used by Microsoft Windows, and appears in Windows Task Manager as a process named "Local Security Authority Process." However, some viruses and Trojans use the same file name to avoid detection (such as Trojan.Gen or, as the case may be, WS.Reputation.1 (recognized by Symantec), as well as Trojan.Win32.Inject.cdyu or, as the case may be, Trojan-Spy.Win32.KeyLogger.cor (recognized by Kaspersky)).
For better security, scan your computer with two different antivirus engines. You can use free antivirus software for this purpose.

Objectionable files with the same file name have the following characteristics:

• A lsass.exe file has a 86% certainty of being dangerous if it is found in a subdirectory of C:\Windows. In this case, the file size is usually 6,790,656 bytes (16% of all these files), 3,902,464 bytes as well as 14 other variants. This particular software does not have a visible window, and does not appear on the taskbar. The lsass file is not part of the Windows operating system. The lsass file can be found in the Windows folder; however, it is not a Windows system file. There is no embedded description in this file. These days, this is rather unusual This lsass program is receiving or sending data on the LAN (your local network) or on the Internet. Lsass.exe is capable of monitor other applications.
• A lsass.exe file has a 60% certainty of being dangerous if it is found in a subdirectory of "C:\Users\USERNAME". In this case, the file size is usually 212,992 bytes (15% of all these files), 38,749 bytes as well as 10 other variants. It was developed by a so-called third party provider - and not by Microsoft. The application is initiated as part of Windows start-up (Registry: MACHINE\Run, Run, Userinit, User Shell Folders, Winlogon\Shell). The application does not appear as a visible window, but only in Task Manager. File properties have not been internally documented by the producer or developer. Lsass.exe is capable of monitor other applications as well as Change the behavior of other applications.
• A lsass.exe file has a 52% certainty of being dangerous if it is found in a subdirectory of C:\. In this case, the file size is usually 44,544 bytes (28% of all these files), 551,669 bytes, 621,301 bytes, 654,069 bytes or, as the case may be, 265,080 bytes.
• A lsass.exe file has a 78% certainty of being dangerous if it is found in a subdirectory of "C:\Program Files". In this case, the file size is usually 196,919 bytes (60% of all these files), 4,606,976 bytes or, as the case may be, 6,304,256 bytes.
• A lsass.exe file has a 86% certainty of being dangerous if it is found in the Windows Temp directory. In this case, the file size is usually 6,790,656 bytes (50% of all these files) or, as the case may be, 24,064 bytes.
• A lsass.exe file has a 86% certainty of being dangerous if it is found in the C:\Windows directory. In this case, the file size is usually 528,398 bytes (50% of all these files) or, as the case may be, 185,344 bytes.

If you see this file on your hard drive or in Windows Task Manager, please make sure that it is not a malicious variant. It's a fact that many trojans try to cloak their true identity by calling themselves lsass.exe. With the above information or by using tools like Security Task Manager you can determine if, in your case, the file is an undesirable variant.

What do other computer users say about lsass?

Summary: 238 users consider lsass.exe essential and should not be removed. 29 users consider it harmless. However, 75 users consider this to be a suspicious process and would like to get rid of it. For this reason, 192 users have already removed lsass.exe. source: file.net

How to uninstall the program or IPSEC Services, Protected Storage, Security Accounts Manager

To remove Local Security Authority Process from your computer, please follow the manual instructions below.

How to check if lsass.exe (Local Security Authority Process) was uninstalled completely

After uninstalling, restart your computer. Then open Windows Explorer and check if a folder with the software name still exists under C:\Program Files. Also, check the Registry for remnants of Local Security Authority Process. To do this, start Regedit, then look under HKEY_LOCAL_MACHINE > Software for: Local Security Authority Process or the name of the producer. Keep in mind that only a computer professional should delete entries in the Windows Registry directly.

Last but not least

If Windows is not working properly, startup is slow, or lsass.exe is causing problems, a good Windows diagnostic tool may help. This is especially effective when it comes to older computers that have accumulated vast quantities of "garbage data" as the result of many software installs and uninstalls.

Users interested in lsass.exe have also searched for: dllhost.exe firefox.exe igfxpers.exe lsass.exe skypehost.exe googleupdate.exe nvcontainer.exe plugin-container.exe [index]