M
MiniMe
Hi,
This is the 3rd time I have asked this question and I have yet to get an
answer, It is re: the lsass.exe,
I have seen several times that people have been advised to remove this as it
is a worm but as the info below states it is a Microsoft product, how is one
supposed to differentiate between the 2? Any help one this would be
gratefully appreciated.
"lsass.exe" is the Local Security Authentication Server. It verifies the
validity of user logons to your PC/Server. It generates the process
responsible for authenticating users for the Winlogon service. This process
is performed by using authentication packages such as the default
Msgina.dll. If authentication is successful, Lsass generates the user's
access token, which is used to launch the initial shell. Other processes
that the user initiates inherit this token.
This is the 3rd time I have asked this question and I have yet to get an
answer, It is re: the lsass.exe,
I have seen several times that people have been advised to remove this as it
is a worm but as the info below states it is a Microsoft product, how is one
supposed to differentiate between the 2? Any help one this would be
gratefully appreciated.
"lsass.exe" is the Local Security Authentication Server. It verifies the
validity of user logons to your PC/Server. It generates the process
responsible for authenticating users for the Winlogon service. This process
is performed by using authentication packages such as the default
Msgina.dll. If authentication is successful, Lsass generates the user's
access token, which is used to launch the initial shell. Other processes
that the user initiates inherit this token.