lsass.exe process

[~~Alan~~]

What is the lsass.exe process in the Task Manager? I see I/O reads and
writes against this process and this is after an O/S rebuild. The CPU
Utilizzation is very minimal, almost nothing at all if that much.

WinXP SP3


thanks,
~alan

 

[Malke]

What is the lsass.exe process in the Task Manager? I see I/O reads and
writes against this process and this is after an O/S rebuild. The CPU
Utilizzation is very minimal, almost nothing at all if that much.

WinXP SP3

http://www.google.com/search?hl=en&q=lsass.exe&btnG=Search

Lsass.exe is an integral part of Windows.

Malke

 

[~~Alan~~]

thank you. That's what I eventually learned. Is the ongoing I/O traffic
normal?

~alan

 

[David H. Lipman]

From: "~~Alan~~" <[email protected]>

| thank you. That's what I eventually learned. Is the ongoing I/O traffic
| normal?

| ~alan

Alan:

What is really needed is the fully qualified path to LSASS.EXE
If it is; %windir%\system32\lsass.exe then it is the legitimate module of the OS kernel
known as the Local Security Authority Subsystem Service.

If LSASS.EXE is executed from any other are of the OS such as %windir% or C:\Program
Files\Common Files then there is a problem, most likely malware.