Lsass.exe

[MiniMe]

Lsass.exe - You cannot end this process from Task Manager. . This is the
local security authentication server, and it generates the process
responsible for authenticating users for the Winlogon service. This process
is performed by using authentication packages such as the default
Msgina.dll. If authentication is successful, Lsass generates the user's
access token, which is used to launch the initial shell. Other processes
that the user initiates inherit this token.


Hi,

I have seen several posts saying that this is a worm, but apparently this is
also a Microsoft thing, how can we differentiate the 2, any help would be
greatly appreciated.

Thank You
MiniMe

 

[Mark L. Ferguson]

830574 - You receive a lsass.exe-system error Security Accounts Manager
initialization failed error message and event ID 116:
http://support.microsoft.com/default.aspx?scid=kb;en-us;830574&Product=winsvr2003