what is lsass.exe?

[Guest]

i'm sorry if I am in the wrong room, but i've been having strange activity on my computer. I am running Norton Internet Security 2004 and I am recieving massive numbers of program control popups from NIS saying a remote system is attempting to access my computer with various IPs. I have blocked them all, but this is getting very annoying. My doom, Netbus, and several other trojan horses are some of the culprits. Norton also popped up lsass.exe is accessing my computer too. What is lsass.exe? And, should i be worried about it?

 

[Monica]

isass - isass.exe - Process Information
Process File: isass or isass.exe
Process Name: isass
Description: Virus added to the system as a result of
variant of the OPTIX PRO TROJAN that opens TCP port 3410
and allows a hacker to control an infected computer.
Company: N/A
System Process: No
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): Yes


(Make sure it is not Lsass which is a valid Microsoft
Process.) See below:
Process File: lsass or lsass.exe
Process Name: Local Security Authority Service
Description: Windows Local Security Authority Server
Process handles Windows security mechanisms. It verifies
the validity of user logons to your computer or server.
Technically, the software generates the process that is
responsible for authenticating users for the Winlogon
service.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No

-----Original Message-----
i'm sorry if I am in the wrong room, but i've been having

strange activity on my computer. I am running Norton
Internet Security 2004 and I am recieving massive numbers
of program control popups from NIS saying a remote system
is attempting to access my computer with various IPs. I
have blocked them all, but this is getting very annoying.
My doom, Netbus, and several other trojan horses are some
of the culprits. Norton also popped up lsass.exe is
accessing my computer too. What is lsass.exe? And, should
i be worried about it?

 

[Guest]

I have scanned my comp. It was clean. I am sure that it is lsass.exe and it said that it was from Microsoft, but when I ran an IP analysis, it came back as unknown. Normally anything from Microsoft would have registered. Is it possible for someone to fake the name lsass.exe?
--
sourappletart

isass - isass.exe - Process Information
Process File: isass or isass.exe
Process Name: isass
Description: Virus added to the system as a result of
variant of the OPTIX PRO TROJAN that opens TCP port 3410
and allows a hacker to control an infected computer.
Company: N/A
System Process: No
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): Yes


(Make sure it is not Lsass which is a valid Microsoft
Process.) See below:
Process File: lsass or lsass.exe
Process Name: Local Security Authority Service
Description: Windows Local Security Authority Server
Process handles Windows security mechanisms. It verifies
the validity of user logons to your computer or server.
Technically, the software generates the process that is
responsible for authenticating users for the Winlogon
service.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No

-----Original Message-----
i'm sorry if I am in the wrong room, but i've been having

strange activity on my computer. I am running Norton
Internet Security 2004 and I am recieving massive numbers
of program control popups from NIS saying a remote system
is attempting to access my computer with various IPs. I
have blocked them all, but this is getting very annoying.
My doom, Netbus, and several other trojan horses are some
of the culprits. Norton also popped up lsass.exe is
accessing my computer too. What is lsass.exe? And, should
i be worried about it?