How to remove lssas error

 Click to Run a Free Scan for lssas.exe related errors

lssas.exe file information

The process belongs to the software lssas.exe or AcroRdWin by MS.

Description: lssas.exe is located in the folder C:\Windows\System32 - typically c:\windows\ or C:\WINDOWS\system32\. Known file sizes on Windows XP are 424,960 bytes (35% of all occurrence), 136,704 bytes, 142,848 bytes, 197,632 bytes, 49,523 bytes, 51,712 bytes, 161,792 bytes, 6,277,773 bytes, 206,848 bytes, 50,184 bytes, 95,232 bytes, 260,690 bytes, 41,984 bytes, 112,128 bytes, 201,728 bytes, 81,920 bytes, 55,603 bytes, 197,120 bytes, 196,070 bytes, 102,619 bytes, 58,536 bytes.
The process has no file description. lssas.exe is not a Windows system file. The program has no visible window. The file is located in the Windows folder, but it is not a Windows core file. The process uses ports to connect to LAN or Internet. lssas.exe is able to hide itself, monitor applications, connect to Internet. Therefore the technical security rating is 90% dangerous, however also read the users reviews.

Recommended: Identify lssas.exe related errors

If lssas.exe is located in a subfolder of C:\Windows\System32 then the security rating is 74% dangerous. File size is 434,176 bytes (66% of all occurrence), 466,944 bytes. Program has no file description. The program has no visible window. lssas.exe is an unknown file in the Windows folder. Program starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Runonce). lssas.exe is not a Windows system file. lssas.exe is able to record inputs, hide itself, manipulate other programs.

If lssas.exe is located in a subfolder of C:\Windows then the security rating is 86% dangerous. File size is 57,414 bytes (66% of all occurrence), 38,982 bytes. There is no information about the maker of the file. The program is not visible. It is an unknown file in the Windows folder. The program starts when Windows starts (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Runonce). It is not a Windows system file. The program listens for or sends data on open ports to LAN or Internet. lssas.exe is able to monitor applications.

If lssas.exe is located in the folder C:\Windows then the security rating is 93% dangerous. File size is 31,232 bytes (50% of all occurrence), 45,568 bytes.

External information from Paul Collins:
There are different files with the same name:

• "lssass" definitely not required. Added by the AGOBOT.RL WORM!
• "Microsoft Management Console" definitely not required. EasySearch adware

Important: Some malware camouflage themselves as lssas.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the lssas.exe process on your pc whether it is pest. We recommend Security Task Manager for verifying your computer's security. It is one of the Top Download Picks of 2005 of The Washington Post and PC World.

It's a worm: W32.Agobot.RL. Norton doesn't find it. AVG doesn't find it.
   

I had once a Trojan wich runed shutdown -s -t 00 -c "something related to lssas.exe". All I needed to do is shutdown -a and then remove unknown startup registry key.
  Robi  

Soviel ich weiss gibt es eine echte lssas.exe die gerne von einem Virus überschrieben wird. Der hat Panda Antivir 2007 und Spyware Doctor ausgeschaltet, Taskmanager und ausführen ausgeschaltet, und etliche einträge im Registry verändert. Ich weiss noch nicht wie ich es los wird ohne nochmal ein Antivirus Software zum kaufen.
  George Vanny  

It has been flagged the "sober worm" by many websites. It duplicates itself into several other directories and uses FTP to upload data of your activities to a webserver, hence the port 21 lockup. I consider it dangerous as i logged it uploading all data i entered into forms and all the websites i visited. If you have Mozilla Firefox and you find that the process is always running, this is a sure sign you have the "sober" worm.
  Necrotising Fasciitis  

Only thing I know about, it is give me 50 sec after connect to net via Win2003, then closing PC, restart. After re-connect to net, the same countdown message appears...
  Abu Salem  

to remove it from my computer
  girmay  

probably a virus / key logger. Do not confuse with lsass.exe. Check in windows/system32 for this file and a seperate file of same name without extension.
   

Bewirkt ständig über 95% CPU-Auslastung, verunmöglicht Internet-Zugang
  Jocke  

cause that reboot "blue text...it said need upgrade ati driver or Bios upgrade "
  crashed to blue text  

I cloned a (failing) drive last week and everything on the transfer was good. After, my neice downloaded several free screensavers and my new system started working differently. The hidden file LSSAS.EXE isn't on the old drive. If I turn the computer off, it restarts on its own within a few minutes. Now, there are a few other files trying to get past my firewall and I get a few pop-ups during the day. Several times when the computer was supposed to be idle, the DSL modem showed activity. Each time I disconnected the modem the computer went into a (countdown) shutdown mode.
  Fred  

W32.AGOBOT.RL Trojan. Disable/Delete.
  Kisara  

Without closing lssas.exe I can't run a ftp-server. I think it uses the same port 21
  BeerLover  

I can not get on internet when it is running. When I "kill" it I can acces the internet.
  Phil  

adds pop up ads related to the adware.easysearch browser hijacker which is a variant of the coolwebsearch and about:search hijacker. Very annoying and hard to get rid of!
  MagiDrum   (further information)

On my system it (lssas.exe) locks up port 21 with a "Listening" status upon boot.
   

If you end task it, it auto restarts. LSSAS is malware, meant to be confused with the legitimate LSASS, pay attention!
  DaveMc  

I started to investigate what I have in the computer since I saw a non stop stream of information going out and coming in even when all progs were closed. No program I have could identify it (yet).
  Barak G.  

Possibly a virus as the real one is Lsass.exe
  Darren O'Brien   (further information)

Windows NT4/2000/XP/2003 only. It verifies the validity of user logons to your PC/Server (in technical jargon : it generates the process that is responsible for authenticating users for the Winlogon service). An integral part of the operating system, leave alone provided that its full path as shown is either C:\WinNT\System32\LSASS.exe (Windows 2000) or C:\Windows\System32\LSASS.exe (Windows XP/2003). If the path is anything else then you may have a virus.
  Camilo Quemedigas Medaigual  

This file can be closed without dammage
  geo909  

lssas scanner

Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

Registry Booster free scans, cleans, repairs and optimizes your system.

Other processes