Click here to run our free scan and see if your computer's processes are safe. To find out how to make your computer faster, try running our Free PC Matic Scan.
Search For Processes
Unknown
Safe
User Optional
Unwanted
Spyware / Adware
Virus
More than one possible match was found; all matches are listed below in order of their prevalence. This only tells you what the file and the correct action might be.
To understand which possibility is actually running on your own system, perform an Overdrive test and then look at the Software|Processes tab.
You may find more information on this process by visiting Process Detail Pages.
Match #1
lsass.exe (Local Security Authority)
Prevalence
Percentage of recently scanned PC's with this process running: 33.98%
Average CPU use for this program: 0%
Average RAM for this program: 2 MB
Identification
In addition to the file name, lsass.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.
| Vendor contains: | Microsoft |
|---|---|
| Product contains: | Windows |
| File name contains: | \system32\ |
To view version information with Windows Explorer, right-click the file and click Properties, Version.
PC Pitstop Analysis
lsass.exe provides security functions in Windows 2000/XP. Leave it running, is very important for windows.
lsass.exe is an essential part of Windows and required for Windows to work properly. It should never be disabled.
PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides an easy to understand descriptions of over 15,000 processes and programs.
MD5 Hashes
MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called lsass.exe, we have detected more than 10 different MD5 hashes. Click on a hash to research the hash in Google.
| Program Name | MD5 Count |
| lsass.exe | > 10 |
| MD5 Hashes | |||||||
|---|---|---|---|---|---|---|---|
| # | MD5 | Size | |||||
| 1 | 0x37d4032efeac1bb4fb4dfdbbb726f510 | 13312 bytes | |||||
| 2 | 0xf685290987eaa6bacf3bc8a0d4b41037 | 13312 bytes | |||||
| 3 | 0x5d3125a7b351c8bb4dc2497807225740 | 12800 bytes | |||||
| 4 | 0x18f3328a3a46fd6f2d3f94dfbd77d7be | 11776 bytes | |||||
| 5 | 0xd4b61a935670c57a0dea81b4f4a12169 | 13312 bytes | |||||
| MD5 Hashes | ||||
|---|---|---|---|---|
| # | MD5 | Size | ||
| 6 | 0xb7b1c150aff59455db4df082815f88f5 | 11776 bytes | ||
| 7 | 0xb939d6c861b08e5571e19310cf309e3d | 13312 bytes | ||
| 8 | 0xf485fefc8cc4fd29243d800be5d275d1 | 13312 bytes | ||
| 9 | 0xf5ce3dc570f16d3e05d0a1f95f880115 | 11776 bytes | ||
| 10 | 0x180af4c5c1a4cd66572ed06f1499ecf8 | 11776 bytes | ||
Match #2
lsass.exe (lsass.exe)
Prevalence
Percentage of recently scanned PC's with this process running: 0.02%
Average CPU use for this program: 0%
Average RAM for this program: 6 MB
Identification
In addition to the file name, lsass.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.
| Vendor contains: | noOrg |
|---|---|
| Product contains: | Tblhc |
| File name contains: | \Users\Robin Duke\AppData\Roaming\lsass.exe |
To view version information with Windows Explorer, right-click the file and click Properties, Version.
PC Pitstop Analysis
lsass.exe -
lsass.exe is returning insufficient information about this program.
PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides an easy to understand descriptions of over 15,000 processes and programs.
Match #3
lsass.exe (Possible Virus ** Read **)
Prevalence
Percentage of recently scanned PC's with this process running: 0.01%
Average CPU use for this program: 0%
Average RAM for this program: 29 MB
Identification
The file name alone identifies this program.
Detailed Description and/or Removal Instructions
PC Pitstop Analysis
lsass.exe is a file name used by many malwares, look into Site URL.
lsass.exe provides security functions in Windows 2000/XP. is very important for windows, without it windows will not come up.
However USUALLY lsass.exe has in Vendor field "Microsoft" just like Product has "windows", was detected that this file has no Vendorinformation which makes it just suspicious.
Was found a virus/trojan with the same name, run a virus scan to be sure that is not the case.
lsass.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.
lsass.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends PC Matic in these types of situations.
MD5 Hashes
MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called lsass.exe, we have detected more than 10 different MD5 hashes. Click on a hash to research the hash in Google.
| Program Name | MD5 Count |
| lsass.exe | > 10 |
| MD5 Hashes | |||||||
|---|---|---|---|---|---|---|---|
| # | MD5 | Size | |||||
| 1 | 0xcaaf45327eca87b903b61addd62c3201 | 83968 bytes | |||||
| 2 | 0x619fce8a1e7e994ed7700469eab86ea0 | 86016 bytes | |||||
| 3 | 0x43e4f5a31ff7c90f59f4ac9b4d2eecf5 | 52224 bytes | |||||
| 4 | 0x21fcb481c82d3775649adfec10cf84cc | 73728 bytes | |||||
| 5 | 0xb42a9aba181569680e52f619f6735a84 | 843776 bytes | |||||
| MD5 Hashes | ||||
|---|---|---|---|---|
| # | MD5 | Size | ||
| 6 | 0xd856ca904bd03ba0614a5ca95fb014cc | 107546 bytes | ||
| 7 | 0xa98d25e10bf8a534068c5da49ce4e08a | 3202407 bytes | ||
| 8 | 0xdec28f0ae1034cfb5530010f0d98f42d | 77826 bytes | ||
| 9 | 0xa6ba48c21e82dce88ab9b7cda42b69d1 | 67072 bytes | ||
| 10 | 0x7292bb873ec2567ebf1277b129a3157f | 66560 bytes | ||
Match #4
lsass.exe (Troj/Bancos-EB)
Prevalence
This program has not been seen on any systems tested at PC Pitstop in the past week.
Identification
In addition to the file name, lsass.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.
| Vendor is not specified | |
|---|---|
| Product is not specified | |
| File name contains: | \system32\inmbox\ |
To view version information with Windows Explorer, right-click the file and click Properties, Version.
Detailed Description and/or Removal Instructions
http://www.sophos.com/security/analyses/viruses-and-spyware/trojbancoseb.html
PC Pitstop Analysis
According to Sophos:
Troj/Bancos-EB is an Internet Banking Trojan for the Windows platform.
Troj/Bancos-EB monitors the user's internet activity and displays fake login pages if the user visits certain predefined URLs. Any login details entered on the fake page are logged.
lsass.exeDISABLE AND REMOVE. Intrusive adware or spyware.
PC Pitstop Exterminate removes lsass.exe and all other forms of malware and spyware. Run a free scan and analysis to learn how to quickly and easily rid your computer of adware and spyware.
MD5 Hashes
MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called lsass.exe, we have detected 2 different MD5 hashes. Click on a hash to research the hash in Google.
| Program Name | MD5 Count |
| lsass.exe | 2 |
| MD5 Hashes | |||||||
|---|---|---|---|---|---|---|---|
| # | MD5 | Size | |||||
| 1 | 0x3dd9cb65ae4bf235d6bb76c69b61340d | 6905856 bytes | |||||
| MD5 Hashes | ||||
|---|---|---|---|---|
| # | MD5 | Size | ||
| 2 | 0xca2d902318eda0f80611109487580718 | 6905856 bytes | ||
Match #5
lsass.exe (AVP - CA)
Prevalence
This program has not been seen on any systems tested at PC Pitstop in the past week.
Identification
In addition to the file name, lsass.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.
| Vendor contains: | MskSoftStudy Corp. |
|---|---|
| Product is not specified | |
To view version information with Windows Explorer, right-click the file and click Properties, Version.
Detailed Description and/or Removal Instructions
http://www.ca.com/securityadvisor/pest/pest.aspx?id=453119383
PC Pitstop Analysis
According to CA:
Adware: Software that displays pop-up/pop-under advertisements when the primary user interface is not visible, or which do not appear to be associated with the product.
lsass.exe is spyware/adware. PC Pitstop recommends strongly that all adware and spyware be immediately removed. This application category consumes considerable system resources and the performance gain is quite noticeable. Furthermore, adware/spyware pose a security risk to your computer as it sends your personal information back to the mothership.
PC Pitstop Exterminate removes lsass.exe and all other forms of malware and spyware. Run a free scan and analysis to learn how to quickly and easily rid your computer of adware and spyware.
MD5 Hashes
MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called lsass.exe, we have detected 1 different MD5 hashes. Click on a hash to research the hash in Google.
| Program Name | MD5 Count |
| lsass.exe | 1 |
| MD5 Hashes | |||||||
|---|---|---|---|---|---|---|---|
| # | MD5 | Size | |||||
| 1 | 0xb9f1de89f892493f9d6cbb83d41a3f9c | 25088 bytes | |||||
Match #6
lsass.exe (Possible Virus ** Read **)
Prevalence
This program has not been seen on any systems tested at PC Pitstop in the past week.
Identification
The file name alone identifies this program.
Detailed Description and/or Removal Instructions
PC Pitstop Analysis
lsass.exe is a file name used by many malwares, look into Site URL.
lsass.exe provides security functions in Windows 2000/XP. is very important for windows, without it windows will not come up.
However USUALLY lsass.exe has in Vendor field "Microsoft" just like Product has "windows", was detected that this file has no Vendorinformation which makes it just suspicious.
Was found a virus/trojan with the same name, run a virus scan to be sure that is not the case.
lsass.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.
lsass.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends PC Matic in these types of situations.
MD5 Hashes
MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called lsass.exe, we have detected more than 10 different MD5 hashes. Click on a hash to research the hash in Google.
| Program Name | MD5 Count |
| lsass.exe | > 10 |
| MD5 Hashes | |||||||
|---|---|---|---|---|---|---|---|
| # | MD5 | Size | |||||
| 1 | 0xd4c381fed65e5a9791451ec8220ba845 | 182272 bytes | |||||
| 2 | 0xec12331f4d5733891a43e342b6060c7f | 29696 bytes | |||||
| 3 | 0x9f7f40398274acd0718792bf41bc59fd | 94208 bytes | |||||
| 4 | 0xef82c0fe0e5f82a89d6410abd77dd21a | 280592 bytes | |||||
| 5 | 0xa0c8b3c28f751cc4335f11e0598276de | 29696 bytes | |||||
| MD5 Hashes | ||||
|---|---|---|---|---|
| # | MD5 | Size | ||
| 6 | 0x2781593a030499ba487b963c608675bd | 15505 bytes | ||
| 7 | 0x99ead239c017c1a182b2e80b4f702bb4 | 302592 bytes | ||
| 8 | 0x46c1c1b65f64c9f9da091d5a4b3b8b98 | 205547 bytes | ||
| 9 | 0xd799d8ffd0c98af60507b98e2961b826 | 25600 bytes | ||
| 10 | 0x0a6c57d253c89ff47c990f7a7478fa52 | 108544 bytes | ||
Try a free diagnostic now
PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.
To find the latest driver for your computer we recommend running our Free Driver Scan.
Find out how to make your computer faster by running our Free Performance Scan.
Tips from the PitCrew
Every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.
› Get more tips› Subscribe to TechTalk
Important Note
A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory.
If you are unable to identify a file, ask about it in our forums after running our full tests.