PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

Tip from the PitCrew

Every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Furthermore, perhaps the quickest and most straight forward method to detect malware is through a running process analysis.

Process Library

  

More than one possible match was found; all matches are listed below in order of their prevalence. This only tells you what the file and the correct action might be.

To understand which possibility is actually running on your own system, perform an Overdrive test and then look at the Software|Processes tab.


Match #1

lsass.exe (Local Security Authority)

Percentage of recently scanned PC's with this process running: 43.16%
Average CPU use for this program: 0%
Average RAM for this program: 2 MB


PC Pitstop Analysis

lsass.exe provides security functions in Windows 2000/XP. Leave it running, is very important for windows.


Recommendation

Win Patrol

lsass.exe is an essential part of Windows and required for Windows to work properly. It should never be disabled.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides a easy to understand descriptions of over 15,000 processes and programs.



Identification

In addition to the file name, lsass.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Microsoft
Product contains:Windows
File name contains:\system32\

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called lsass.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
lsass.exe> 20
#MD5Size
10x37d4032efeac1bb4fb4dfdbbb726f51013312 bytes
20xf685290987eaa6bacf3bc8a0d4b4103713312 bytes
30x5d3125a7b351c8bb4dc249780722574012800 bytes
40x18f3328a3a46fd6f2d3f94dfbd77d7be11776 bytes
50xd4b61a935670c57a0dea81b4f4a1216913312 bytes
60xb7b1c150aff59455db4df082815f88f511776 bytes
70xb939d6c861b08e5571e19310cf309e3d13312 bytes
80xf485fefc8cc4fd29243d800be5d275d113312 bytes
90xf5ce3dc570f16d3e05d0a1f95f88011511776 bytes
100x180af4c5c1a4cd66572ed06f1499ecf811776 bytes
110x125b40a5fded8fcfb343207d0975e02011776 bytes
120x393c85fdff94b457aee598798242551513312 bytes
130x5ac2f1869c1eef4a1b41e245e668328e11776 bytes
140x932e3a85e0df34a7c63c2b5764fb08d233552 bytes
150xdca954020032201126ca6c1d692b151111776 bytes
160x514c559590ade60d5b3adcf152d7522610000 bytes
170x06df1b4d51bea83cf16fd45ab8c8cce811776 bytes
180x8235198cdb70aaeb3c1435c1911641f913312 bytes
190x82a362fe1d4980b71b588d9c1074851113312 bytes
200x3f244472c83a5f26489a456cd92983e939184 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. lsass.exe (Local Security Authority) has been seen on 43.16% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 2 MB. The average CPU load for this program was 0%.



Match #2

lsass.exe (Possible Virus ** Read **)

Percentage of recently scanned PC's with this process running: 0.00%
Average CPU use for this program: 0%
Average RAM for this program: 0 MB


PC Pitstop Analysis

lsass.exe is a file name used by many malwares, look into Site URL.
lsass.exe provides security functions in Windows 2000/XP. is very important for windows, without it windows will not come up.
However USUALLY lsass.exe has in Vendor field "Microsoft" just like Product has "windows", was detected that this file has no Vendorinformation which makes it just suspicious.
Was found a virus/trojan with the same name, run a virus scan to be sure that is not the case.


Recommendation

CA AntiVirus

lsass.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

lsass.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.



Identification

The file name alone identifies this program.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called lsass.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
lsass.exe> 20
#MD5Size
10xd4c381fed65e5a9791451ec8220ba845182272 bytes
20xec12331f4d5733891a43e342b6060c7f29696 bytes
30x9f7f40398274acd0718792bf41bc59fd94208 bytes
40xef82c0fe0e5f82a89d6410abd77dd21a280592 bytes
50xa0c8b3c28f751cc4335f11e0598276de29696 bytes
60x2781593a030499ba487b963c608675bd15505 bytes
70x99ead239c017c1a182b2e80b4f702bb4302592 bytes
80x46c1c1b65f64c9f9da091d5a4b3b8b98205547 bytes
90xd799d8ffd0c98af60507b98e2961b82625600 bytes
100x0a6c57d253c89ff47c990f7a7478fa52108544 bytes
110x8a85ac453c4e6b76a38bcebf7e638ed2296462 bytes
120x7ebce3cd00c379754df6cbcda0def55498372 bytes
130x8bcbeaa386119b077d4303b072d54c7270144 bytes
140xbe38272d0e43a8ef6efdbdac680c2cce802816 bytes
150x371cf58065179f27b095bc49accd1cf829696 bytes
160x2424da7770a2669d16b21f8b76e44b5640960 bytes
170x38f86e1a2399629a02dfab0fec3baf82245790 bytes
180x5eda97da60598305308b383e93cfe1bd85504 bytes
190xf59e5809886fa89f31d4c8f6ce3976c8136192 bytes
200x2e25905ec186fbdfa8bfb1134bf5be1e745472 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. lsass.exe (Possible Virus ** Read **) has been seen on 0.00% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 0 MB. The average CPU load for this program was 0%.


Detailed Description and/or Removal Instructions

http://search.ca.com/search/ca?charset=iso-8859-1&qt=lsass.exe&rq=0&la=en&oq=OUTLOOK.EXE&Submit=Search&nh=10&nh=10


Match #3

lsass.exe (Possible Virus ** Read **)

Percentage of recently scanned PC's with this process running: 0.00%
Average CPU use for this program: 0%
Average RAM for this program: 3 MB


PC Pitstop Analysis

lsass.exe is a file name used by many malwares, look into Site URL.
lsass.exe provides security functions in Windows 2000/XP. is very important for windows, without it windows will not come up.
However USUALLY lsass.exe has in Vendor field "Microsoft" just like Product has "windows", was detected that this file has no Vendorinformation which makes it just suspicious.
Was found a virus/trojan with the same name, run a virus scan to be sure that is not the case.


Recommendation

CA AntiVirus

lsass.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

lsass.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.



Identification

The file name alone identifies this program.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called lsass.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
lsass.exe> 20
#MD5Size
10xcaaf45327eca87b903b61addd62c320183968 bytes
20x619fce8a1e7e994ed7700469eab86ea086016 bytes
30x43e4f5a31ff7c90f59f4ac9b4d2eecf552224 bytes
40x21fcb481c82d3775649adfec10cf84cc73728 bytes
50xb42a9aba181569680e52f619f6735a84843776 bytes
60xd856ca904bd03ba0614a5ca95fb014cc107546 bytes
70xa98d25e10bf8a534068c5da49ce4e08a3202407 bytes
80xdec28f0ae1034cfb5530010f0d98f42d77826 bytes
90xa6ba48c21e82dce88ab9b7cda42b69d167072 bytes
100x7292bb873ec2567ebf1277b129a3157f66560 bytes
110x810ce55fb66d8fce42463591f5de54a0281088 bytes
120xe08e1f6f3bf51ce8fd216f732774819544032 bytes
130x4943e562b22c4b6d76571b12b871c2fb90605 bytes
140x7ff853f8c208c76988a32e792aac33f6280576 bytes
150x1acba702e06afc1e4fc3d082dd8e71e243072 bytes
160x0dc3998214e0fc174d61e641a4cd584086016 bytes
170xee1a354ae977067e953869e5d1f9e0eb281088 bytes
180x9adccf77b1b5547f2b35419a93bde75957344 bytes
190x7f570fa876b286e01478043932877e9f44544 bytes
200x6a090a32319fdeeda236a7dfaf7f8ee31826871 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. lsass.exe (Possible Virus ** Read **) has been seen on 0.00% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 3 MB. The average CPU load for this program was 0%.


Detailed Description and/or Removal Instructions

http://search.ca.com/search/ca?charset=iso-8859-1&qt=lsass.exe&rq=0&la=en&oq=OUTLOOK.EXE&Submit=Search&nh=10&nh=10


Match #4

lsass.exe (AVP - CA)

This program has not been seen on any systems tested at PC Pitstop in the past week.


PC Pitstop Analysis

According to CA:

Adware: Software that displays pop-up/pop-under advertisements when the primary user interface is not visible, or which do not appear to be associated with the product.


Recommendation

PC Pitstop Exterminate

lsass.exe is spyware/adware. PC Pitstop recommends strongly that all adware and spyware be immediately removed. This application category consumes considerable system resources and the performance gain is quite noticeable. Furthermore, adware/spyware pose a security risk to your computer as it sends your personal information back to the mothership.

PC Pitstop Exterminate removes lsass.exe and all other forms of malware and spyware. Run a free scan and analysis to learn how to quickly and easily rid your computer of adware and spyware.



Identification

In addition to the file name, lsass.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:MskSoftStudy Corp.
Product is not specified

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called lsass.exe, we have detected 1 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
lsass.exe1
#MD5Size
10xb9f1de89f892493f9d6cbb83d41a3f9c25088 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.


Detailed Description and/or Removal Instructions

http://www.ca.com/securityadvisor/pest/pest.aspx?id=453119383


Match #5

lsass.exe (Troj/Bancos-EB)

This program has not been seen on any systems tested at PC Pitstop in the past week.


PC Pitstop Analysis

According to Sophos:

Troj/Bancos-EB is an Internet Banking Trojan for the Windows platform.

Troj/Bancos-EB monitors the user's internet activity and displays fake login pages if the user visits certain predefined URLs. Any login details entered on the fake page are logged.


Recommendation

PC Pitstop Exterminate

lsass.exeDISABLE AND REMOVE. Intrusive adware or spyware.

PC Pitstop Exterminate removes lsass.exe and all other forms of malware and spyware. Run a free scan and analysis to learn how to quickly and easily rid your computer of adware and spyware.



Identification

In addition to the file name, lsass.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor is not specified
Product is not specified
File name contains:\system32\inmbox\

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called lsass.exe, we have detected 2 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
lsass.exe2
#MD5Size
10x3dd9cb65ae4bf235d6bb76c69b61340d6905856 bytes
20xca2d902318eda0f806111094875807186905856 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.


Detailed Description and/or Removal Instructions

http://www.sophos.com/security/analyses/viruses-and-spyware/trojbancoseb.html

Important note: A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.