| Vendor: |
| Product: |
| Vendor Website: http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=125091 |
| Last Seen by PC Pitstop: No Data |
PC Pitstop has analyzed this process and determined that there is a high likelihood that it is bad.
PC Pitstop has analyzed this process and determined that the safety of this process is questionable.
PC Pitstop has analyzed this process and determined that there is a high likelihood that it is good.
This process is a Microsoft or Windows process, but many viruses use this file name to escape notice.Purpose: lsasss.exe - The lsasss.exe is recognized as the w32/Sasser.E Worm. It takes advantage of the ligitimate Windows LSASS vulnerability, which creates a buffer overrun that allows remote code execution. This process is a backdoor vulnerability and may be installed so that an attacker can access your computer from remote locations to steal passwords, banking data, and personal info. Check this Microsoft Security Bulletin MS04-011. http://www.microsoft.com/technet/security/bulletin/MS04-011.mspxPlease note that this file is not to be confused with lsass.exe which is a valid file name.
lsasss.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.
PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides an easy to understand descriptions of over 15,000 processes and programs.
Percentage of recently scanned PC's with this process running: 0.00%
Average CPU use for this program: 0%
Average RAM for this program: 14 MB
| Program Name | MD5 Count |
| lsasss.exe |
PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.
› Driver ScanA file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory.
If you are unable to identify a file, ask about it in our forums after running our full tests.