Lsass.exe

[ANGELO13111]

best username on youtube @yoblacknigga

[theluckyboy54321]

i have this error to. but lucky i have ubuntu installed in my computer but 1 thing. all my programs are in my xp including camstudio and hypercam now i cant make any youtube videos unless i fix this problem

[falcaonet]

i have the same problem, very similar, only the message seems to be a lil different.How did you solve it?I have ERD commander btw.Thanks

[stamosgang]

my lsass.exe prevents me from launching automatically at startup explorer.exe with a red screen.Is this lsass.exe ir another virus that causes that??

[brazil744]

i dont know what to do help me

[tyronr700]

i got it off

[tosiuk]

@tyronr700 how?

[Elect4Sure]

So if its a system process and I only have one: do I leave it alone? Thanks for any info.

[visnja92]

@Elect4Sure system proces just leave alone, but process which is started by user is virus.... sry for late reply :)

[Sup3rth3ifXx]

Ok If There is two lsass.exe one of them is the trojan and it would be the one without a singature you can destroy and do what ever

[visnja92]

one of them is system process, but another one is ran by user and its a troyan (Ive already posted comment how to delete this shit).....peace

[jedimaster303]

Thanks Dude.....

[iDenmark]

Lsass.exe process is responsible for management of local security authority domain authentication and Active Directory management. This process handles authentication for both the client and the server, and it also governs the Active Directory engine. The Lsass.exe process is responsible for the following components

Local Security Authority

Net Logon service

Security Accounts Manager service

LSA Server service

Secure Sockets Layer

Kerberos v5 authentication protocol

NTLM authentication protocol

[visnja92]

EASIEST WAY:

1. start ur computer in Safe Mode

2. goto start/run/regedit

3. HKEY_LOCAL_MACHINE\SOFTWARE\Mi­crosoft\Windows\CurrentVersion­\Run and find lsass hkey

4. Delete it.

5. Find Lsass folder on the disc C:\

6. Delete it (without antivirus)

7. Enjoy........

I hopo it will help u :))

[jedimaster303]

can't find lsass hkey??

[visnja92]

how?? its very easy........ step by step:

1.LOCAL_MACHINE

2. SOFTWARE

3. Microsoft

4. Windows

5. CurrentVersion

6. Run

7. hotkey is run32 in description(lsass.exe)

[jedimaster303]

thanks Man, I will try this. I appreciate your help.

[visnja92]

did this help U???? sorry for late reply and bad english too ;-))

[ivangonzale2016]

i got the lsass virius the worst way. i mean i had it before but u have to restart it for it to take effect, i never shut down my computer, for the first time in about 2 weeks i did because i just installed a new awesome video card. i thought i installed it incorrectly because i had the balck screen but nope. just lsass virus. i tried deleting the fake 1 because there was 2 but its running in processes, eveyrtime i close it it opens, theres about 12 lsass.exe running rite now -____- idk how

[KaijeTheGreat]

lsass is a windows process...

[RonyESP]

LSASS.EXE is a trojan.

For delete it :

1- Connect your harddisk on another PC.

2- Download UNLOCKER.

3- Go to System32 and delete LSASS.EXE with unlocker.

4- Trojan deleted!

[eurodancedj]

the solution is easy :)

DOWNLOAD ERD COMMANDER > BURN IT IN CD

boot computer with the erd commander

search system restore by clicking in ( Start )

if doesn't work try to repare the system with the same CD ( ERD COMMANDER )

all this utilities are in the erd menu :)

This viruses infect the winlogon and the lsass exe

make avira or ca antivirus with update ;) good luck friends

[allpowersrise]

Most of the time this has nothing to do with a virus. It has to do with having more RAM than the system can handle.

also HOW THE FUCK AM I SUPPOSED TO RUN ANYTHING IF ITS STUCK IN A CONTINUOUS BOOT LOOP

Please if anyone knows how to fix this message me.

you cant run a virus sweep or instal one of microsofts fixes if you cant even get past the boot up screen.

[AllexuUchiha]

guys.. nod32 is a good antivirus but it's ANTIQUE try AVAST antivirus

if you experenced this after installing a windows update, pres F8 before windows starts booting and select system recovery or something like that..

[CAChab93]

its not always a virus.

I turned of my pc while kinfigurating Updates.... i have now to install windows again..

[AceSpade09]

(@papanash13)

dude, avast don't work for sh*t...

Use McAfee instead =D

[Nas49Razing]

im getting that error 2

[cureonz]

the best way is format ur pc okkkkkkkkkkkkkk

[papanash13]

when my computer starts it show the next message:windows cannot find 'd:\windows\media\installed\ls­ass.exe'.make sure you typed the name correctly, and then try again. to search for a file, click the start button, and then click search.After i click OK or CANCEL the windows works, but i don't know if i have a virus or not. My avast antivirus didn't find enything.What can i do ? Please enyone help!

[AllexuUchiha]

I get the same message too..I got avast antivirus too.. It's not a virus..it WAS a virus that has been removed..I don't know how to remove that either.. if you find out, please tell me too ok?

[papanash13]

cred ca trebuie sa reinstalam windows sa nu mai apara porcaria aia ... in rest numai bine =))

[leohacker2009]

this happens to me too! i am romanian too :D

[TheHungarianNoodle]

does anyone know how to shut lsass exe down cos i got a trojan which is in a system 32 file that lsass uses to run and because the trojan is run by another program i cant delete it

[mcxios]

well i turned on my pc today and i instantly got a virus warning from nod32 that there is a virus on my pc named lsass.exe and it cant be deleted. my pc seems to work just fine no restarts or slow performance but i worry because i read in many forums that you could get scammed by stealing your passwords and stuff. any suggestions?

[clannihilationjack]

well i used nod32 and it didnt tell me nothing

[theblindinkartist]

"This worm exploits the Windows LSASS vulnerability, which is a buffer overrun that allows remote code execution and enables an attacker to gain full control of the affected system. To propagate, it scans the network for vulnerable systems. When it finds a vulnerable system, this malware sends a specially crafted packet to produce a buffer overflow on LSASS.EXE. This worm can cause LSASS to crash and force Windows to restart."

[theblindinkartist]

Its the SASSER WORM.

That happened to me once, you have remove the hard drive and insert it into another computer. Once it is in the other PC, you would have to remove the worm from the disk using any anti virus program. I recommend AVAST.

[ale12396]

nod32 is the best!

[madhobbit]

is it? i got nod32 and it never found the lsass.exe on my pc

[ale12396]

lsass.exe is not a virus, it's a crucial system process. When there's a problem in it, Windows will not work.

[supaniceguy]

This is just one more way Americans are scammed. Someone on Yahoo suggested that don't use an illegal copy of Windows, like as if that might be it. Instead, we just can find the stupid disk and if we did everything has to be erased.

[yoblacknigga]

if you dont have ubuntu, download, and burn it, startup from it, go to C:\windows\system32\recover or restore, and replace the file called system with the one in C.\windows\system32\config

[yoblacknigga]

@yoblacknigga or maybe the other way around :P



[priceandpride]

that's happening to me now. how did you fix it? i can't find my recovery cd