Categories:
Administration (10)
Adware Spyware (7)
Apache (10)
Bluetooth (125)
DOS Commands (1)
Edge (28)
General (2)
Internet Explorer (217)
Media Center (12)
Media Player (11)
Mozilla Firefox (18)
PHP (15)
Programming (8)
Security (4)
Silverlight (15)
Tips (17)
Tools (218)
Tutorials (5)
Windows 10 (166)
Windows 7 (636)
Windows 8 (1091)
Windows Phone (33)
Windows Server 2008 (165)
Windows Server 2012 (84)
Windows Server 2016 (23)
Windows Vista (52)
Collections:
Other Resources:
"lsass.exe" Process on Windows 7
What is the "lsass.exe" process on windows 7? Is the "lsass.exe" process a virus? Can I terminate the "lsass.exe" process?
✍: FYIcenter.com
"lsass.exe" process
represents "Local Security Authority Process" program.
"lsass.exe" is a service hosting process on Windows 7 to host multiple security related services.
"lsass.exe" process is normally running under the parent process "wininit" as shown in the process tree below:
Boot wininit lsass
On the Processes tab of "Task Manager", "lsass.exe" process may be listed as:
Image Name Memory Description -------------------- ---------- ----------- lsass.exe 22,212 K Local Security Authority Process
Additional information about "lsass.exe" process:
Command line: C:\windows\system32\lsass.exe Programe file information: Name: lsass.exe Location: C:\windows\system32\lsass.exe Description: Local Security Authority Process Version: 6.1.7601.23571 (win7sp1_ldr.161010-0600) Size: 30720 bytes Last modified: 10/10/2016 10:55:00 AM Company Name: Microsoft Corporation Some data files used: C:\Windows\System32 C:\Windows\System32\en-US\lsasrv.dll.mui C:\Windows\debug\PASSWD.LOG C:\Windows\System32\en-US\vaultsvc.dll.mui C:\Windows\debug\netlogon.log C:\Windows\System32\en-US\netlogon.dll.mui C:\Users\fyicenter\AppData\Roaming\Microsoft\Credentials C:\Users\fyicenter\AppData\Local\Microsoft\Credentials C:\Windows\System32\en-US\crypt32.dll.mui C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My Some registry keys used: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER HKLM\SYSTEM\ControlSet001\Control\Lsa HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit HKLM\SYSTEM\ControlSet001\Control\Lsa\Kerberos\Parameters HKLM\SYSTEM\ControlSet001\Control\Lsa\Kerberos\Parameters HKLM\SYSTEM\ControlSet001\Control\Lsa\Kerberos\HostToRealm HKLM\SYSTEM\ControlSet001\Control\Lsa\Kerberos\Domains Some DLL libraries used: C:\windows\SYSTEM32\ntdll.dll C:\windows\system32\kernel32.dll C:\windows\system32\KERNELBASE.dll C:\windows\system32\msvcrt.dll C:\windows\system32\RPCRT4.dll C:\windows\system32\SspiSrv.dll C:\windows\system32\lsasrv.dll C:\windows\SYSTEM32\sechost.dll C:\windows\system32\SspiCli.dll C:\windows\system32\ADVAPI32.dll
"lsass.exe" process is not a virus. You should not terminate "lsass.exe" process.
Â
2016-07-28, 4612👍, 0💬
Popular Posts:
What is the startup program "Intel Graphics Accelerator Helper - igfxtray.exe" on my Windows 8 compu...
Can I register my computer later? I don't want to register my computer during the initial Windows 7 ...
Can I disable Windows service "Windows Image Acquisition (WIA)" to speedup my computer? Windows serv...
Where to find tutorials on using Windows Server 2008? I want to learn how to use Windows Server 2008...
What is "CNG Key Isolation" in my Windows 7 service list? And how is "CNG Key Isolation" service rel...