Local Security Authority Subsystem Service
Local Security Authority Subsystem Service
Local Security Authority Subsystem Service LSASS is a process in Microsoft Windows operating systems that is responsible for enforcing the security policy on the system It verifies users logging on to a Windows computer or server, handles password changes, and creates access tokens1 It also writes to the Windows Security Log
Forcible termination of lsassexe will result in the Welcome screen losing its account/s, prompting a restart of the machine
Because lsassexe is a crucial system file, its name is often faked by malware The lsassexe file used by Windows is located in the directory Windows\System32 If it is running from any other location, that lsassexe is most likely a virus, spyware, trojan or worm Due to the way some systems display fonts, malicious developers may name the file something like Isassexe capital "i" instead of a lowercase "L" in efforts to trick users into installing or executing a malicious file instead of the trusted system file 2
References
^ "Windows 7 Services | Windows CMD" SS64com Retrieved 2016-05-24
^ "The Best Way To Remove Lsassexe Virus - Filocal security authority subsystem service Local Security Authority Subsystem Service