How to remove an lsasss error

The free file information forum can help you determine if lsasss.exe is a virus, trojan, spyware, or adware that you can remove, or a file belonging to a Windows system or an application you can trust.

Click to Run a Free Scan for lsasss.exe related errors

Lsasss.exe file information

The process known as Generic Host Process for Win32 Services belongs to software Microsoft® Windows (version 2000 Operating System) by Microsoft (www.microsoft.com).

Description: The file lsasss.exe is located in the folder C:\Windows\System32. Known file sizes on Windows 7/XP are 37,859 bytes (3% of all occurrences), 37,163 bytes and 49 more variants.
Lsasss.exe is not a Windows core file. There is no description of the program. Program starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). lsasss.exe is able to monitor applications. Therefore the technical security rating is 55% dangerous, however also read the users reviews.

Recommended: Identify lsasss.exe related errors

If lsasss.exe is located in a subfolder of C:\, the security rating is 36% dangerous. The file size is 22,528 bytes. The program has a visible window. There is no file information. The application starts when Windows starts (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). It is not a Windows core file.

If lsasss.exe is located in the folder C:\Windows, the security rating is 50% dangerous. The file size is 53,248 bytes. The file is an unknown file in the Windows folder. The program has no visible window. It is not a Windows core file. lsasss.exe is able to hide itself and monitor applications.

External information from Paul Collins:

"lsasss.exe" definitely not required. Added by the SASSER.E WORM!

Important: Some malware camouflages itself as lsasss.exe, particularly when located in the c:\windows or c:\windows\system32 folder. Therefore, you should check the lsasss.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.

Score

User Comments

i think its the sasser virus

its the sasser cause windows (system32) runs an exe file on startup call lsass.exe but the sasser names itself to lsasss.exe it has one additional s it is hididng because lsass.exe is a critical system process but i terminated lsasss.exe then deleted it first i went into safe mode but it is dangerous it opened like 120 backdoors in my computer and then duplicated itself to places the way to stop it is in the search type lsasss.exe if you find the one with 3 sss then deleted it.
Jamell

I found it running alongside lsass.exe, when I terminated it there was no adverse effect.
Joss

This file is difficult to remove. it makes multiple copies and marks them hidden/readonly and changes names frequently. When my computer was infected, two virus/worms were packed together, sass as well as lsasss and the FyKu virus or some such. they multiply and hide themselves in the temp directory, attach themselves to Internet Explorer and Windows Explorer, as well as load themselves via the registry. They put little .bat files on the root directory too which all have to be deleted rapidly. Under windows 2000 you can do it from CtrlAltDel and ending as many processes as possible.

Not sure what it is exactly. But, I don't think its a virus. It does want to connect to the internet.
Mike Knowles

Local Security Authority Service - Windows process
Mathew

Mind the difference between issas and Lsass - isass being dangerous and Lsass being a system process of the Microsoft Windows security mechanisms
Freddy

Note the difference between lsass.exe and lsasss.exe, the latter being discussed here. The extra "s" does seem like someone wants this file to look like lsass.exe

lsass.exe is the Local Security Authencation SubSystem. Lsasss.exe is the sasser worm. The real lsass.exe has three s in it while the sasser worm look alike has four.
TechWizard86

Summary: Average user rating of lsasss.exe: based on 11 votes with 9 reviews.

2 users think lsasss.exe is essential for Windows or an installed application. 1 user suspect danger. 8 users think lsasss.exe is dangerous and recommend removing it. 2 users doesn't grade lsasss.exe ("not sure about it").

Lsasss scanner

Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

SpeedUpMyPC scans, cleans, repairs and optimizes your computer.

Other processes