What is lsm.exe?

The genuine lsm.exe file is a software component of Microsoft Windows Operating System by Microsoft Corporation.
"LSM.exe", Microsoft Windows' Local Session Manager service, should reside in "C:\Windows\System32" and should not be removed. It is a critical component of the Windows operating system because it handles both Remote Desktop Services (RDS) logons from other computers and all local logon sessions started on the host computer itself. In Windows XP, Terminal Server sessions were only those initiated remotely, but since Vista, the operating system handles both remote and local logons with the same methodology

LSM stands for Local Session Manager Service

The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the lsm.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.

Click to Run a Free Scan for lsm.exe related errors

Lsm.exe file information

Windows Task Manager with lsm — Lsm.exe process in Windows Task Manager

The process known as Local Session Manager Service or SHOUTED`AGREE`although`chief`caught`belfast or anacondas inactivation imaginative belongs to software Microsoft Windows Operating System or various which COLOUR kept PRODUCE DOUBT or servile by Microsoft (www.microsoft.com) or hippish intromitted or MASTER.CURRENT.PANAMA.denmark.death.month.

Description: The original lsm.exe from Microsoft is an important part of Windows, but often causes problems. Lsm.exe is located in the C:\Windows\System32 folder. Known file sizes on Windows 10/11/7 are 267,776 bytes (61% of all occurrences), 229,888 bytes, 261,120 bytes or 269,312 bytes.
Lsm.exe is a Windows system file. The program has no visible window. The file is a trustworthy file from Microsoft. Therefore the technical security rating is 2% dangerous; but you should also compare this rating with the user reviews.

Recommended: Identify lsm.exe related errors

Viruses with the same file name

Is lsm.exe a virus? No, it is not. The true lsm.exe file is a safe Microsoft Windows system process, called "Local Session Manager Service". However, writers of malware programs, such as viruses, worms, and Trojans deliberately give their processes the same file name to escape detection. Viruses with the same file name are for example TROJ_SPNR.14HU13 or TROJ_GEN.R0CBC0RI713 (detected by TrendMicro), and Gen:Trojan.Heur.D.qCW@dCXHHBki or Gen:Trojan.Heur.FU.BHW@aqkKjjki (detected by F-Secure).
To ensure that no rogue lsm.exe is running on your PC, click here to run a Free Virus Scan.

How to recognize suspicious variants?

If lsm.exe is located in a subfolder of "C:\Program Files", the security rating is 65% dangerous. The file size is 428,032 bytes (27% of all occurrences), 204,800 bytes and 9 more variants. The file is not a Windows system file. The program is not visible. There is no description of the program. Lsm.exe is able to monitor applications.
If lsm.exe is located in a subfolder of the user's profile folder, the security rating is 61% dangerous. The file size is 1,093,120 bytes (22% of all occurrences), 24,576 bytes and 6 more variants. The lsm.exe file is not a Windows system file. The software starts upon Windows startup (see Registry key: Run, MACHINE\Run, win.ini, TaskScheduler). There is no description of the program. The program is not visible. Lsm.exe is able to monitor applications, manipulate other programs and record keyboard and mouse inputs.
If lsm.exe is located in the C:\Windows folder, the security rating is 62% dangerous. The file size is 93,184 bytes (50% of all occurrences) or 111,616 bytes.
If lsm.exe is located in C:\, the security rating is 64% dangerous. The file size is 290,304 bytes.

Important: Some malware disguises itself as lsm.exe, particularly when not located in the C:\Windows\System32 folder. Therefore, you should check the lsm.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.

Score

User Comments

I think it is safe, see Virustotal report:
(further information)

dears , Be careful , the Original file lsm.exe small (L) the fake file Ism.exe capital (i)
Abdullah Alghamdi

It crashed my pc!!!!!!
Johannus

im no expert by far.. but i do like to learn.. from what i can tell its an authorization program that, if running correctly is fine.. However, if you see this C:\Users\your_name\AppData\Roaming\lsm.exe -- bad.. so its known to have clone virii
human-robot

Critical Win7 file. Ism.exe 32* isn't.
Eppo

lsm is supposed to reside within the Windows folder. If you find it outside that (e.g.in a user profile), that's something masquerading as the real lsm
anon user

I found it in appdata/roaming i deleted it and my computer works fine
Jacob Collins

It has very bad memory leaks but a way to fix it sort of is by going to task manager and right clicking lsm.exe and change affinity and change it so it only uses 1 so it takes less processing power, All though it will not fix any ram problems it gives, And also DO NOT DELETE IT.
vgaggia

More comments can be found here:
(further information)

Summary: Average user rating of lsm.exe: based on 68 votes with 9 user comments. 37 users think lsm.exe is essential for Windows or an installed application. 5 users think it's probably harmless. 11 users think it's neither essential nor dangerous. 4 users suspect danger. 11 users think lsm.exe is dangerous and recommend removing it. 3 users don't grade lsm.exe ("not sure about it").

Best practices for resolving lsm issues

A clean and tidy computer is the key requirement for avoiding problems with lsm. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To get your computer running as fast as it did on day one, you can 8reset your PC. Your personal files will remain intact, but any programs you installed will need to be reinstalled.

To help you analyze the lsm.exe process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. A good Bantivirus software detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

rezip.exe gencrawler_gc.dll toolband.dll lsm.exe ycmmirage.exe taskmgr.exe soffice.bin useroobebroker.exe lenovo.modern.imcontroller.exe viber.exe fbserver.exe [all]

	Do you have additional information?
What do you know about lsm.exe:
How would you rate it:
Link for more info:
Your Name: