If you open the "Task Manager" on the "Processes" tab, you can find a huge number of programs running in the system. Most of them are user-defined and are responsible only for the normal operation of the installed third-party software, but some are system ones that are already responsible for the operation of the Windows operating system itself. In this article, we will talk about the lsass.exe process. What it is, what role it plays and what threat it can bear - this will be discussed in the article. So read the article to the end to learn more about this important system component.
lsass.exe - what is it?
First, let's see why the system needs this process. In a nutshell, it is necessary to provide additional computer security so that all sorts of viruses could not get into it, but at the same time it can not be attributed to antiviruses. The process is responsible for the service "Server authentication local security system" and it is used, for example, in cases of authorization verification of the user in the operating system. When you start the computer, the lsass.exe process is first executed, and only in the case of a positive response does the explorer.exe process start .
Perhaps this is enough to understand what kind of process is lsass.exe. Next, we will consider some ways of interacting with him, as well as a virus threat that may be hiding under this important system element.
Is it possible to complete the process
Those who often use the "Task Manager" to close some programs may wonder: "Is it possible to complete the lsass.exe process?" And this question is quite appropriate, because the process consumes computer power, which can significantly affect the performance of weak devices. Moreover, we found out that lsass.exe serves as a transitional link for starting the graphical shell of the system, that is, the process explorer.exe, so it may appear that after performing its main function, it becomes simply useless. But no matter how much you want, it is not. The system, if I may say so, is vital to this process, and if it is closed, then the system will stop working. But even with a great desire for this, you still can not do it. In the "Task Manager", the "End Process" button for lsass.exe is simply inactive.
Where is
We have already found out that lsass.exe is a process without which the operating system simply does not work, but let's still figure it out in more detail. Now it will be told where exactly his launch file is located, because in the "Task Manager" only a digital signature of the process is displayed.
And the executable file is located in the "System32" folder, which is located in the "Windows" directory on the computer’s system drive (most often it is the "C" drive). However, you do not have to open one folder after another in order to find it among a huge number of other similar system programs. In order to immediately open it, you need to do the following:
- Open the Task Manager window.
- Click the Processes tab.
- Find the desired process in the list.
- Click RMB on it.
- Select the "Open file location" option.
After that, an explorer window will appear, in which the file "lsass.exe" will be highlighted.
If several lsass.exe processes are detected
If you decide to check the location of this file using the method described above, but you find several are the same when searching for a process, this means only one thing - you have brought into the system a virus from the Internet that is hiding under the name lsass.exe. It is important to remember one thing: several processes with the same name cannot be started in the system at once. By the way, in such situations, a system error may appear. lsass.exe will immediately try to inform you of the threat. We will talk about this in detail below.
How to eliminate the threat
So, we learned that if two lsass.exe processes are running on the system, this means that the system has a virus. But how to calculate it? Actually very simple. Earlier, we already told you where the lsass.exe executable file is located, respectively, only there will be an authentic version of the program. Based on this, we can conclude that you can find the virus by opening the file location through the "Task Manager". Just open the directories of these processes in the explorer one by one. The one that will not be in the "System32" folder, and there is a virus program - delete it.
Useful Tips
We have already found out that lsass.exe is a process that is very important for the functioning of the system, and a virus can be hidden under the guise of it. Based on this, it is necessary to take computer security seriously. To prevent malware from getting into the system, install an antivirus from a third-party developer. Dr.Web or Kaspersky is suitable.
I also want to advise you not to download software from unreliable sources, and to leave the resource at the first suspicious activity on the site. Also pay attention to pop-up messages - sometimes this is how attackers attract victims so that they download the virus to their computer.
Conclusion
Now you will find out not only what kind of process is lsass.exe, but also how to deal with all kinds of threats hiding behind it. The main thing that needs to be taken out of this article is the importance of this program in the system. It provides reliable protection, so do not try to interact with this file in any way.