Welcome to Process-info.org library

Process-info.org is an online library of Computer Operating System's Processes, which helps you to identify processes running at background of computer operating system or at remote computers on your network.

Process-info.org contains a growing database of executable processes (mostly with .EXE extension) and DLL libraries. You can search for processes through search box or navigate alphabeticaly by starting letter of process name.

It is assumed that users are familiar with computer operating system they're using and agree with suggested changes. Process-info.org will not be held responsible, if changes you make cause a system failure.

lsasss.exe

Microsoft Winsock

Warning! Potential Security Hazard!

System process “lsasss.exe” is reported as a Virus and Trojan!

There are 7 processes with name “lsasss.exe”

lsasss.exe – Lexmark_X79-55

lsasss.exe – LSASS SVR

lsasss.exe – lsasss

lsasss.exe – lsasss.exe

lsasss.exe – Microsoft Winsock

lsasss.exe – Microsofts Updates

lsasss.exe – System32

process status • safe • malicious • unknown

Brief description of process

lsasss.exe is process associated with malicious software W32/Rbot-BAI. W32/Rbot-BAI runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels. W32/Rbot-BAI spreads to remote network shares protected by weak passwords and to computers vulnerable to common exploits.

What to do with this process?

System process “lsasss.exe” is reported as a Virus and Trojan! Your personal data stored in computer are in danger! Kill or disable process “lsasss.exe” and try to remove it from your computer. After successfull removal try to scan your computer with antivirus and antispyware application.

lsasss.exe

Reported as Virus

Yes!

Reported as Trojan Horse

Yes!

Reported as Spyware, Adware

No

Developer

Unknown

Part of

W32/Rbot-BAI

Share |
 

Previous process
lsasss.exe

Next process
lsasss.exe

 
 
 

Related news

Showing news related to process “lsasss.exe”

August 8, 2006 2:00:00 AM CEST

Microsoft Winsock Gethostbyname Buffer Overflow Vulnerability – Type: Vulnerability. The Microsoft Winsock API is prone to a buffer-overflow vulnerability; arbitrary code execution may be possible.

 

November 27, 2000 1:00:00 AM CET

Winsock FTPd Directory Transversal Vulnerability – Type: Vulnerability.

 

September 25, 2009 1:51:00 PM CEST

Backdoor.Win32.Clampi.a – This Trojan spy program is designed to steal confidential user data and remotely manage the victim machine. It is a Windows PE EXE file. It is 470 bytes in size. Installation When launched, the Trojan creates the following file: %AppData%\.exe

 

April 15, 2009 11:17:00 AM CEST

Trojan-Dropper.Win32.Agent.albv – This Trojan has a malicious payload. It is a Windows PE EXE file. It is 23552 bytes in size. Installation The Trojan copies its executable file as follows: %WinDir%\system\svhost.exe In order to ensure that the Trojan is launched automatically when the system is rebooted, the Trojan adds a link...

 

September 28, 2009 1:21:14 PM CEST

Trojan Downloader.Agent.UZM – A new Trojan Downloader was spammed today. Trojan is attached in zip archive to emails in HTML format with subject "Hot game" and body text that claims some Angelina Jolie or Lara Croft undressing game. xgame.zip attachment contains xgame.exe (20992B) which drops executes and deletes kernel driver C:\WINDOWS\System32\drivers\runtime.sys and downloads another downloader smartdrv.exe. runtime.sys runs injects and hides Iexplore.exe process and downloads another components. xgame.exe is detected as Trojan Downloader.Agent.UZM, smartdrv.exe is detected as Trojan Downloader.Agent.UZN, runtime.sys is detected as Trojan Downloader.Agent.THW and other downloaded components are detected as several variants of Trojan Backdoor.Ntrootkit.

 
 
 

Navigate through library of processes alphabeticaly by first letter: