Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

KEY:

  • L = Legit, O = Open to Debate, X = Malware/Bad

Name Process Details
LAdministrador de cuentas de seguridadlsass.exeSpanish Windows 2000 security accounts manager
LAgente de directivas IPSEClsass.exeSpanish Windows 2000 IPSEC policy agent
LInicio de sesión redlsass.exeSpanish Windows 2000 net logon
XLocal Security Authority Subsystem Service (lsass)lsass.exeAdded by the W32/Tilebot-AK or W32.Spybot.ABDO WORM! Note: This is not the legitimate Windows proces
XLocal Security Authority System Service (lsass)lsass.exeAdded by the W32/Rbot-AJA WORM! Note: This is not the legitimate Windows process lsass.exe (Which is
XLSA Shel (Export Version)lsass.exeAdded by the W32/Tilebot-HQ WORM! Note: This worm rojan is located in C:%WINDIR% folder.
Xlsass (lsass)lsass.exeAdded by the W32/Rbot-AIC WORM! Note: This is not the legitimate Windows process. (Which is always f
XMicrosoft sdk core (sdk)lsass.exeAdded by the Troj/IRCBot-PF TROJAN! Note: Located in C:%WINDIR%
LProveedor de asistencia de seguridad LM de Windows NTlsass.exeSpanish Windows 2000 NT LM security support provider
Xrundll32.exelsass.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
XSpool SubSystem Applsass.exeAdded by the W32/Tilebot-HD WORM! Note: This worm rojan is located in C:%WINDIR% folder. Note: This
XSystem Event Notification Servicelsass.exeAdded by the Troj/Agent-AD TROJAN!
XWindows lsass Service (lsass)lsass.exeAdded by the W32/Rbot-AGD WORM! Located in C:WINDOWSlsass.exe (9XXP) or C:Winntlsass.exe (NT2000) No
XWindows Network Security Service (lsass)lsass.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
XWindows Object Managerlsass.exeW32.Banish.A@mm - Symantec Description: Randomly copied characteristics of an already existing servi