?
Solved

lsass.exe warning from Norton 360

Posted on 2011-09-03
6
Medium Priority
?
535 Views
Last Modified: 2012-05-12
Hi all,

I received the warning below this AM. Does anyone know if this represents a security threat?

I have received Norton 360 Performance Alerts in the past, but this is the first time I don't really know if it a problem or not.

Have any of you dealt with this warning before? I checked on Google, but could not find anythine definitive. Any input would be appreciated.

Tanks,
PaulSauve lsass.exel alert from Norton 360
0
Comment
Question by:Paul Sauvé
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 32

Accepted Solution

by:
_ earned 1000 total points
ID: 36478898
It could be the real Windows file, or the Sasser worm.
The "quick and dirty" way to check is this:

Note: The lsass.exe file is located in the folder C:\Windows\System32. In other cases, lsass.exe is a virus, spyware, trojan or worm!
http://www.neuber.com/taskmanager/process/lsass.exe.html
0
 
LVL 38

Expert Comment

by:Gerwin Jansen, EE MVE
ID: 36478919
Try uploading the file to Jotti: http://virusscan.jotti.org/en

Is your system fully updated/patched?
0
 
LVL 16

Assisted Solution

by:Nenad Rajsic
Nenad Rajsic earned 1000 total points
ID: 36479173
click on "locate this file" then run it through http://www.virustotal.com/

also note the file name difference uppercase i (I) and lowercase L (l) look the same. Symantec would block and remove that file if it was W32.Nimos.Worm. I think it's just reporting unusual behaviour. Run the file through virus total just to be safe
0
Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

 
LVL 33

Author Comment

by:Paul Sauvé
ID: 36480819
Every thing is A OK - I used "Locate this" in Norton 360 and found this: Correct file!Sometimes when I search for a file with Windows Explorer, even it the file exists, I get zero results!

Problem solved!
0
 
LVL 33

Author Closing Comment

by:Paul Sauvé
ID: 36480832
coral47 - where the file is located!

vukovarcan - click on "locate this file" (I usually do, but I forgot)
0
 
LVL 32

Expert Comment

by:_
ID: 36481627
Good to hear.   : )
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Getting to know the threat landscape in which DDoS has evolved, and making the right choice to get ourselves geared up to defend against  DDoS attacks effectively. Get the necessary preparation works done and focus on Doing the First Things Right.
The well known Cerber ransomware continues to spread this summer through spear phishing email campaigns targeting enterprises. Learn how it easily bypasses traditional defenses - and what you can do to protect your data.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question