lsass.exe - Is this legit?

[Rob]

Thanks for dropping in folks...

My system is getting slow and boggy - So I'm running through task manager and stripping out all unnecessary startup files. Most of which I dont really know what they are, so I google them. And get this... "The lsass.exe file is located in the c:\windows\System32 folder. In other cases, lsass.exe is a virus, spyware, trojan or worm". My viruscanner is bang up to date and shows nothing untoward.

Now here's my worry, it is also in

WINDOWS\$NtServicePackUninstall$
WINDOWS\ServicePackFiles\i386
WINDOWS\SoftwareDistribution\download\6ca7b3a8efd5.........blah blah blah


Now I am fairly confident that the first two are legit locations, it's just that 'download' one. Any advice guys...?



Thanks

Rob

[Atomic]

You have run adaware/spybot S&D on the system havnt you?

[Rob]

Oh yes mate.... Spybot gets a regular trawl...

[Stoo]

http://www.neuber.com/taskmanager/pr...lsass.exe.html