Process in LSASS. What is EXE

Users questions:My process in LSASS. EXE this procedure, see questions from others that is a virus, I would like to know whether it is a virus, if it is to kill than or manually removed, if not, what process it is, what is the point. Thank you
Experts answer: I have a process management software, there is aboveDescription of all processes, you can tell me if you want to say. The following is the resolution of this software to lsass.exe local security authority service control Windows security mechanisms. Management IP security policy and starts ISAKMP * Oakley (IKE) and IP Security-driven processSequencing. It will use the winlogon service authorized users to generate a process. This process is by using the authorized package, such as the default msgina.dll to implementation. If authorization is successful, lsass will generate the user's access token, tokens do not use the initial startupshell. Other initialized by the user process will inherit this token. The windows active directory remote stack overflow, it requested the use LDAP3 search function for users to submit requests for a lack of proper buffer bounds checking, building more than 1000 "AND" of the request,Sent to the server, leading to trigger a stack overflow, so that the collapse of Lsass.exe services, system restart in 30 seconds. Keep in mind that the process here, the normal path is C: * WINDOWS * system32, some viruses, such as W32.Nimos.Worm virusImitation of other locations in LSASS.EXE to run.
  • This information provided by the users.Thanks!