Hi Jackie, I recently discovered that this file (LSASS.EXE) is the Local Security some-or-other. I discovered this when mine was corrupted and Win2k wouldn't let me log on any more. I could log on as another user, but all of my settings were destroyed. Soon afterwards, my Win2k drive died and I had to re-install everything from scratch anyway :( If this is perhaps being updated by WindowsUpdate, then I think it's probably safe. However, if there's something else trying to change that file, I wouldn't let it happen, unless you can pinpoint exactly where the change is coming from. Regards, Bevan ----- Original Message ----- From: "Jackie MacWhirter" <jmacwhirter@xxxxxxxxx> To: "PCHELPERS" <pchelpers@xxxxxxxxxxxxx> Sent: Saturday, February 09, 2002 5:25 PM Subject: [pchelpers] What is this ? > > Hi: > I need some help my firewall says it has detected that an application > C:WINNT\SYSTEM32LSASS.EXE was replaced by another application with a > description LSA Executable and Server DLL(Export Version) Do you want to > accept replacement of this application? I said NO!!!--- It keeps coming up > ever so often , can anyone figure this out please? How can I get rid of > this. Do you know what this is? I am clueless. Thanks--- Jackie > _________________________________________ > Jackie MacWhirter > ICQ#:19728235 > Current ICQ status: > > SMS: (Send an SMS message to my ICQ): +278314219728235 > More ways to contact me: http://wwp.icq.com/19728235 > _________________________________________ > > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.320 / Virus Database: 179 - Release Date: 1/30/2002 > > >