lsass.exe: Determining if its good or bad?

How can you determine if the process lsass.exe is good or bad? I am aware that it is a Windows security process but have also read alot about it having the possibility to be a virus, keylogger, etc. So, how do I determine if its the legit Windows process or a virus? Thanks in advance for any help.

 

The file is legit, what the WORMS do is exploit it which makes Windows shut down automatically.

If you suspect yours is malicious or your not sure just run a virus scan and you will be notified if it's malicious or not. If your not having any problems such as windows shutting down or hard locks your most likely not infetced. Also, the WORMS that exploit this process have been patched so if your OS is up-to-date per Microsoft's updates your ok.

 

Thanks bro

 

Your Welcome!