View Full Version : wlsass.exe - Any Information? ZoneAlarm cataches it accessing WWW

12-30-2005, 01:36 PM
Has anyone got any information on wlsass.exe?

Google returns no matches.

ZoneAlarm catches it trying to access the internet, I have denied it both times. But can't find any info as to what it is???




12-30-2005, 04:51 PM
Try doing a search on your pc for the wlsass.exe file and see where it resides. You might be able to get more of an idea of what its doing

12-30-2005, 05:28 PM
1) I can't find anything about it on google
2) See what folder it's in and what websites it's trying to access and from what ports
3) Seeing as it has a similar filename to lsass.exe (the Local Security Authority Subsystem Service), I think it's malware.
4) Make sure you have fully patched your system with updates from Microsoft and then run a fully updated anti virus scan and spybot/adware scans.


01-03-2006, 11:52 AM
Hi, I killed wlsass.exe day before yesterday.
Wlsass.exe resides in your %systemroot% or %systemroot%\system32 directory (I don't remember). Remove it. Then start regedit and search string "wlsass.exe". Delete all its registrations.

01-03-2006, 12:26 PM
Do you have any ideas what it is? It sounds like malware to me.

01-03-2006, 12:42 PM
Do you have any ideas what it is? It sounds like malware to me.
I find it on the computer with just made fresh OS instalation and after first surfing. There aren't firewall (XP SP1) nor some antivirus package...
I couldn't FIND useful information about it...

01-03-2006, 12:49 PM
It sounds like its for something that is wireless, for what though not sure. Though I recently reformatted with Windows XP SP2 and I don't appear to have wlsass.exe on my system at all.

01-03-2006, 01:03 PM
PC was powered with CityLAN Internet. It's incubator for viruses :) That why I decided to cure it.

01-03-2006, 02:27 PM
Yeah but if it was something do with wireless or a known program, then I would have thought that people would know about it. Google returned 0 results the other day, and now just has indexed this thread twice.

01-04-2006, 11:20 AM
Look at wlsass.exe date creation ;)

01-04-2006, 11:41 AM
Important!!! I found something:

01-05-2006, 01:53 PM
Summary : Trojan.WLSASS/32.Process

Company : Unknown

Description : Trojan.WLSASS/32.Process

Trojans are programs that can appear to serve a legitimate purpose but actually have an unwanted or harmful effect.

A large segment of trojan programs download other harmful software components to a user's PC without his/her knowledge.

This application is most likely downloaded and installed by another application that is considered to be adware or spyware.

Threat Level (1-10) : 8

Processes : WLSASS.EXE

It was trying to access the WWW with me and ZA caught it, i have now removed it.