I have McAfee antivirus and i got an alert saying that it blocked lsass.exe form accesing the intern

I looked on the internet and it says that lsass is an important part of windows security but that it could also be a virus. Mcafee says that it blocked the file at the following location

c:\windows\fonts\lsass.exe

how do i know if this is the windows file or the virus if it is the virus how do i remove it???

I have McAfee antivirus and i got an alert saying that it blocked lsass.exe form accesing the internet?norten

That is definetly a virus...

lsass.exe is a valid windows process, but it is NOT and SHOULD NOT be located in your WINDOWS/FONTS folder...

#1 "lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC/Server. It generates the process responsible for authenticating users for the Winlogon service. This process is performed by using authentication packages such as the default Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates inherit this token. More info

Note: The lsass.exe file is located in the folder C:\Windows\System32. In other cases, lsass.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager.

#2 The fact that yours is in your FONTS directory means it is a virus a Trojan.

#3 Get zeropsyware the 15 day free fully functional trial from