lsa.exe进程详细介绍
lsa.exe is a process which is registered as WIN32.RBOT Trojan Variant. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.
另一种可能:属于灰鸽子木马病毒。该病毒修改注册表创建系统服务NetLogin实现自启动,启动以后会与IP:202.194.240.114的80端口进行连接,同时打开本地1032端口等待被连接。该后门能完全的控制服务端主机,包括截图、上传、下载文件、运行指定的程序、修改注册表、修改服务、等等