Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

8.20.0015.00 16.67%
7.00.0052.00 83.33%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
GetAce, CryptImportKey, CryptDestroyKey, CryptExportKey, CryptGetUserKey, CryptGetKeyParam, RegOpenKeyExW, RegCloseKey, RegQueryValueExW, RevertToSelf, CopySid, RegCreateKeyW, RegSetValueW, RegQueryValueW, RegOpenKeyW, RegEnumKeyW, RegNotifyChangeKeyValue, RegisterEventSourceW, ReportEventW, DeregisterEventSource, LogonUserW, CryptEnumProvidersW, CryptDecrypt, CryptEncrypt, CryptGetProvParam, CryptGenKey, RegDeleteValueW, RegSetValueExW, LookupAccountNameW, IsValidSid, RegQueryMultipleValuesW, RegEnumValueW, RegEnumKeyExW, RegRestoreKeyW, RegQueryInfoKeyW, RegSaveKeyW, RegDeleteKeyW, RegCreateKeyExW, RegOpenCurrentUser, GetFileSecurityW, GetSecurityDescriptorDacl, GetAclInformation, AddAce, CryptReleaseContext, EqualSid, GetSecurityDescriptorControl, SetSecurityDescriptorControl, SetFileSecurityW, SetNamedSecurityInfoW, LookupPrivilegeValueW, AdjustTokenPrivileges, CryptAcquireContextW, CryptGenRandom, ConvertSidToStringSidW, GetTokenInformation, LookupAccountSidW, OpenSCManagerW, OpenServiceW, QueryServiceStatus, CloseServiceHandle, ImpersonateLoggedOnUser, GetUserNameW, ImpersonateSelf, OpenThreadToken, OpenProcessToken, AllocateAndInitializeSid, InitializeSecurityDescriptor, InitializeAcl, AddAccessAllowedAce, SetSecurityDescriptorDacl, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, IsValidSecurityDescriptor, AccessCheck, FreeSid, GetLengthSid, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegisterEventSourceA, ReportEventA, InitiateSystemShutdownW, ChangeServiceConfigW, CreateServiceW, DeleteService, ControlService, QueryServiceConfigW, StartServiceW, ChangeServiceConfig2W
comctl32.dll
ImageList_Draw, ImageList_GetImageInfo, ImageList_Read, ImageList_Write, ImageList_Destroy, ImageList_Create, ImageList_LoadImageW, ImageList_Merge
comdlg32.dll
ReplaceTextW, GetFileTitleW, FindTextW, PrintDlgW, CommDlgExtendedError, GetSaveFileNameW, GetOpenFileNameW, PageSetupDlgW
crypt32.dll
CryptQueryObject, CertEnumCertificatesInStore, CryptAcquireCertificatePrivateKey, CertDeleteCertificateFromStore, CertFreeCertificateContext, CertGetPublicKeyLength, CertGetCertificateContextProperty, CertGetEnhancedKeyUsage, CertDuplicateCertificateContext, CertGetNameStringW, CertSetCertificateContextProperty, CryptFindOIDInfo, CertCloseStore, CryptMsgClose, CertFindCertificateInStore, CertOpenStore
gdi32.dll
SetAbortProc, AbortDoc, EndDoc, CreateDCW, CopyMetaFileW, CreateHatchBrush, ExtCreatePen, CreatePen, PlayMetaFile, EnumMetaFile, GetObjectType, PlayMetaFileRecord, SelectPalette, CreateCompatibleDC, CreatePatternBrush, CreateDIBPatternBrushPt, DeleteDC, ExtSelectClipRgn, PolyBezierTo, PolylineTo, PolyDraw, ArcTo, GetCurrentPositionEx, ScaleWindowExtEx, SetWindowExtEx, EndPage, SetWindowOrgEx, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, Escape, ExtTextOutW, TextOutW, StartPage, RectVisible, GetBkColor, GetTextMetricsW, CreateFontW, GetCharWidthW, PtVisible, StartDocW, GetPixel, BitBlt, GetWindowExtEx, GetViewportExtEx, GetObjectW, SelectClipPath, CreateRectRgn, GetClipRgn, SelectClipRgn, SetColorAdjustment, SetArcDirection, SetMapperFlags, SetTextCharacterExtra, SetTextJustification, StretchDIBits, GetDCOrgEx, PatBlt, GetMapMode, CombineRgn, SetRectRgn, CreateFontIndirectW, CreateCompatibleBitmap, GetRgnBox, CreateRectRgnIndirect, GetTextColor, OffsetWindowOrgEx, SetTextAlign, MoveToEx, LineTo, OffsetClipRgn, IntersectClipRect, ExcludeClipRect, GetClipBox, SetMapMode, GetStockObject, SelectObject, DeleteObject, CreateSolidBrush, GetDeviceCaps, GetTextExtentPoint32W, CreateBitmap, SaveDC, RestoreDC, SetBkColor, SetBkMode, SetPolyFillMode, SetROP2, SetStretchBltMode, DPtoLP, SetTextColor, GetBitmapBits, GetObjectA, CreateDCA, ModifyWorldTransform, SetWorldTransform, SetGraphicsMode
kernel32.dll
DllMain
netapi32.dll
NetApiBufferFree, NetWkstaUserGetInfo, NetQueryDisplayInformation, NetGetDCName, NetGroupEnum, NetUserEnum, NetUserChangePassword
ole32.dll
CoRevokeClassObject, CoRegisterClassObject, OleInitialize, CoFreeUnusedLibraries, OleUninitialize, OleRun, StringFromGUID2, CLSIDFromProgID, CoDisconnectObject, OleSetClipboard, CoInitialize, CoUninitialize, CoCreateInstance, CLSIDFromString, StgOpenStorageOnILockBytes, OleFlushClipboard, CoTaskMemFree, CoGetClassObject, CoTreatAsClass, OleIsCurrentClipboard, CreateILockBytesOnHGlobal, StringFromCLSID, OleDuplicateData, ReleaseStgMedium, CoTaskMemAlloc, CreateBindCtx, ReadClassStg, ReadFmtUserTypeStg, OleRegGetUserType, WriteClassStg, WriteFmtUserTypeStg, CreateStreamOnHGlobal, StgCreateDocfileOnILockBytes, SetConvertStg, CoRegisterMessageFilter, CoInitializeSecurity, CoSetProxyBlanket
oledlg.dll
OleUIBusyW
psapi.dll
EnumProcessModules, EnumProcesses, GetModuleBaseNameW
shell32.dll
SHGetFolderPathW, DragFinish, DragQueryFileW, ExtractIconW, SHGetFileInfoW, ShellExecuteExW
shlwapi.dll
PathFindExtensionW, PathRemoveExtensionW, PathFindFileNameW, PathStripToRootW, PathIsUNCW, SHDeleteKeyW, SHCopyKeyW
tvttsp.dll
Tspi_Context_FreeMemory, Tspi_TPM_GetRandom, Tspi_Key_GetPubKey, Tspi_Policy_SetSecret, Tspi_GetPolicyObject, Tspi_Context_CreateObject, Tspi_Context_GetTpmObject, Tspi_Context_Connect, Tspi_Context_Create, Tspi_Key_LoadKey, Tspi_Key_WrapKey, Tspi_SetAttribData, Tspi_TPM_GetCapability, Tspi_TPM_GetPubEndorsementKey, Tspi_Context_Close, Tspi_TPM_NSC_AbortLockout, Tspi_TPM_Atmel_OwnerSetState, Tspi_ChangeAuth, Tspi_TPM_TakeOwnership, Tspi_SetAttribUint32, Tspi_Key_CreateKey, Tspi_Context_CloseObject, Tspi_Hash_VerifySignature, Tspi_Hash_SetHashValue, Tspi_GetAttribData, Tspi_Data_Bind, Tspi_Hash_Sign, Tspi_Data_Unbind, Tspi_TPM_NSC_A1_2CommandThatShouldBeDeletedWhen1_2StackIsWritten
user32.dll
DllMain
userenv.dll
GetProfilesDirectoryW
version.dll
GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW
winspool.drv
GetJobW, OpenPrinterW, DocumentPropertiesW, ClosePrinter
wintrust.dll
WinVerifyTrust
wtsapi32.dll
WTSFreeMemory, WTSQuerySessionInformationW

cssauth.exe

Client Security Solution by Lenovo (United States) Inc. (Signed)

Remove cssauth.exe
Version:   7.00.0052.00
MD5:   a62e4ba44e9c141bb52a5d155e8bf63b
SHA1:   c508db3dec2c4eb920591da97cb3ee7623d8aca6
SHA256:   62bdf037a2535f8325c794ce62e36ac4d4ff19b23ceb7694864f79547b34dc5a

What is cssauth.exe?

cssauth is part of Client Security Solution is designed to help you protect PC-based computing assets. These assets include the PC itself, confidential data on the PC and the company network. Client Security Solution s only compatible with Lenovo Rescue and Recovery.

Overview

cssauth.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by Lenovo (United States) Inc. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:cssauth.exe
Publisher:Lenovo Group Limited
Product name:Client Security Solution
Description:cssauth
Typical file path:C:\Program Files\lenovo\client security solution\cssauth.exe
File version:7.00.0052.00
Size:2.23 MB (2,341,632 bytes)
Certificate
Issued to:Lenovo (United States) Inc.
Authority (CA):VeriSign
Effective date:Sunday, April 16, 2006
Expiration date:Thursday, April 16, 2009
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'cssauth' → "C:\Program Files\Lenovo\Client Security Solution\cssauth.exe" silent

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00043921%
0.028634%
Kernel CPU:0.00016756%
0.013761%
User CPU:0.00027165%
0.014873%
Kernel CPU time:18,036 ms/min
100,923,805ms/min
Context switches:2/sec
284/sec
Memory
Private memory:7.71 MB
21.59 MB
Private (maximum):9.63 MB
Private (minimum):9.61 MB
Non-paged memory:7.71 MB
21.59 MB
Virtual memory:63.84 MB
140.96 MB
Virtual memory (peak):69.48 MB
169.69 MB
Working set:9.63 MB
18.61 MB
Working set (peak):12.66 MB
37.95 MB
Page faults:6,446/min
2,039/min
I/O
I/O read transfer:4.41 KB/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:4 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:222 Bytes/sec
448.09 KB/min
I/O other operations:91/sec
1,671/min
Resource allocations
Threads:4
12
Handles:174
600
GUI GDI count:12
103
GUI USER count:6
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:"C:\Program Files\lenovo\client security solution\cssauth.exe" silent
Owner:User
Parent process:Explorer.EXE (Windows Explorer by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 83.33%
Windows Vista Business 16.67%

Distribution by countryDistribution by country

BG installs about 83.33% of Client Security Solution.
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE