I recently had an alert from ZAP reporting an outbound block on a packet from lsass.exe to IP address 220.127.116.11 which resolves to track.roiservice.com. Seems odd, anyone else experienced lsass trying to talk to odd web sites. This has only occurred once and I don't have any virus,spyware etc on board.
Operating System:Windows XP Pro
Product Name:ZoneAlarm Pro