Results 1 to 4 of 4

Thread: lsass.exe requesting to acess the net

  1. #1
    lugi Guest

    Default lsass.exe requesting to acess the net

    I have beenrunning Zonealarm free firewall for a few days, and lately recieved a message saying that "LSA Shell (export version) requested permission to access the internet". Not knowing what it was, I naturally denied it, until I find out what it is. The info on this program on the net was quite scary, as it seems that many trojans use it. However, I ran AVG antivirus and it seems to detect no trojan. What is this lsass? why is it trying to access the net? should I allow it?
    the program asking was c:\winxp\system32\lsass.exe
    I had also had some attemts to connect to svchosts.exe that were also blocked.
    I would appreciate any help on this.
    Lugi

    Operating System:Windows XP Pro
    Product Name:ZoneAlarm (Free)
    Software Version:7.0

  2. #2
    naivemelody Guest

    Default Re: lsass.exe requesting to acess the net

    Isass.exe - is a normal program of a pc - you can read this by Guru Oldsod -thanks<hr>Hi

    Is that Isass.exe or Lsass.exe?

    Lsass.exe is a legit Windows component, if it is in the C\WINDOWS\System32 folder. Just look for it and right click it and examine the properties. The time and date should coincide with the Windows Install. Plus the version and owner can be found verifing if it is from Microsoft.

    Yes there are worms and various malware posing as lsass.exe
    These should be held in check if you have all of Microsoft the updates. And scan with an updated antivirus.

    Dening access in the ZA Program Control will not stop it from runninng. That requires the &quot;Kill&quot; in the right click Options in the ZA itself. So yes, it will still appear in the Task Manager.

    It does not require Internet access or any server rights of any kind. Just Trusted Access and a three green bar rating. Ask for internet access is acceptable. [if you get to many alerts - maybe putting one green check there- may help]
    http://www.liutilities.com/products/...library/lsass/
    http://www.neuber.com/taskmanager/pr...lsass.exe.html
    http://ask-leo.com/can_i_delete_lsas...vchostexe.html
    http://ask-leo.com/what_are_lsass_ls...o_if_i_am.html
    http://www.processlibrary.com/directory/files/lsass/
    http://www.auditmypc.com/process/lsass.asp
    http://www.hardavenue.com/a/lsass.exe.php
    BAD LSASS.EXE....
    http://www.trendmicro.com/vinfo/viru...=WORM_SASSER.A
    http://www.pchell.com/virus/sasser.shtml
    http://www.bleepingcomputer.com/star....exe-9885.html
    Hope this helps...<hr>As for
    Generic Host Process for win32 Services
    (svchosts.exe) - another common program that you need - 'you can think of this program as like a middleman connecting some of your pc software to the net'. Here is a small list of normal programs that you need and that needs internet access - thanks to Guru GeorgeV -<hr>Look down the list for.. Internet Explorer..in the &quot;Trusted Level&quot; Column of Internet Explorer LEFT Click and Click on SUPER, this will place 3 Green Bars in that ColumnThe next Column is &quot;ACCESS&quot; Left Click in that Column and change Red X's to Green Check marks for &quot;Trusted&quot; and &quot;Internet&quot; accessChange all other Marks on that Line to &quot;?&quot; Question Marks for Ask..
    Now you should not have anymore problem with MS IE..
    Make sure all of the following Programs have Trusted and Internet access (Green Check Marks):
    a.) All Microsoft wand Windows Programs have Green Check marks for Trusted and Internet Access..b.) Generic Host Process for win32 Services (svchost.exe)c.) IE Crash Detectiond.) Internet Explorere.) Malicious Software Removal Toolf.) True Vector Service
    (If it is listed)g.) Zone Alarm Clienth.) Zone Alarm Updating Clienti.) Your Email Client needs Trusted, Internet and Send Mail all need Green check Marks..<hr>NaiveMelody NYC 3-22-07~9:50pm e.s.t. - Oh very young - Cat Stevens

  3. #3
    lugi Guest

    Default Re: lsass.exe requesting to acess the net

    First of all, thank you for your quick and helpful answer.
    I checked the lsass.exe file (it's in WINXP/SYSTEM32 in my system)and it has the time and date of my windows installation and is verified as a microsoft product. also I am updated both in windows update and my virus program, so I guess that means no reason for paranoia. :-)
    I checked in zonealaram and saw that this program has two green check marks near it (i. e. allowed to reach the net but not to act as a server). This seems OK (although you said three green check marks. should I changed it?) and the program has not asked for any rights again since last night.

    Thanx again,
    Lugi

  4. #4
    naivemelody Guest

    Default Re: lsass.exe requesting to acess the net

    If you leave it at two green bars - trust level
    - you may get some
    Isass.exe alerts when you open up some programs; I have mine at three green bars -
    no= alerts.
    Here's the Official User Guide -
    http://www.zonealarm.com/store/conte...&amp;lid=ps_za
    .-

    big pdf file -needs Adobe - has all the common settings needed plus explanations - your probably going to have more questions - the User Guide - will hopefully answer most of them.NaiveMelody NYC 3-23-07~3:27pm e.s.t. - Learning to fly - Pink Floyd

    Message Edited by NaiveMelody on 03-23-200703:48 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •