LSASS access to internet?

  • Thread starter Thread starter Gary
  • Start date Start date
G

Gary

Hi, I downloaded the latest critical updates a couple of
weeks ago and shortly after that my Zonealarm asked me if
I wanted to allow Lsass.exe access to the internet. Not
knowing what it was I said no. Now that I find out that
the update dealt with this program I am wondering if I
should have allowed it. Does anyone know? Thank you.
 
Make sure you have the ms04-011 installed. Lsass.exe is the sasser worm.
 
Make sure you have the ms04-011 installed. Lsass.exe is the sasser worm.
Click to expand...

Bollocks.

"lsass.exe: Local Security Authority Service"
"Windows Local Security Authority Server Process handles Windows
security mechanisms. It verifies the validity of user logons to your
computer or server. Technically, the software generates the process
that is responsible for authenticating users for the Winlogon
service."

lsass is the _target_ of attacks, e.g. the Sasser worm, it's not a
virus. Apply MS04-11 and keep your AV data current.

Hi, I downloaded the latest critical updates a couple of
weeks ago and shortly after that my Zonealarm asked me if
I wanted to allow Lsass.exe access to the internet. Not
knowing what it was I said no. Now that I find out that
the update dealt with this program I am wondering if I
should have allowed it. Does anyone know? Thank you.
Click to expand...

Do you have any problems with you PC? If not, leave the ZoneAlaram
setting to disallow lsass Internet access.
 
There is a virus that uses name Lsass.exe but located in windows directory
(not in system32 where is the original one)

Bojidar Alexandrov
 
Back
Top