Why is LSA Executable and Server DLL continuously trying to access internet?

  • Thread starter Thread starter Johnny
  • Start date Start date
J

Johnny

This program is trying to access servers all over the
internet. I have every patch applied to my system and
this program activates my firewall which blocks it. The
server is a standalone that I access the internet through.
I've tried killing the process but it won't allow it.
I've tried renaming the program and it's dll and it won't
allow windows to start. What is it with this program?
 
Hi Johnny,

Sounds like you have a machine or machines with spyware/malware on them. This is not
detected by your antivirus and not covered in patches because they use port 80 http to install
themselves. Then they will make continuous requests to the Interent.

Suggest you obtain something like Ad-Aware and or Spybot (I run both at home and at work)
and run on your machines there and I am sure you will find the offending programs.

Or you can do a packet sniffer trace on your network and that may tell you the offending
program and if not, it will definitely tell you where it wants to go and the trace will show the
source IP address, so you will know what machine(s) to go turn off and then search for the
offending programs.

Hope this helps,
Gary
--------------------
'--'Content-Class: urn:content-classes:message
'--'From: "Johnny" <[email protected]>
'--'Sender: "Johnny" <[email protected]>
'--'Subject: Why is LSA Executable and Server DLL continuously trying to access internet?
'--'Date: Mon, 26 Jan 2004 22:20:04 -0800
'--'Lines: 7
'--'Message-ID: <[email protected]>
'--'MIME-Version: 1.0
'--'Content-Type: text/plain;
'--' charset="iso-8859-1"
'--'Content-Transfer-Encoding: 7bit
'--'X-Newsreader: Microsoft CDO for Windows 2000
'--'X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
'--'Thread-Index: AcPknZpyrW0O2LE1RrqaGGJkxfqCkg==
'--'Newsgroups: microsoft.public.win2000.networking
'--'Path: cpmsftngxa07.phx.gbl
'--'Xref: cpmsftngxa07.phx.gbl microsoft.public.win2000.networking:52778
'--'NNTP-Posting-Host: tk2msftngxa14.phx.gbl 10.40.1.166
'--'X-Tomcat-NG: microsoft.public.win2000.networking
'--'
'--'This program is trying to access servers all over the
'--'internet. I have every patch applied to my system and
'--'this program activates my firewall which blocks it. The
'--'server is a standalone that I access the internet through.
'--'I've tried killing the process but it won't allow it.
'--'I've tried renaming the program and it's dll and it won't
'--'allow windows to start. What is it with this program?
'--'


--

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included
script samples are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best
directed to the newsgroup/thread from which they originated.
 
Back
Top