LSASS access to internet?

[Gary]

Hi, I downloaded the latest critical updates a couple of
weeks ago and shortly after that my Zonealarm asked me if
I wanted to allow Lsass.exe access to the internet. Not
knowing what it was I said no. Now that I find out that
the update dealt with this program I am wondering if I
should have allowed it. Does anyone know? Thank you.

 

[Marina Roos [SBS-MVP]]

Make sure you have the ms04-011 installed. Lsass.exe is the sasser worm.

 

[Michael Bednarek]

Make sure you have the ms04-011 installed. Lsass.exe is the sasser worm.

Bollocks.

"lsass.exe: Local Security Authority Service"
"Windows Local Security Authority Server Process handles Windows
security mechanisms. It verifies the validity of user logons to your
computer or server. Technically, the software generates the process
that is responsible for authenticating users for the Winlogon
service."

lsass is the _target_ of attacks, e.g. the Sasser worm, it's not a
virus. Apply MS04-11 and keep your AV data current.

Hi, I downloaded the latest critical updates a couple of
weeks ago and shortly after that my Zonealarm asked me if
I wanted to allow Lsass.exe access to the internet. Not
knowing what it was I said no. Now that I find out that
the update dealt with this program I am wondering if I
should have allowed it. Does anyone know? Thank you.

Do you have any problems with you PC? If not, leave the ZoneAlaram
setting to disallow lsass Internet access.

 

[Bojidar Alexandrov]

There is a virus that uses name Lsass.exe but located in windows directory
(not in system32 where is the original one)

Bojidar Alexandrov