what is LSA shell (Export Version)

[neilr]

Can anybody tell me what LSA shell (Export Version) is used for and is it
necessary to have it running.

I'm using Windows XP SP2 (all up to date) with Sygate Personal Firewall
(free edition). LSA shell (Export Version) is included in the process list
in the firewall and set to 'Ask'. I have NO PROBLEMS associated with LSA
Shell, but I've read that the Sasser virus causes problems with LSA shell,
so I'm just asking as a precaution.

I've searched for info on LSA Shell but only find references to the issue
with Sasser.

Neil
(in the dark!)

 

[Ian Kenefick]

Can anybody tell me what LSA shell (Export Version) is used for and is it
necessary to have it running.

I'm using Windows XP SP2 (all up to date) with Sygate Personal Firewall
(free edition). LSA shell (Export Version) is included in the process list
in the firewall and set to 'Ask'. I have NO PROBLEMS associated with LSA
Shell, but I've read that the Sasser virus causes problems with LSA shell,
so I'm just asking as a precaution.

I've searched for info on LSA Shell but only find references to the issue
with Sasser.

Neil
(in the dark!)

You need it as it looks after things like security policies and logins
etc. Lsass.exe is the actual executable and this is where the sasser
worm gets its name. With regards to Sasser, Google MS04-011. You have
SP2 for Windows XP so you are NOT vulnerable to this.

Regards,
Ian Kenefick
http://antivirus.ik-cs.com

 

[neilr]

You need it as it looks after things like security policies and logins
etc. Lsass.exe is the actual executable and this is where the sasser
worm gets its name. With regards to Sasser, Google MS04-011. You have
SP2 for Windows XP so you are NOT vulnerable to this.

Regards,
Ian Kenefick
http://antivirus.ik-cs.com

Okay Ian many thanks for the explanation - that's clear now.
Neil