Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Am I protected 1

Status
Not open for further replies.

m110d

Technical User
Jan 16, 2003
28
GB
Hi, I have Norton Systemworks 2003 and Norton Personal Firewall 2003 installed with latest updates. I have checked with and Symantec and it looks as if my PC is locked down in relation to port probes and remote access. I also run regular scans and nothing shows up.
The only thing that concerns me is that in one of the other posts that LSASS.EXE is mentioned. I notice when firing up on the internet initially that NAV Personal Firewall informs me that LSASS.EXE is accessing the internet for the first time. Being that I am paranoid about security can anybody allay my fears or enlighten me otherwise, any help or pointers would be most appreciated.....m110d
 
Howdy:

You would have been better served had you searched the problem first...

lsass - lsass.exe - Process Information
Process File: lsass or lsass.exe
Process Name: Local Security Authority Service
Description: The Windows Local Security Authority Server Process Handles Windows Security Mechanisms. It verifies the validity of user logons to your PC/Server .Technically it generates the process that is responsible for authenticating users for the Winlogon service.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No
Common Errors: N/A

Murray
 
For the most part, LSASS.exe is a benign system file built into Windows. If you are keeping up-to-date on your patches and AV, and running regular AV scans, and don't notice anything strange happening with your computer, you can probably assume that you are ok.
Just keep an eye on your process list and what you are setting Norton to allow to connect.
There are tons of programs available that will due further scanning of your PC to make sure you are protected, just be sure to get reviews of the products before you install them, as not all security products are secure.
Regarding GRC and online scans, these will generally always pass if you have a decent firewall in place, but they have no way to detect browser hijacks, redirectors, and trojans that are allready installed, and currently active on your computer.

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top