11-09-2004, 12:28
|
#1
|
|
cf.mega poster
Join Date: Jun 2003
Location: Half in the corporeal, half in the etheral
Posts: 37,182
|
LSA Shell
Just been quietly minding my own business when Zone Alarm just asked me if I want LSA Shell to connect to the web. I've never heard of it before so I denied access but have no ideas what it is. I did a google and found out that the sasser worm might have something to do with it but nothing I found actually told me what it is and whether I should allow it to connect (most results just said that users get a 'LSA Shell error' message, none of them mention a ZA alert) so does anyone know what it's about?
__________________
Heavy Is The Crown
|
|
|
|
11-09-2004, 12:40
|
#2
|
|
Inactive
Join Date: Jun 2003
Location: Essex
Age: 38
Services: Sky multiroom (Sky Q)
Sky Fibre Unlimited
Sky Landline
Posts: 8,851
|
Re: LSA Shell
Could it be spyware/ad aware/mailware or a nasty program?
|
|
|
|
|
11-09-2004, 12:50
|
#3
|
|
cf.mega poster
Join Date: Jun 2003
Location: Half in the corporeal, half in the etheral
Posts: 37,182
|
Re: LSA Shell
I don't think so. I ran NAV 2004 last night which also scans for spyware and nothing came up.
__________________
Heavy Is The Crown
|
|
|
|
|
11-09-2004, 13:12
|
#4
|
|
Dr Pepper Addict
Cable Forum Admin
Join Date: Oct 2003
Location: Nottingham
Age: 63
Services: Zen & YouFibre FTTP, Sky Q TV, Sky Mobile, Flextel SIP
Posts: 31,373
|
Re: LSA Shell
Unless it happens again you can probably ignore it. Does norton tell you what process made the request ?
__________________
 Baby, I was born this way.
|
|
|
|
|
11-09-2004, 13:19
|
#5
|
|
cf.mega poster
Join Date: Jun 2003
Location: Half in the corporeal, half in the etheral
Posts: 37,182
|
Re: LSA Shell
No, it was ZAP which alerted me.
__________________
Heavy Is The Crown
|
|
|
|
|
11-09-2004, 13:48
|
#6
|
|
Dr Pepper Addict
Cable Forum Admin
Join Date: Oct 2003
Location: Nottingham
Age: 63
Services: Zen & YouFibre FTTP, Sky Q TV, Sky Mobile, Flextel SIP
Posts: 31,373
|
Re: LSA Shell
Ok, does ZAP tell you 
__________________
Baby, I was born this way.
|
|
|
|
|
11-09-2004, 14:08
|
#7
|
|
Inactive
Join Date: Jun 2003
Location: Los Angeles, CA
Age: 47
Posts: 6,343
|
Re: LSA Shell
What's the filename?
"something.exe"?
|
|
|
|
|
11-09-2004, 16:42
|
#8
|
|
cf.mega poster
Join Date: Jun 2003
Location: Half in the corporeal, half in the etheral
Posts: 37,182
|
Re: LSA Shell
 isass.exe
Why hasn't norton picked this up??
edit - hang on, it's actually Lsass.exe but with a lower case 'L' which makes it look like the sasser version which is 'isass' with an upper case 'i'. Look like the version I've got is a legitimate part of Windows.
__________________
Heavy Is The Crown
|
|
|
|
|
11-09-2004, 17:00
|
#9
|
|
Inactive
Join Date: Jun 2003
Location: Los Angeles, CA
Age: 47
Posts: 6,343
|
Re: LSA Shell
lsass is part of the security manager for the Windows kernel - leave well alone. 
|
|
|
|
|
11-09-2004, 17:03
|
#10
|
|
Inactive
Join Date: Jun 2003
Location: Essex
Age: 38
Services: Sky multiroom (Sky Q)
Sky Fibre Unlimited
Sky Landline
Posts: 8,851
|
Re: LSA Shell
If you have SP2 installed its to do with the Security Centre.
|
|
|
|
|
11-09-2004, 17:09
|
#11
|
|
Inactive
Join Date: Jun 2003
Location: Los Angeles, CA
Age: 47
Posts: 6,343
|
Re: LSA Shell
|
|
|
|
|
11-09-2004, 23:47
|
#12
|
|
Inactive
Join Date: Nov 2003
Location: Leeds - the dog house
Age: 49
Services: Email me for a current price list
Posts: 8,270
|
Re: LSA Shell
Try seaching and/or asking here Russ - http://forum.zonelabs.org/zonelabs
To start with I'd give it Access Trusted but otherwise ask (tick ? ? ?)
|
|
|
|
|
12-09-2004, 00:31
|
#13
|
|
Dr Pepper Addict
Cable Forum Admin
Join Date: Oct 2003
Location: Nottingham
Age: 63
Services: Zen & YouFibre FTTP, Sky Q TV, Sky Mobile, Flextel SIP
Posts: 31,373
|
Re: LSA Shell
Leave it denied. I cannot think of any reason the security sub system would need web access.
__________________
Baby, I was born this way.
|
|
|
|
|
12-09-2004, 00:43
|
#14
|
|
Inactive
Join Date: Nov 2003
Location: Leeds - the dog house
Age: 49
Services: Email me for a current price list
Posts: 8,270
|
Re: LSA Shell
Quote:
|
Originally Posted by Paul M
Leave it denied. I cannot think of any reason the security sub system would need web access.
|
Me neither - hence the allow Trusted Access (i.e. not the Internet) and otherwise ask (?).
I tend to set permissions to ? for a bit, just to see what access the program needs. Using the information in the alerts, I might add servers to the trusted zone and create expert rules.
|
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT. The time now is 02:13.
|
Join CF
You are here: 
