Skip to main content
To Customer Support To Customer Support
I'm guessing it had something to do with the windows update on November 13.  However, everything read so far says lsass.exe does not access the internet.  Webroot support says no infections were found on the system but wouldn't comment on why it might be acccessing the internet.

 

 
I let it have access but does it need to? http://www.ehow.com/info_12173956_lsassexe-need-internet.html if you block it and you see any issues try unblocking to see if that fixes it. It's up to you.

 

Daniel ;)

 

I agree.  Everything read says it should not be accessing the internet, but it did.  Many years ago (2005-2009??) there was a sasser virus that USED lsass to connect to the internet.  In this case there was a 30 byte lsass.exe downloaded as part of (I think) the Microsof update.  Perhaps it was accessing theinternet via system32lsass.exe to complete something about the update.

 

Since Microsoft doesn't talk about this I will leave it blocked.   The downfall is that it may siiently leave me with an incomplete update. Unfortunately, Microsoft isn't going to answer my questions about what is going on.  :(

 

Thanks again, Triple

Godspeed
it's a legit exe belonging to windows update program, it must be allowed to access freely the internet, you can find it in C:windowssystem32 then right click on it and have it checked by WSA if you're still unsure. Sasser is a worm which used a security break in Lsass.exe, that security breach has been addressed by Microsoft long ago (it caused reboots and stopped Lsass.exe).

hope this helps

Reply


Terms & Conditions

© 2004 - Webroot Inc.

We have recently updated our Privacy Policies. We encourage you to read the full terms here.