lsass.exe

[Marmic]

Each time I turn on my computer, my Firewall (AVG set to profile of Standalone Computer) give me a message saying Lsass.exe [Export Version] is trying to access the Internet.

The detailed wording is:

Application: LSA Shell (Export Version)
Full path: C:\WINDOWS\system32\lsass.exe
Local address: 0.0.0.0 : 500
Remote address: 0.0.102.0 : 1
Connection: UDP connection
Direction: In/Out

Any idea of what is going on and how to "correct" this?

Mike

[TurcoLoco]

What version of Windows are you running, XP? If so which service pack do you have installed on it?

lsass.exe service along with a few other critical system processes do appear to access the internet even right at startup, that is normal unless the file in question has been modified/replaced by a worm/virus. Sasser worm or some of its variants would cause the system to shutdown/reboot after 60 seconds if that is not the case then I think you are fine but if you feel your system might be infected, then I suggest you go check out this sticky.

~TL