Jump to content

lsass.exe security errors


Recommended Posts

Guest John Bacon
Posted

My security event log is filled with these errors.

Does anyone know why or how to fix it?

The Windows Firewall has detected an application listening for incoming

traffic.

 

Name: -

Path: C:\WINDOWS\system32\lsass.exe

Process identifier: 1160

User account: SYSTEM

User domain: NT AUTHORITY

Service: Yes

RPC server: No

IP version: IPv4

IP protocol: UDP

Port number: 2938

Allowed: No

User notified: No

 

For more information, see Help and Support Center at

  • 3 weeks later...
  • Replies 2
  • Created
  • Last Reply
Guest Benny Van
Posted

Re: lsass.exe security errors

 

Re: lsass.exe security errors

 

On Jul 13, 3:32 pm, John Bacon <JohnBa...@discussions.microsoft.com>

wrote:

> Mysecurityevent log is filled with these errors.

> Does anyone know why or how to fix it?

> The Windows Firewall has detected an application listening for incoming

> traffic.

>

> Name: -

> Path: C:\WINDOWS\system32\lsass.exe

> Process identifier: 1160

> User account: SYSTEM

> User domain: NT AUTHORITY

> Service: Yes

> RPC server: No

> IP version: IPv4

> IP protocol: UDP

> Port number: 2938

> Allowed: No

> User notified: No

>

> For more information, see Help and Support Center at

 

Could be a security threat---Trojan.Backdoor, Verify through any anti-

spyware or anit-malware software that you are familiar with. Then

follow the listed link in order to remove it.

 

http://wiki.answers.com/Q/How_do_you_remove_the_issas.exe_computer_virus

 

Ben

  • 4 weeks later...
Guest John Bacon
Posted

Re: lsass.exe security errors

 

Re: lsass.exe security errors

 

I only have Lsass.exe on disk which seems to be the correct Microsoft program.

Can't find any entries in registry.

Virus scanner doesn't find anything.

But still getting security events.

 

"Benny Van" wrote:

> On Jul 13, 3:32 pm, John Bacon <JohnBa...@discussions.microsoft.com>

> wrote:

> > Mysecurityevent log is filled with these errors.

> > Does anyone know why or how to fix it?

> > The Windows Firewall has detected an application listening for incoming

> > traffic.

> >

> > Name: -

> > Path: C:\WINDOWS\system32\lsass.exe

> > Process identifier: 1160

> > User account: SYSTEM

> > User domain: NT AUTHORITY

> > Service: Yes

> > RPC server: No

> > IP version: IPv4

> > IP protocol: UDP

> > Port number: 2938

> > Allowed: No

> > User notified: No

> >

> > For more information, see Help and Support Center at

>

> Could be a security threat---Trojan.Backdoor, Verify through any anti-

> spyware or anit-malware software that you are familiar with. Then

> follow the listed link in order to remove it.

>

> http://wiki.answers.com/Q/How_do_you_remove_the_issas.exe_computer_virus

>

> Ben

>

>


×
×
  • Create New...