lsass.exe security errors

[John Bacon]

My security event log is filled with these errors.
Does anyone know why or how to fix it?
The Windows Firewall has detected an application listening for incoming
traffic.

Name: -
Path: C:\WINDOWS\system32\lsass.exe
Process identifier: 1160
User account: SYSTEM
User domain: NT AUTHORITY
Service: Yes
RPC server: No
IP version: IPv4
IP protocol: UDP
Port number: 2938
Allowed: No
User notified: No

For more information, see Help and Support Center at

 

[Benny Van]

Re: lsass.exe security errors

On Jul 13, 3:32 pm, John Bacon <JohnBa...@discussions.microsoft.com>
wrote:
> Mysecurityevent log is filled with these errors.
> Does anyone know why or how to fix it?
> The Windows Firewall has detected an application listening for incoming
> traffic.
>
> Name: -
> Path: C:\WINDOWS\system32\lsass.exe
> Process identifier: 1160
> User account: SYSTEM
> User domain: NT AUTHORITY
> Service: Yes
> RPC server: No
> IP version: IPv4
> IP protocol: UDP
> Port number: 2938
> Allowed: No
> User notified: No
>
> For more information, see Help and Support Center at

Could be a security threat---Trojan.Backdoor, Verify through any anti-
spyware or anit-malware software that you are familiar with. Then
follow the listed link in order to remove it.

http://wiki.answers.com/Q/How_do_you_remove_the_issas.exe_computer_virus

Ben

 

[John Bacon]

Re: lsass.exe security errors

I only have Lsass.exe on disk which seems to be the correct Microsoft program.
Can't find any entries in registry.
Virus scanner doesn't find anything.
But still getting security events.

"Benny Van" wrote:

> On Jul 13, 3:32 pm, John Bacon <JohnBa...@discussions.microsoft.com>
> wrote:
> > Mysecurityevent log is filled with these errors.
> > Does anyone know why or how to fix it?
> > The Windows Firewall has detected an application listening for incoming
> > traffic.
> >
> > Name: -
> > Path: C:\WINDOWS\system32\lsass.exe
> > Process identifier: 1160
> > User account: SYSTEM
> > User domain: NT AUTHORITY
> > Service: Yes
> > RPC server: No
> > IP version: IPv4
> > IP protocol: UDP
> > Port number: 2938
> > Allowed: No
> > User notified: No
> >
> > For more information, see Help and Support Center at
>
> Could be a security threat---Trojan.Backdoor, Verify through any anti-
> spyware or anit-malware software that you are familiar with. Then
> follow the listed link in order to remove it.
>
> http://wiki.answers.com/Q/How_do_you_remove_the_issas.exe_computer_virus
>
> Ben
>
>