[1oska]

I keep getting message window saying that a programme wants to access the internet to download the LSA. The only info I can find is upto 5 years old and relates to a virus. Is this a legit & safe request or have I got a virus? I have carried out anti virus and spyware scans which apart from the below appears clean. Any help woud be greatly appreciated.
C:\Program Files\InstallShield Installation Information\{0B0F82AB-5B9A-4B9F-96EF-74E1FD85F01F}\RPS SafeConnect.msi

[Phantom010]

LSA Shell (export version)

[1oska]

Thanks for the reply. The article does'nt give a difintive answer..educated guess, I'm still not sure if its safe to allow or not. But, on considration, if I've blocked it and it keeps popping up,it must be coming from a file already on my system & not from a remote server (or what ever), is that right? Is there anyway I can find out where the message/pop up window orignates from

[Phantom010]

The legitimate path for LSA (lsass.exe) is C:\WINDOWS\system32.

Is there anyway I can find out where the message/pop up window orignates from

Are you referring to the origine of the file or the application giving you the pop-up?

Usually, these pop-ups come from your firewall.

[1oska]

I was refering to the application, I was wondering if this would help identify whether or not it is coming from a legit programme/source. I've down loaded the Microsoft Malicious software removal tool, even though I get automatic updates, the deep scan has not found anything. Does lsass.exe refer to the sasser virus?

[Phantom010]

No, it's a legitimate Windows process.

[1oska]

Sorry to be pedantic; its OK to allow it access?