Can someone look at this message and tell me what may be going on, i can’t translate it.
The Windows Firewall has detected an application listening for incoming traffic.
Name: –
Path: C:WINDOWSsystem32lsass.exe
Process identifier: 500
User account: SYSTEM
User domain: NT AUTHORITY
Service: Yes
RPC server: No
IP version: IPv4
IP protocol: UDP
Port number: 2528
Allowed: No
User notified: No
For more information, see Help and Support Center at
I am also getting this in event viewer by a known possible suspect:
The PsExec service was successfully sent a stop control.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC/Server. It generates the process responsible for authenticating users for the Winlogon service. This process is performed by using authentication packages such as the default Msgina.dll. If authentication is successful, Lsass generates the user’s access token, which is used to launch the initial shell. Other processes that the user initiates inherit this token.