Two days ago Zone Alarm alerted me to the fact that LSA Shell (Export Version) was trying to connect to the internet.
I 'denied' access and did some research on Google, to see that this could be related the Sasser worms (A-F). I then did a full scan with Sophos AV (fully up-to-date), which found no viruses. I also downloaded the utility from microsoft to remove Sasser a-f, but it did not detect anything.
I am more curious, than worried, as I understand that LSA Shell (Export Version)is part of the Windows OS, but why did it try and connect to the internet ?
I am running Windows XP, with all critical updates installed.