[Hikerbear]

Hi;
I am running XP Home SP2 and hopefully all clean, but have just noted in EventViewer/Security- many new entries with each start, or retsart such as,

"An authentication package has been loaded by the Local Security Authority. This authentication package will be used to authenticate logon attempts.
Authentication Package Name: C:\WINDOWS\system32\schannel.dll : Schannel"

That's an example of one of the earlier ones on May 17.
This is on from just a few minutes ago,

"A trusted logon process has registered with the Local Security Authority. This logon process will be trusted to submit logon requests.

Logon Process Name: RASMAN

For more information, see Help and Support Center at "

I have no idea of what RASMAN is.

Windows Firewall is running.

Looking forward to any help- Thanks much.

Roger

 

[elf]

rasman.exe is a Windows service which is used to dial phone numbers from the phone book. This program is important for the stable and secure running of your computer and should not be terminated.

More than likely it is just services starting/restarting. It may also make an entry when you boot up or shut down.

You can clear the log, reboot and see what all pops up.

 

[grumpygit]

Hi and welcome to TSF.
Rasman
http://www.processlibrary.com/directory/files/rasman

Schannel
http://www.processlibrary.com/directory/files/schannel/23547