Security event

L

LeeG

I have been looking through my event logs and came across this event:

Event Type: Success Audit
Event Source: Security
Event Category: System Event
Event ID: 515
Date: 21/05/2008
Time: 17:12:55
User: NT AUTHORITY\SYSTEM
Computer: HOME
Description:
A trusted logon process has registered with the Local Security Authority.
This logon process will be trusted to submit logon requests.

Logon Process Name: RASMAN

I am not sure where this has come from! Can anyone tell me?
 
J

Jim

LeeG said:
I have been looking through my event logs and came across this event:

Event Type: Success Audit
Event Source: Security
Event Category: System Event
Event ID: 515
Date: 21/05/2008
Time: 17:12:55
User: NT AUTHORITY\SYSTEM
Computer: HOME
Description:
A trusted logon process has registered with the Local Security Authority.
This logon process will be trusted to submit logon requests.

Logon Process Name: RASMAN

I am not sure where this has come from! Can anyone tell me?
A quck search on the internet reveals that RASMAN is the name of the Remote
Access Security Manager. If, that is, some malware did not create it.

I would disable the account and wait for further developments unless I had
installed an update about that time.

Jim
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top