While browsing my OSFirewall log, I see hundreds of entries like the following:

Description C:\WINDOWS\system32\lsass.exe (LSA Shell (Export Version)) event=0 subevent=0 class=1 ("C:\WINDOWS\system32\ZoneLabs\avsys\Scanning Process.exe", "", "&quot
Rating High
Date / Time 2008/03/18 11:24:54-4:00 GMT
Type Process
Subtype Open Process
Data C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess .exe
Program C:\WINDOWS\system32\lsass.exe
Action Taken Blocked (once)
Count 1

In the Program Control -> Programs list, settings for lsass [LSA Shell (Export Version)] are:

Smart Defense = System
Trust Level = Super
Program is able to "Access" both Trusted and Internet zones, question mark for Server and Mail.

What's going on here?


- S

Operating System:Windows XP Home Edition
Software Version:7.0
Product Name:ZoneAlarm Internet Security Suite