Re: What is the event Viewer telling me?

From: Michael Solomon \(MS-MVP Windows Shell/User\) (user_at_#notme.com)
Date: 09/07/04


Date: Tue, 7 Sep 2004 15:11:25 -0700

Please try your question on the windowsxp.network_web newsgroup.

-- 
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/
"Lorne" <Lorne_Anderson@hotmail.com> wrote in message 
news:u%23GlmUSlEHA.2340@TK2MSFTNGP11.phx.gbl...
>I just found the event viewer in the program menu under admin tools.  When 
>I click the Security tab it lists what looks like a series of network 
>events. User is shown as me, system, network services, local service or 
>guest most of the time.  Guest appears to be when another computer on my 
>network (2 other family members) accesses my disk.  Event numbers are 
>usually 528 or 576 or 850 or 849 or 680 plus a few others.
>
> My concern is that every few hours there is an entry of event 540 with 
> user Anonymous Logon !  Properties says logon type = 3 and windows help 
> says that is somebody on the network logging in, but this is happening 
> when only me is using the computer and nothing else on the network is 
> switched on.
>
> I have not noticed anything going on that is suspicious but this entry in 
> the event viewer certainly does look suspicious.
>
> Have I been hacked or is there an innocent explanation?
>
>