Hundreds of Event 560 Failures in Event Log

I've spent an hour on Google so far without getting any useful
information. Hopefully someone here knows enough to help me figure this
out.

Here's the background:

All users on our domain have restricted user accounts. This morning,
when a user went to log in, she got a message stating that the security
log was full and that a user with admin rights had to login. Oh, and in
case it matters, this box is running WinXP Pro SP2 w/latest updates.

I went through her security log to find out why it was full, and
discovered the following entries. They began at 1:00 yesterday and
ended at 3:19, averaging 2 per minute. They're all nearly identical
(except for time and operation ID), so I'll just post the first one.

Date: 1/30/2006 Source: Security
Time: 1:00:01 PM Category: Object Access
Type: Failure Aud Event ID: 560
User: <the user on our domain>
Computer: <computer in our domain>

Object Open:
Object Server: SC Manager
Object Type: SERVICE OBJECT
Object Name: CiSvc
Handle ID: -
Operation ID: {0,4208757}
Process ID: 724
Image File Name: C:\WINDOWS\system32\services.exe
Primary User Name: <the computer's name>
Primary Domain: <our domain>
Primary Logon ID: (0x0,0x3E7)
Client User Name: <her username>
Client Domain: <our domain>
Client Logon ID: (0x0,0x2CB3A)
Accesses: Set service configuration information
Query status of service
Start the service
Stop the service

Privileges: -
Restricted Sid Count: 0


Is this something I should be concerned about, or can I safely ignore
it? The user reports that she was looking up stuff on the internet
using Internet Explorer. Is this possibly an attempted (but failed)
malware installation? I'm completely lost her and will greatly
appreciate any insight.

A million thanks,
James Blevins

.

Relevant Pages

  • Re: [article] Google questions Microsoft search
    ... Google has spoken to the European Commission about concerns it has ... Microsoft has included a search box in its new version of Internet ... Firefox is not a monopoly whereas Microsoft is ... In most circumstances, Windows users need to use Internet Explorer, as the ...
    (alt.internet.search-engines)
  • Re: Google toolbar install problem
    ... forbid the Google Toolbar Installer access to the Internet. ... Alan Edwards, MS MVP Windows - Internet Explorer ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: pop up Hell
    ... > Google tool bar ... Google Toolbar is ... to have something running like antivirus software - and it prevents browser ... Once it is done, click OK, close Internet Explorer ...
    (microsoft.public.windowsxp.security_admin)
  • Google Concerned About Microoft Browser
    ... Google Concerned About Microsoft Browser ... Internet Explorer browser feature that could direct more people to ...
    (comp.dcom.telecom)
  • Re: Google
    ... A quick search of google help gave following answer. ... "AutoComplete (Internet Explorer): ... This brings up the AutoComplete dialog box. ... Choose the Clear Search History option. ...
    (microsoft.public.windowsxp.newusers)