Re: Event Viewer Error Unknown

From: martin (martin_at_discussions.microsoft.com)
Date: 06/26/04


Date: Fri, 25 Jun 2004 17:15:01 -0700

Hi Gerry, I've just copied the error report;
`````````````````````````````````````````````````````````````````````
  Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 100
Date: 6/22/2004
Time: 12:38:55 am
User: N/A
Computer: MACHINE
Description:
The server was unable to logon the Windows NT account 'IUSR_MACHINE' due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. The data is the error code.
For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 69 05 00 00 i...

``````````````````````````````````````````````````````````````````````
  It seems there's more than one issue for me;
    1 - I had a virus
    2 - There are outsiders attempting to logon to my machine
    3 - The 'Installer' is damaged (I had to uninstall my antivirus, and am not able to install it again).
    4 - The virtual machine I had was out of date, the new one leaves me with many more empty boxes that should be images.

Seems as though computers get faster and faster, but the same amount of work is completed because so much time is dedicated to chasing flaws.

"Gerry Cornell" wrote:

> Martin
>
> We cannot help you unless you provide the information requested. Error Reports from Event Viewer can be difficult to interpret so your comments do not surprise me.
>
> You can access Event Viewer by selecting Start, Administrative Tools, Event Viewer.
> When researching the meaning of the error, information regarding Event ID, Source
> and Description are important.
>
> A tip for posting copies of Error Reports! Run Event Viewer and double click on the
> error you want to copy. In the window, which appears is a button resembling two
> pages. Double click the button and close Event Viewer. Now start your message
> (email) and do a paste into the body of the message. This will paste the info from the
> Event Viewer Error Report complete with links into the message. Make sure this is
> the first paste after exiting from Event Viewer.
>
>
>
> ~~~~~~
>
>
> Hope this helps.
>
> Gerry
> ~~~~~~~~~~~~~~~~~~~~~~~~
> FCA
>
> Stourport, Worcs, England
> Enquire, plan and execute.
> ~~~~~~~~~~~~~~~~~~~~~~~~
> Please tell the newsgroup how any
> suggested solution worked for you.
> http://dts-l.org/goodpost.htm
> ~~~~~~~~~~~~~~~~~~~~~~~~
>
> "martin" <martin@discussions.microsoft.com> wrote in message news:0C7FC785-CE1D-4396-9479-794CD5F51662@microsoft.com...
> > The link included in the event viewer is what sent me here, after claiming to have no information on this event.
> > The link at the bottom of the reply has four different opinions on what may cause this, and for $30.00, they'll tell me more.
> > I feel like I'm chasing my tail as I'm not sure if this is spyware, a virus, a corrupt file, or an intrusion.
> > The only thing I know for sure, is it is still in my system.
> > For more clues....files in my C:\Windows folder have been modified before created, double clicking or right clicking an object has a variety of results and they seem to change hourly.
> >
> > "Gerry Cornell" wrote:
> >
> > > Martin
> > >
> > > Copy and paste an actual copy of the error report.
> > >
> > > Part of the Description of the error will include a link, which you should double click
> > > for further information and you can copy using copy and paste.
> > > http://go.microsoft.com/fw.link/events.asp
> > > (Please note the hyperlink above is for illustration purposes only)
> > >
> > > A tip for posting copies of Error Reports! Run Event Viewer and double click on the
> > > error you want to copy. In the window, which appears is a button resembling two
> > > pages. Double click the button and close Event Viewer. Now start your message
> > > (email) and do a paste into the body of the message. This will paste the info from the
> > > Event Viewer Error Report complete with links into the message. Make sure this is
> > > the first paste after exiting from Event Viewer.
> > >
> > > http://www.eventid.net/display.asp?eventid=100&eventno=49&source=W3SVC&phase=1
> > >
> > > --
> > >
> > > ~~~~~~
> > >
> > >
> > > Hope this helps.
> > >
> > > Gerry
> > > ~~~~~~~~~~~~~~~~~~~~~~~~
> > > FCA
> > >
> > > Stourport, Worcs, England
> > > Enquire, plan and execute.
> > > ~~~~~~~~~~~~~~~~~~~~~~~~
> > > Please tell the newsgroup how any
> > > suggested solution worked for you.
> > > http://dts-l.org/goodpost.htm
> > > ~~~~~~~~~~~~~~~~~~~~~~~~
> > >
> > >
> > >
> > > "martin" <martin@discussions.microsoft.com> wrote in message news:DAD4CD5A-8988-4F97-A1DB-F9B5F06B83AC@microsoft.com...
> > > > My system has been acting up, with characteristics that suggest spyware, or a virus, but I have hunted and found nothing. I even suspect an outside source using my machine.
> > > > What has brought me here is going through the event viewer and an entry I put to the help section did not recognize it.
> > > > It has the yellow triangle 'Warning', with W3SVC as the source. Category is 'None' and the User 'N/A'. The event is 100. The message is;
> > > > The Server was unable to logon the Windows NT account. 'IUSR_MACHINE' due to the following error:Logon Failure: The user has not been granted the requested logon type at this computer. The data is the error code.
> > > > This event has 47 entries, in a row, in just over six minutes time.
> > > > Any ideas?
> > >
>