Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Latest News: Apple Releases Security Updates for MacOS, iOS, and Safari

Featured Deal: Pay What You Want Complete Cyber Security Certification Bundle Deal

Event Viewer logs

Started by Aprendizaje , Apr 13 2010 04:38 AM

Please log in to reply

1 reply to this topic

#1 Aprendizaje

Members
11 posts
OFFLINE

Local time:10:16 PM

Posted 13 April 2010 - 04:38 AM

I have events from Anonymous log ons. What are those? In the security log! :thumbsup:

For example: NT AUTHORITY\ANONYMOUS LOGON
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x10FF3)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name:
Logon GUID: -
This is the only on in almost a month!

Thank you lots!!

BC AdBot (Login to Remove)

BleepingComputer.com
Register to remove ads

#2 hamluis

Moderator

Moderator
55,254 posts
OFFLINE

Gender:Male
Location:Killeen, TX
Local time:10:16 PM

Posted 13 April 2010 - 06:00 AM

Probably nothing to be concerned about, those are typical entries on my system.

Comments from http://www.dslreports.com/forum/remark,655...ty,1~mode=flat:

"A successful user logon is always listed as an event ID 528 and then you'll see a type which can be anything from 2 to 7. If it's not 528, then it's not an actual user and it's not necessarily successful.

Event ID 538 is a successful logoff and not necessarily by an actual user.

Event ID 540 is a successful "network" logon as in mapping a network drive. Your computer keeps checking for Network connections or shared folders, etc... on a regular basis to make sure you are connected."

Louis

What Is Anonymous Logon?

Edited by hamluis, 13 April 2010 - 06:08 AM.

Malware Removal Logs Forum

Preparation Guide, Malware Removal Logs Forum

Am I Infected Forum

Windows Crashes, BSODs,Hangs Help & Support Forum

Backup, Imaging, Disk Management Forum

Back to Windows XP Home and Professional