Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Event log id: 36888 & 36874


  • Please log in to reply
1 reply to this topic

#1 Tylerr

Tylerr

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:02:55 PM

Posted 08 February 2012 - 05:51 AM

In a matter of some seconds, Event log id:36888 & 36874 were logged in my Event log.

Checking the PID that was given in the Event log:

Execution

[ ProcessID] 544
[ ThreadID] 624

I found out that 544 belonged to: lsass.exe in the Task manager and had 2 services running:

Samss - Security accounts manager
Protectedstorage - Protected storage

Was this an attack or what caused this logging and especially the many events?

BC AdBot (Login to Remove)

 


#2 Layback Bear

Layback Bear

  • Members
  • 1,880 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Northern Ohio
  • Local time:02:55 PM

Posted 09 February 2012 - 06:12 AM

A little Google and wala. Some other people are having the same problem you are and this might help.
http://social.technet.microsoft.com/Forums/en-US/w7itprogeneral/thread/b2e0e110-f9ca-4113-8f4d-f20d6b39b8c7/




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users