anonymous logon

G

Guest

hello... i keep getting these in event viewer security. does it look ok? i am
using a wireless connection on bt adsl.

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 12/12/2005
Time: 09:02:42
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: STEVE
Description:
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x12C62)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name:
Logon GUID: {00000000-0000-0000-0000-000000000000}

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
 
G

Galen

In watercress_soup <[email protected]> had this to say:

My reply is at the bottom of your sent message:
hello... i keep getting these in event viewer security. does it look
ok? i am using a wireless connection on bt adsl.

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 12/12/2005
Time: 09:02:42
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: STEVE
Description:
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x12C62)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name:
Logon GUID: {00000000-0000-0000-0000-000000000000}

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

It may very well be nothing major and actually is the system doing what it's
supposed to do.

Comments and links for event id 540 from source Security:
http://eventid.net/display.asp?eventid=540&eventno=9&source=Security&phase=1

Take a gander there and if that seems to be accurate then you should be all
set. A third party firewall - properly configured - might show more
information in the logs if it was an external action that caused the
security event to be added.

--
Galen - MS MVP - Windows (Shell/User & IE)
http://dts-l.org/

"My life is spent in one long effort to escape from the commonplaces of
existence." - Sherlock Holmes
 
D

Drew Tognola

If you are wondering if you're being audited, the answer is no. These are
common 'events' when you are on a network. I see many of these 'Event Type:
Success Audit' on the network at work also and I'm sure I'm not being
audited (maybe by the IRS but not my job).

Drew
 
G

Guest

thanks for replies...

something just slightly off topic. i get errors about nview_info which i
cant find any information about through the nvidia website. these happen in
application, usually saying this:

Event Type: Error
Event Source: nview_info
Event Category: None
Event ID: 1
Date: 12/12/2005
Time: 10:35:12
User: N/A
Computer: STEVE
Description:
The description for Event ID ( 1 ) in Source ( nview_info ) cannot be found.
The local computer may not have the necessary registry information or message
DLL files to display messages from a remote computer. You may be able to use
the /AUXSOURCE= flag to retrieve this description; see Help and Support for
details. The following information is part of the event: NVIEW : Explorer:
WAIT_TIMEOUT, while waiting for a read to clear - resetting read event


anyone know if i can correct these errors? i have reinstalled drivers
through updates released.

or any links to (good) forums that might be able to provide solutions or
reasons? (i'd be interested in other forums even if its not about this
specific subject)
 
W

Wesley Vogel

It means that NVidia did not have enough information about the event to send
to the Event Viewer so the Event Viewer gets upset and lists an error that
means nothing.

Nview.dll = NVIDIA nView Desktop and Window Manager

Disable it. You can still get to NVIDIA nView Desktop and Window Manager in
the Control Panel if you ever need to.

You can disable all three of the following from starting when you boot your
computer. They do not need to be running. I have all this Nvidia crap
disabled and more.

NvCplDaemon
[System Tray icon used to change display settings, change the clock rate and
memory speed for nVidia based graphics cards. This is unnecessary since you
can easily configure these settings the way you want them in the Display
Properties and not have to mess with them again. Also disable the "NVIDIA
Driver Helper Service" if enabled as it can cause this entry to be
re-enabled on re-boot (note that this service can also cause extreme
shutdown delays if enabled ]
http://www.sysinfo.org/startuplist.php?letter=R&filter=&count=50&offset=150

NvMediaCenter
[[RunDLL32.exe NvMCTray.dll, NvTaskbarInit System Tray icon used to manage
settings for nVidia based graphics cards. May be required for some 3D
applications to recognize your card correctly - such as the game
"Everquest". Otherwise, settings can be changed manually via Display
Properties]]

nwiz.exe = NVIDIA nView Wizard
[[Application enables user to having 32 virtual desktops, get a desktop
larger than the viewable area of the monitor, being able to divide the
display across more than one monitor, managing applications and many more
functionality.]]

Manually delete these three entries:
NvCplDaemon, NvMediaCenter and nwiz.

Start | Run | Type: regedit | Click OK |
Navigate to >>>
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Look in the right hand pane for the name NvCplDaemon.
Right click on NvCplDaemon and select Delete.
When this message pops up: Are you sure you want to delete this value?
Click YES.

Repeat for NvMediaCenter and nwiz.

The three registry entries are...
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value Name: NvCplDaemon
Value Type: REG_SZ
Value Data: RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value Name: NvMediaCenter
Value Type: REG_SZ
Value Data:RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value Name: nwiz
Value Type: REG_SZ
Value Data: nwiz.exe /install

This doesn't need to be running either.

Disable the NVIDIA Display Driver Service...
Start | Run | Type: services.msc | OK |
Scroll down to and double click: NVIDIA Display Driver Service |
Under Startup type set to Disabled | Apply | Click the Stop button |
When it stops click OK | You may have to reboot

[[NVIDIA Driver Helper Service NVSvc nvsvc32.exe
This service is installed when you change from the WDM drivers to nVidia's
latest and greatest version. The service uses about 945k and zero CPU. I
have even experienced EXTREME shutdown delays with this service active, but
no adverse side effects with it disabled unless you override your refresh
rate. This service is required to override monitor refresh rates in OpenGL
games. In DirectX games, you can disable this service and run "dxdiag" and
override the refresh rate there. NOTE: If using drivers other than nVidia's,
such as Asus, this service may have been renamed to reflect that. ]]

OK, here's the and more.

If you want to get rid of even more useless nvidia crap...

Download and install ShellExView (shexview.exe)...

This speeds up your right click menu.

ShellExView download
http://www.snapfiles.com/get/shellexview.html

Open ShellExView and disable the Nvidia right click Menu entries.
These five entries...

====
Extension Name: Desktop Explorer
Disabled: Yes
Type: Shell Folder
Description: NVIDIA Desktop Explorer, Version 61.77
Version: 6.14.10.6177
Product Name: NVIDIA Desktop Explorer, Version 61.77
Company: NVIDIA Corporation
My Computer: No
Desktop: No
Control Panel : No
Filename: C:\WINDOWS\System32\nvshell.dll
CLSID: {1CDB2949-8F65-4355-8456-263E7C208A5D}
====

Extension Name: Desktop Explorer Menu
Disabled: Yes
Type: System
Description: NVIDIA Desktop Explorer, Version 61.77
Version: 6.14.10.6177
Product Name: NVIDIA Desktop Explorer, Version 61.77
Company: NVIDIA Corporation
My Computer: No
Desktop: No
Control Panel: No
Filename: C:\WINDOWS\System32\nvshell.dll
CLSID: {1E9B04FB-F9E5-4718-997B-B8DA88302A47}
====

Extension Name: DesktopContext Class
Disabled: Yes
Type: System
Description: NVIDIA Display Properties Extension
Version: 6.14.10.6177
Product Name: NVIDIA Compatible Windows 2000 Display driver, Version 61.77
Company: NVIDIA Corporation
My Computer: No
Desktop: No
Control Panel: No
Filename: C:\WINDOWS\System32\nvcpl.dll
CLSID: {A70C977A-BF00-412C-90B7-034C51DA2439}
===

Extension Name: NVIDIA CPL Extension
Disabled: Yes
Type: Context Menu
Description: NVIDIA Display Properties Extension
Version: 6.14.10.6177
Product Name: NVIDIA Compatible Windows 2000 Display driver, Version 61.77
Company: NVIDIA Corporation
My Computer: No
Desktop: No
Control Panel: No
Filename: C:\WINDOWS\System32\nvcpl.dll
CLSID: {FFB699E0-306A-11d3-8BD1-00104B6F7516}
===

Extension Name: nView Desktop Context Menu
Disabled: Yes
Type: System
Description: NVIDIA Desktop Explorer, Version 61.77
Version: 6.14.10.6177
Product Name: NVIDIA Desktop Explorer, Version 61.77
Company: NVIDIA Corporation
My Computer: No
Desktop: No
Control Panel: No
Filename: C:\WINDOWS\System32\nvshell.dll
CLSID: {1E9B04FB-F9E5-4718-997B-B8DA88302A48}
===
--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
G

Guest

I know I am a little more than a year late. I have done as you stated,
however I do have a dual screen and use the functionality of the NView
Desktop Manager. Is there any fix for it without just removing it from
startup?

Kind regards,

Melanie

Wesley Vogel said:
It means that NVidia did not have enough information about the event to send
to the Event Viewer so the Event Viewer gets upset and lists an error that
means nothing.

Nview.dll = NVIDIA nView Desktop and Window Manager

Disable it. You can still get to NVIDIA nView Desktop and Window Manager in
the Control Panel if you ever need to.

You can disable all three of the following from starting when you boot your
computer. They do not need to be running. I have all this Nvidia crap
disabled and more.

NvCplDaemon
[System Tray icon used to change display settings, change the clock rate and
memory speed for nVidia based graphics cards. This is unnecessary since you
can easily configure these settings the way you want them in the Display
Properties and not have to mess with them again. Also disable the "NVIDIA
Driver Helper Service" if enabled as it can cause this entry to be
re-enabled on re-boot (note that this service can also cause extreme
shutdown delays if enabled ]
http://www.sysinfo.org/startuplist.php?letter=R&filter=&count=50&offset=150

NvMediaCenter
[[RunDLL32.exe NvMCTray.dll, NvTaskbarInit System Tray icon used to manage
settings for nVidia based graphics cards. May be required for some 3D
applications to recognize your card correctly - such as the game
"Everquest". Otherwise, settings can be changed manually via Display
Properties]]

nwiz.exe = NVIDIA nView Wizard
[[Application enables user to having 32 virtual desktops, get a desktop
larger than the viewable area of the monitor, being able to divide the
display across more than one monitor, managing applications and many more
functionality.]]

Manually delete these three entries:
NvCplDaemon, NvMediaCenter and nwiz.

Start | Run | Type: regedit | Click OK |
Navigate to >>>
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Look in the right hand pane for the name NvCplDaemon.
Right click on NvCplDaemon and select Delete.
When this message pops up: Are you sure you want to delete this value?
Click YES.

Repeat for NvMediaCenter and nwiz.

The three registry entries are...
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value Name: NvCplDaemon
Value Type: REG_SZ
Value Data: RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value Name: NvMediaCenter
Value Type: REG_SZ
Value Data:RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value Name: nwiz
Value Type: REG_SZ
Value Data: nwiz.exe /install

This doesn't need to be running either.

Disable the NVIDIA Display Driver Service...
Start | Run | Type: services.msc | OK |
Scroll down to and double click: NVIDIA Display Driver Service |
Under Startup type set to Disabled | Apply | Click the Stop button |
When it stops click OK | You may have to reboot

[[NVIDIA Driver Helper Service NVSvc nvsvc32.exe
This service is installed when you change from the WDM drivers to nVidia's
latest and greatest version. The service uses about 945k and zero CPU. I
have even experienced EXTREME shutdown delays with this service active, but
no adverse side effects with it disabled unless you override your refresh
rate. This service is required to override monitor refresh rates in OpenGL
games. In DirectX games, you can disable this service and run "dxdiag" and
override the refresh rate there. NOTE: If using drivers other than nVidia's,
such as Asus, this service may have been renamed to reflect that. ]]

OK, here's the and more.

If you want to get rid of even more useless nvidia crap...

Download and install ShellExView (shexview.exe)...

This speeds up your right click menu.

ShellExView download
http://www.snapfiles.com/get/shellexview.html

Open ShellExView and disable the Nvidia right click Menu entries.
These five entries...

====
Extension Name: Desktop Explorer
Disabled: Yes
Type: Shell Folder
Description: NVIDIA Desktop Explorer, Version 61.77
Version: 6.14.10.6177
Product Name: NVIDIA Desktop Explorer, Version 61.77
Company: NVIDIA Corporation
My Computer: No
Desktop: No
Control Panel : No
Filename: C:\WINDOWS\System32\nvshell.dll
CLSID: {1CDB2949-8F65-4355-8456-263E7C208A5D}
====

Extension Name: Desktop Explorer Menu
Disabled: Yes
Type: System
Description: NVIDIA Desktop Explorer, Version 61.77
Version: 6.14.10.6177
Product Name: NVIDIA Desktop Explorer, Version 61.77
Company: NVIDIA Corporation
My Computer: No
Desktop: No
Control Panel: No
Filename: C:\WINDOWS\System32\nvshell.dll
CLSID: {1E9B04FB-F9E5-4718-997B-B8DA88302A47}
====

Extension Name: DesktopContext Class
Disabled: Yes
Type: System
Description: NVIDIA Display Properties Extension
Version: 6.14.10.6177
Product Name: NVIDIA Compatible Windows 2000 Display driver, Version 61.77
Company: NVIDIA Corporation
My Computer: No
Desktop: No
Control Panel: No
Filename: C:\WINDOWS\System32\nvcpl.dll
CLSID: {A70C977A-BF00-412C-90B7-034C51DA2439}
===

Extension Name: NVIDIA CPL Extension
Disabled: Yes
Type: Context Menu
Description: NVIDIA Display Properties Extension
Version: 6.14.10.6177
Product Name: NVIDIA Compatible Windows 2000 Display driver, Version 61.77
Company: NVIDIA Corporation
My Computer: No
Desktop: No
Control Panel: No
Filename: C:\WINDOWS\System32\nvcpl.dll
CLSID: {FFB699E0-306A-11d3-8BD1-00104B6F7516}
===

Extension Name: nView Desktop Context Menu
Disabled: Yes
Type: System
Description: NVIDIA Desktop Explorer, Version 61.77
Version: 6.14.10.6177
Product Name: NVIDIA Desktop Explorer, Version 61.77
Company: NVIDIA Corporation
My Computer: No
Desktop: No
Control Panel: No
Filename: C:\WINDOWS\System32\nvshell.dll
CLSID: {1E9B04FB-F9E5-4718-997B-B8DA88302A48}
===
--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
watercress_soup said:
thanks for replies...

something just slightly off topic. i get errors about nview_info which i
cant find any information about through the nvidia website. these happen
in application, usually saying this:

Event Type: Error
Event Source: nview_info
Event Category: None
Event ID: 1
Date: 12/12/2005
Time: 10:35:12
User: N/A
Computer: STEVE
Description:
The description for Event ID ( 1 ) in Source ( nview_info ) cannot be
found. The local computer may not have the necessary registry information
or message DLL files to display messages from a remote computer. You may
be able to use the /AUXSOURCE= flag to retrieve this description; see
Help and Support for details. The following information is part of the
event: NVIEW : Explorer: WAIT_TIMEOUT, while waiting for a read to clear
- resetting read event


anyone know if i can correct these errors? i have reinstalled drivers
through updates released.

or any links to (good) forums that might be able to provide solutions or
reasons? (i'd be interested in other forums even if its not about this
specific subject)
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top