Event Viewer? Another Example AM I under attack?

M

Marsha

I do not understand these. Can someone explain it to me in simple terms. I
feel like my computer is under attack. I don't know who these are or
anything about them.
Thanks,
Marsha

Logon Failure:

Reason: Unknown user or bad password

User Name: Administrator

Domain: FREEMANHOME

Logon Type: 3

Logon Process: NtLmSsp

Authentication Package:

MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: FREEMANHOME


Successful Network Logon:

User Name:

Domain:

Logon ID: [0X0,0x1AEF0E]

Logon Type: 3

Logon Process: NtLmSsp

Authentication Package: NTLM

Workstation Name: FREEMANHOME

Logon GUID: {00000000-0000-0000-0000-000000000000}
 
W

Wesley Vogel

If it was Event ID 529...

[[The event occurred on Windows XP if the machine environment meets the
following criteria:
- The machine is a member of a domain.
- The machine is using a machine local account.
- Logon failure auditing is enabled.
When the user logs off, Windows will write event ID 529 to the log file
because
the OS incorrectly tries to contact the domain controller (DC), despite the
fact that the machine is using a local account. Microsoft currently doesn't
provide a fix for this problem, but you can safely ignore this event ID.]]

Failure Events Are Logged When the Welcome Screen Is Enabled
http://support.microsoft.com/?kbid=305822

If it was something else..

Event ID & the Event Source are very important.

You need to have the Event ID & the Event Source. Microsoft product: --All
Products-- is usually good enough. Be careful when scrolling down in the
page so that Microsoft product: doesn't change on you.

To view Windows XP Events and Errors, type the Source (for example, Print)
and/or the Event code (for example, 20) into the ID field, then click the Go
button. Source and Event codes may be found in the Event Viewer logs.

Windows XP Home/Professional Events and Errors
http://www.microsoft.com/technet/support/ee/ee_advanced.aspx

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
L

Lem

Marsha said:
I do not understand these. Can someone explain it to me in simple terms. I
feel like my computer is under attack. I don't know who these are or
anything about them.
Thanks,
Marsha

Logon Failure:

Reason: Unknown user or bad password

User Name: Administrator

Domain: FREEMANHOME

Logon Type: 3

Logon Process: NtLmSsp

Authentication Package:

MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: FREEMANHOME


Successful Network Logon:

User Name:

Domain:

Logon ID: [0X0,0x1AEF0E]

Logon Type: 3

Logon Process: NtLmSsp

Authentication Package: NTLM

Workstation Name: FREEMANHOME

Logon GUID: {00000000-0000-0000-0000-000000000000}

Do you have a wireless network? If so, are you using any form of
encryption, preferably WPA?
 
W

Wesley Vogel

Have you given up, or are you going to provide some details?

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top