1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Multiple security events..advapi logon process...my computer secure?

Discussion in 'Security and Privacy' started by barry2616, 2009/12/19.

  1. 2009/12/19
    barry2616

    barry2616 Inactive Thread Starter

    Joined:
    2007/06/25
    Messages:
    44
    Likes Received:
    0
    Hi,

    Hopefully someone can help me out with the following. I just had the fake Windows Security Center virus/malware (aka: sysguard variation) on my computer. After much headache I was able to get this removed (I think).

    What I found was that my router had another port set to be allowed which I quickly removed.

    What I am seeing now is that in the event viewer of both my wired and wireless pc is a bunch of security events.

    They first start off with loading a bunch of authentication packages when I log on. Is this normal?

    After that is the start of many:

    Successful Logon:
    User Name: NETWORK SERVICE
    Domain: NT AUTHORITY
    Logon ID: (0x0,0x3E4)
    Logon Type: 5
    Logon Process: Advapi
    Authentication Package: Negotiate
    Workstation Name:
    Logon GUID: {00000000-0000-0000-0000-000000000000}

    Special privileges assigned to new logon:
    User Name:
    Domain:
    Logon ID: (0x0,0x3E4)
    Privileges: SeAuditPrivilege
    SeAssignPrimaryTokenPrivilege
    SeChangeNotifyPrivilege

    I then have a whole bunch of exceptions added to windows firewall entries. (I have windows firewall turned off by the way)

    And then I have this entry which is also puzzling:

    Successful Logon:
    User Name: Bear
    Domain: BEARNEW07
    Logon ID: (0x0,0x338C0)
    Logon Type: 2
    Logon Process: User32
    Authentication Package: Negotiate
    Workstation Name: BEARNEW07
    Logon GUID: {00000000-0000-0000-0000-000000000000}

    Can anyone help me out to confirm what these are? Is this normal? Does anyone else have these events listed?

    Thanks

    Please let me know if you need more info.

    XP SP 2

    update:
    So I've done full scans on both computers with anti malware, adaware, avg, spybot and hijack this. I think Im clean in terms of malware and spyware. However the above is still a problem, I have multiple repeating security events and can't find if those are normal or not.
     
    Last edited: 2009/12/19
  2. 2009/12/25
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    I have a lot of the same events on my system also.

    Geri
     
    Geri,
    #2

  3. to hide this advert.

  4. 2009/12/26
    Jilly

    Jilly Inactive

    Joined:
    2009/12/12
    Messages:
    555
    Likes Received:
    1
    Hi, Barry2616,

    Methinks you need to go to W Update ASAP and let MS tell you what critical updates this system is missing and download all of them.

    If "XP SP2 " was not a typo, this system is in harm's way.....given we are on our way to SP4.
    ________________________________
    Edit: None of my systems are on autoupdate, but perhaps yours should be? A lot of people choose that. Your call, but you MUST HAVE THE CRITICAL UPDATES be it on auto or visit them on Tuesdays.
     
    Last edited: 2009/12/26

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.