Event Viewer Issue (log on codes and workstation name query)


  1. Posts : 5
    windows 7
       #1

    Event Viewer Issue (log on codes and workstation name query)


    Hi

    I am using a laptop for home use. I am not connected to a server or anything, just the home wifi.

    Today I was looking in the event viewer and I saw quite a lot of log ons with numbers, 2,3,5 or 7. Are these all normal enough? I was using the computer at the time so I doubt someone was logging in 'remotely' while I was on it. Is it normal on start up, and log in (using password) etc to see for example log on 2, then a few seconds later log on 3, 5 or 7(when I unlock the screen after the computer has been idle)?

    Also, something more worrying is how my girlfriend's name appears at times in the Workstation name.
    We both have our own laptops with just 1 profile, on my laptop under my name and on hers under her name.

    However, her workstation is showing on mine which I do not understand. When I start up my computer there is just one user profile (mine) and I put in my password. Even when she uses my computer she is still connecting as me so I don't understand how her name would appear in workstation name. Another thing is that a lot of the times I have noticed this are times when I would have been working on my computer and she would be at work, so it is very confusing. Should I be worried about this?

    Malware bytes has shown the usual malware stuff PUP.OPTIONAL.CONDUIT etc so I don't think this is the problem: Here is an example of one of the logs. I have removed her name and my IP:

    An account was successfully logged on.

    Subject:
    Security ID: NULL SID
    Account Name: -
    Account Domain: -
    Logon ID: 0x0

    Logon Type: 3

    New Logon:
    Security ID: ANONYMOUS LOGON
    Account Name: ANONYMOUS LOGON
    Account Domain: NT AUTHORITY
    Logon ID: 0xe56308
    Logon GUID: {00000000-0000-0000-0000-000000000000}

    Process Information:
    Process ID: 0x0
    Process Name: -

    Network Information:
    Workstation Name: ******(GIRLFRIENDS NAME)
    Source Network Address: ************
    Source Port: 49744

    Detailed Authentication Information:
    Logon Process: NtLmSsp
    Authentication Package: NTLM
    Transited Services: -
    Package Name (NTLM only): NTLM V1
    Key Length: 128

    Thank you for your time!
      My Computer


  2. Posts : 5
    windows 7
    Thread Starter
       #2

    No one?
      My Computer


  3. Posts : 10,485
    W7 Pro SP1 64bit
       #3

    My guess is that those entries are the result of stuff that you are sharing (by default) on your Home network.

    The first time that you connected to your wireless network, you might have seen a prompt like this:



    If you selected Home network, from that screen, then I seem to recall that the next screen offers to share your files with other computers on your network. If you opted to do that, then your girlfriend's computer might be automatically connecting to your shared files.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 14:58.
Find Us