Event Viewer Issue (log on codes and workstation name query)

[solquiff]

Hi

I am using a laptop for home use. I am not connected to a server or anything, just the home wifi.

Today I was looking in the event viewer and I saw quite a lot of log ons with numbers, 2,3,5 or 7. Are these all normal enough? I was using the computer at the time so I doubt someone was logging in 'remotely' while I was on it. Is it normal on start up, and log in (using password) etc to see for example log on 2, then a few seconds later log on 3, 5 or 7(when I unlock the screen after the computer has been idle)?

Also, something more worrying is how my girlfriend's name appears at times in the Workstation name.
We both have our own laptops with just 1 profile, on my laptop under my name and on hers under her name.

However, her workstation is showing on mine which I do not understand. When I start up my computer there is just one user profile (mine) and I put in my password. Even when she uses my computer she is still connecting as me so I don't understand how her name would appear in workstation name. Another thing is that a lot of the times I have noticed this are times when I would have been working on my computer and she would be at work, so it is very confusing. Should I be worried about this?

Malware bytes has shown the usual malware stuff PUP.OPTIONAL.CONDUIT etc so I don't think this is the problem: Here is an example of one of the logs. I have removed her name and my IP:

An account was successfully logged on.

Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0

Logon Type: 3

New Logon:
Security ID: ANONYMOUS LOGON
Account Name: ANONYMOUS LOGON
Account Domain: NT AUTHORITY
Logon ID: 0xe56308
Logon GUID: {00000000-0000-0000-0000-000000000000}

Process Information:
Process ID: 0x0
Process Name: -

Network Information:
Workstation Name: ******(GIRLFRIENDS NAME)
Source Network Address: ************
Source Port: 49744

Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): NTLM V1
Key Length: 128

Thank you for your time!

 

[solquiff]

No one?

 

[UsernameIssues]

My guess is that those entries are the result of stuff that you are sharing (by default) on your Home network.

The first time that you connected to your wireless network, you might have seen a prompt like this:

If you selected Home network, from that screen, then I seem to recall that the next screen offers to share your files with other computers on your network. If you opted to do that, then your girlfriend's computer might be automatically connecting to your shared files.