SQL 2005 Profiler

I found below entries in Event Viewer's Application Log and System Log which
worries me as I know for sure that
there is no one login to SQL and use profiler on that time. There are only
two of us have the access to the SQL server and it is firewalled to only
allow office's IP to SQL 2005 server (on Windows 2003 server).

Application Log:
7:24:39 Login failed for user 'sa'. [CLIENT: <local machine>]
7:29:03 SQL Trace ID 2 was started by login "sa".
7:30:56 SQL Trace stopped. Trace ID = '2'. Login Name = 'sa'.
7:46:07 SQL Trace ID 2 was started by login "sa".
7:46:35 SQL Trace stopped. Trace ID = '2'. Login Name = 'sa'.
7:49:03 SQL Trace ID 2 was started by login "sa".
7:49:12 SQL Trace stopped. Trace ID = '2'. Login Name = 'sa'.
7:49:31 SQL Trace ID 2 was started by login "sa".
7:49:46 SQL Trace stopped. Trace ID = '2'. Login Name = 'sa'.

System Log:
7:12:20 Driver Microsoft Office Document Image Writer Driver required for
printer Microsoft Office Document Image Writer is unknown. Contact the
administrator to install the driver before you log in again.
7:12:21 Driver Microsoft XPS Document Writer required for printer Microsoft
XPS Document Writer is unknown. Contact the administrator to install the
driver before you log in again.
7:45:01 Driver Microsoft Office Document Image Writer Driver required for
printer Microsoft Office Document Image Writer is unknown. Contact the
administrator to install the driver before you log in again.
7:45:02 Driver Microsoft XPS Document Writer required for printer Microsoft
XPS Document Writer is unknown. Contact the administrator to install the
driver before you log in again.
7:59:13 Driver Microsoft Office Document Image Writer Driver required for
printer Microsoft Office Document Image Writer is unknown. Contact the
administrator to install the driver before you log in again.

Since both of us are not in office and for sure neither one of us that uses
profiler as shown in the log. My question is: Is there any possibility that
the logs is triggered by SQL itself besides human?

If it is an intruder works, where can I look for more traces leave behind by
intruder?

Jon


.

Relevant Pages

  • Re: SQL 2005 Profiler
    ... printer Microsoft Office Document Image Writer is unknown. ... administrator to install the driver before you log in again. ... Note that if the default trace is enabled, it is directed to the SQL Server log folder. ...
    (microsoft.public.sqlserver.security)
  • image writer error
    ... Driver Microsoft Office Document Image Writer Driver required for printer ... Microsoft Office Document Image Writer is unknown. ...
    (microsoft.public.windows.server.sbs)
  • Re: TermServDevices
    ... > Driver Microsoft Office Document Image Writer Driver required for printer ... > Microsoft Office Document Image Writer is unknown. ... You're connecting to the server via Remote Desktop Connection/Terminal ...
    (microsoft.public.windows.server.sbs)
  • Re: image writer
    ... driver isn't there. ... The MS Office Document Image Writer is included in Office 2003 and Office ... 2007 but it's an optional feature install of MS Office ...
    (microsoft.public.office.setup)
  • image writer
    ... Driver Microsoft Office Document Image Writer Driver required for ... printer Microsoft Office Document Image Writer is unknown. ...
    (microsoft.public.windows.server.sbs)