Re: am I being hacked or is something else going on?

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 05/21/04 

Date: Fri, 21 May 2004 00:08:11 GMT

Are you on a local network with other computers? Type 3 logon means someone is trying
to gain access from the network. Do you have any holes open in your firewall to offer
services to internet users such as a web server? I would suggest running Microsoft
Baseline Security Analyzer on your computer to check for vulnerabilities including
unneeded services and scan your firewall from a self scan site such as
http://scan.sygatetech.com/ to make sure it is not misconfigured and disable file and
print sharing if you are not offering shares to other computers on a network. Be
sure to do a full virus scan with latest definitions if you have not done that
yet. --- Steve

http://www.microsoft.com/technet/security/tools/mbsahome.mspx
http://www.microsoft.com/security/protect/

"Gary Massengale" <garym_jnospam@hotmail.com> wrote in message
news:OveepMpPEHA.556@tk2msftngp13.phx.gbl...
> event viewer is showing unsuccesful login attemps, sometimes user name is "
> server ", sometimes " abc ", sometimes " data ". I have current antivirus,
> and a firewall running, so I am curious as to what is causing these attempts
> at 2 AM in the morning.
>
> Below is what I keep seeing:
>
>
> Event Type: Failure Audit
>
> Event Source: Security
>
> Event Category: Logon/Logoff
>
> Event ID: 529
>
> Date: 5/20/2004
>
> Time: 2:04:10 AM
>
> User: NT AUTHORITY\SYSTEM
>
> Computer: MYSERVERNAME
>
> Description:
>
> Logon Failure:
>
> Reason: Unknown user name or bad password
>
> User Name: server
>
> Domain:
>
> Logon Type: 3
>
> Logon Process: Advapi
>
> Authentication Package:
> MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
>
> Workstation Name: MYSERVERNAME
>
>

Relevant Pages

  • Re: Simple Printer Sharing/Networking Question
    ... And all 3 desktop computers are running Windows XP Pro ... We have turned on sharing for the network printers (in association with this ... caused by 1) a misconfigured firewall or overlooked firewall (including ...
    (microsoft.public.windowsxp.network_web)
  • Re: Sharing a printer
    ... Here are general network troubleshooting steps. ... Problems sharing files between computers on a network are generally caused by 1) a misconfigured firewall or overlooked firewall; or 2) inadvertently running two firewalls such as the built-in Windows Firewall and a third-party firewall; and/or 3) not having identical user accounts and passwords on all Workgroup machines; 4) trying to create shares where the operating system does not permit it. ... On the assumption that you in fact do have a router that connects to the Internet and that your computers then connect to the router, then if you think that you have one IP for multiple computers then you probably are using a website tool such as http://whatismyip.com/ That shows the your public IP address -- the one that the rest of the world sees. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Home Network with Vista & XP
    ... The 3 computers are: 1 laptop running XP Pro, 1 laptop running Vista Home Premium, and 1 desktop running XP Home. ... the vista laptop can see all terminals on the work group but the xp terminals cannot see the vista terminal in the network. ... Problems sharing files between computers on a network are generally caused by 1) a misconfigured firewall or overlooked firewall; or 2) inadvertently running two firewalls such as the built-in Windows Firewall and a third-party firewall; and/or 3) not having identical user accounts and passwords on all Workgroup machines; 4) trying to create shares where the operating system does not permit it. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Networking Question
    ... My question is how can i network the laptop with my computer using ... Sharing in Vista. ... Problems sharing files between computers on a network are generally caused ... by 1) a misconfigured firewall or overlooked firewall (including a stateful ...
    (microsoft.public.windowsxp.general)
  • Re: Simple Printer Sharing/Networking Question
    ... Both of these printers are connected directly to one of these desktop computers, ... We have turned on sharing for the network printers but they don't appear on 2 of the computer's networks options. ... Problems sharing files between computers on a network are generally caused by 1) a misconfigured firewall or overlooked firewall; or 2) inadvertently running two firewalls such as the built-in Windows Firewall and a third-party firewall; and/or 3) not having identical user accounts and passwords on all Workgroup machines; 4) trying to create shares where the operating system does not permit it. ...
    (microsoft.public.windowsxp.network_web)
Loading