Re: Constant Login/logoff events from machine account

From: Robob (Robob_at_discussions.microsoft.com)
Date: 11/14/04

  • Next message: Robob: "RE: Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'" 
    Date: Sun, 14 Nov 2004 10:24:04 -0800

    "Steven L Umbach" wrote:

    > Are these logon successes or failures? Is any user account identified even

    We are seeing this as well at a client WAN. It is multiple machines. The
    are successes. Even users who are not present are showing logn/logoff. In
    addition, we have had lots of stuff hitting the arp cache on one of the
    firewalls, indicative of scanning. This WAN has Symantec Corporate antivirus
    which appears to be up to date on the clients. I have also scanned and
    checked the Linux firewall where we saw the arp issue.

    New virus/trojan?

    Thanks,
    Robert A. Ober

  • Next message: Robob: "RE: Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'"