Re: need some help on this one

yes, Symnatec is installed on the server.

so anything with this: Advapi its a virus/trojan?
then why when I googled it I got some information that windows uses it for
its login?

how can i find out what exactly its trying to run and why wont' my antivirus
pick it up?




"Danny Sanders" <DSanders@xxxxxxxxxxxxxxx> wrote in message
news:emIcBgGrHHA.4300@xxxxxxxxxxxxxxxxxxxxxxx
It's a virus/trojan.


Do you have any Antivirus installed?



hth
DDS

"Mike" <Mike@xxxxxxxxxxxxxxxx> wrote in message
news:%23YW3VJFrHHA.3492@xxxxxxxxxxxxxxxxxxxxxxx
lets just start off by saying I'm a developer and no longer a
server admin BUT I'm doing some server admin work to help out.

Ok, on one of my Windows 2003 servers I keep getting this error in the
event viewer and I've done some research on it and I'm getting
information from spy ware, a virus to something Microsoft uses to even a
worm. Can anyone shed some light on this for me?

Logon Failure:
Reason: Unknown user name or bad password
User Name: testUSER
Domain: Bulldog
Logon Type: 4
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: FileSystemServerABCD01
Caller User Name: userName
Caller Domain: Bulldog
Caller Logon ID: (0x0,0x2990D)
Caller Process ID: 4076
Transited Services: -
Source Network Address: -
Source Port: -


For more information, see Help and Support Center at

any suggestions on what can be causing this? an update. patch, etc
anything?







.

Relevant Pages

  • Re: ISA SERVER NOT STARTING
    ... I delete the nat/basic firewall and stop and started the RRAS an tried to ... There were no critical events in the DNS Server Log in the last 24 hours. ... An error occurred during logon ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Event ID 529
    ... First is a hardware firewall that sits on the perimeter of your network and requires that your users give user names and passwords, different from those for the network. ... Sometimes the Logon Type is different, also the User Name can be ... Computer: <SERVER NAME> ... Caller User Name: $ ...
    (microsoft.public.windows.server.sbs)
  • Re: Another security question/issue.
    ... Time to audit your server and workstations with AV, Malware, and installed ... Logon Process: Advapi ... Caller User Name: servername$ ... Source Port: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Logon 529 Errors
    ... Default SMTP Virtual Server properties-Access tab-Relay ... Connection filtering is different from what inna is attempting, ... These are almost surely SMTP logon attempts, ... Caller User Name: DELLSERVER$ ...
    (microsoft.public.windows.server.sbs)
  • Re: Logon 529 Errors
    ... connection has been found on the black list, my DNS server ... Connection filtering is different from what inna is attempting, ... These are almost surely SMTP logon attempts, ... Caller User Name: DELLSERVER$ ...
    (microsoft.public.windows.server.sbs)