System: XP Pro x64 Edition

[OCD]

Hi joselepiu,

in regards to the anonymous logons...

i think that that says that my computer is indeed infected with something unless that is normal...

Could you cut and paste an anonymous logon message (click the little copy button after double clicking the event)

Are you on a network?

"Some network applications use the ANONYMOUS LOGON process to create a communication channel with your computer. Anonymous logon means that it is a null session. NT Auth/Anonymous is just a pseudonym for a Null Session. The NTAuth/Anonymous isn't really an account; it just means that no credentials were supplied. There are many conditions known to cause a null session connection which makes it difficult to tell the exact cause of these particular events. "

[joselepiu]

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 8/23/2014
Time: 7:58:50 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: DJ-RAC-PUTTER
Description:
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x1437E)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name:
Logon GUID: -
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

[joselepiu]

forgot to answer your question...

im not in any network...

[OCD]

forgot to answer your question...

im not in any network...

How do you connect to the internet?
Who is you ISP?

[joselepiu]

my isp provider is century link...

and i get dsl...

[OCD]

Hi joselepiu,

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 8/23/2014
Time: 7:58:50 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: DJ-RAC-PUTTER
Description:
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x1437E)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name:
Logon GUID: -
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -

An excerpt from the information I previously provided:
"The NTAuth/Anonymous isn't really an account; it just means that no credentials were supplied."

my isp provider is century link...

and i get dsl...

This type of connection is considered a network.

So these entries appear to be legitimate, and not malware related as you suspected.

[joselepiu]

ok thanks...

is there any other place i can get help for the problem?...

what do you recommend?...

[OCD]

Hi joselepiu,

There is another forum that I volunteer at that has a Tech Team that might be able to help with your issues.

Go to WhatTheTech.com you will need to create an account, the start a new thread in the General Hardware Forum.

Give a brief description of the problem along with a link to this thread so the Tech Team helper can see what we have done already.
Also, let them know that the thread is at Safer-Networking Forum

Include this link in your post:http://forums.spybot.info/showthread...ro-x64-Edition

[joselepiu]

i will do that...
thanks for all your help...

[OCD]

You're very welcome. Glad I was able to help.

Since this issue appears to be resolved ... this Topic has been closed.

If you still require help, please start a new topic and include fresh FRST and aswMBR logs, along with a link to your previous thread.

Please do not add any logs that might have been requested previously, you would be starting fresh.

Applies only to the original poster, anyone else with similar problems please start your own topic.