System: XP Pro x64 Edition

Status
Not open for further replies.
Hi joselepiu,

in regards to the anonymous logons...

i think that that says that my computer is indeed infected with something unless that is normal...
Click to expand...

Could you cut and paste an anonymous logon message (click the little copy button after double clicking the event)

Are you on a network?

"Some network applications use the ANONYMOUS LOGON process to create a communication channel with your computer. Anonymous logon means that it is a null session. NT Auth/Anonymous is just a pseudonym for a Null Session. The NTAuth/Anonymous isn't really an account; it just means that no credentials were supplied. There are many conditions known to cause a null session connection which makes it difficult to tell the exact cause of these particular events. "
 
Anonymous logon...

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 8/23/2014
Time: 7:58:50 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: DJ-RAC-PUTTER
Description:
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x1437E)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name:
Logon GUID: -
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
 
Hi joselepiu,

joselepiu said:
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 8/23/2014
Time: 7:58:50 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: DJ-RAC-PUTTER
Description:
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x1437E)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name:
Logon GUID: -
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -
Click to expand...

An excerpt from the information I previously provided:
"The NTAuth/Anonymous isn't really an account; it just means that no credentials were supplied."

joselepiu said:
my isp provider is century link...

and i get dsl...
Click to expand...

This type of connection is considered a network.

So these entries appear to be legitimate, and not malware related as you suspected.
 
Hi joselepiu,

There is another forum that I volunteer at that has a Tech Team that might be able to help with your issues.

Go to WhatTheTech.com you will need to create an account, the start a new thread in the General Hardware Forum.

Give a brief description of the problem along with a link to this thread so the Tech Team helper can see what we have done already.
Also, let them know that the thread is at Safer-Networking Forum

Include this link in your post:http://forums.spybot.info/showthread.php?70963-System-XP-Pro-x64-Edition
 
You're very welcome. Glad I was able to help. :bigthumb:

Since this issue appears to be resolved ... this Topic has been closed.

If you still require help, please start a new topic and include fresh FRST and aswMBR logs, along with a link to your previous thread.

Please do not add any logs that might have been requested previously, you would be starting fresh.

Applies only to the original poster, anyone else with similar problems please start your own topic.
 
Status
Not open for further replies.
Back
Top