Hacking School

please visit 7effects.com

hi there... i'm no newbie to using event viewer, ... and typically it's an important tool for my daily assesment of what's going on with my XP computer. i realize, occasionally win XP will use the system account to log on and do routine maintenance. but have any of you ever seen win XP cite instances of 'guest' logging in and out? especially when the 'guest' account is disabled? ... upon waking this morning, i noticed all of this log on and log off activity which occurred while i was sleeping which was attributed to the guest account. if i look back in time in the even viewer, there are similar entries throughout, going back about three weeks at which point they are no longer present. it's always the same logon/logon entry and there is generally one other priviledged use entry coinciding with each logon/logoff entry. as said, my guest account is and has been disabled. the only *enabled* user account is my own, 'joel' account. here's a small snapshot of the general event viewer log from last night: ... IMAGE ... and the details for one of the 'guest' logins: ... IMAGE ... and the details for the 'guest' priviledged use instance: ... IMAGE ... anybody have any ideas? why would there be a 'guest' login when the 'guest' account is disabled? is this activity i should consider possibly to be hack related? maybe i should investigate further? ... more system details: - windows xp home: i use one single enabled user account and it is set as admin level. - my machine is one of three on a home network accessing the internet through DSL; connection is shared via a US Robotics Max G - i use latest version of zonealarm for firewall - i use latest version of AVG for virii protection - my machine connects to router/internet via a standard CAT 5 cable; i do not use wireless - at the time of the above incidents file sharing was enabled; i've since disabled - at the time of the above incidents, my computer/remote assistance was enabled; it's now disabled - remote access services are disabled; however, remote connection manager is enabled usb max 4G routher ... thanks in advance for any assistance ..



please visit 7effects.com