[Laura.B]

Hi guys,
I have been getting heaps of entries in my event viewer showing Anonymous Logons from another computer (hooked up to the same router). I know which computer it is and who uses it, but I don't know how to investigate. The Logons occur at set time intervals so I'm thinking it's some kind of spyware that is sending the culprit's computer activity data.

It's all just a theory though. Any ideas?

[lunarlander]

see if this thread helps:

http://www.dslreports.com/forum/rema...ty,1~mode=flat

[Laura.B]

Yeah I've read through that post but it doesn't exactly match my problem. While I do have a lot of ANONYMOUS logons which seem to be quite innocuous, i.e. standard XP Home procedure, a number of logons don't have the user listed as "NT AUTHORITY\ANONYMOUS LOGON" as stated by the other thread owner.

My events are recorded with the user ID as the computer name of the other computer on the LAN. So I'm thinking it's that computer that is logging into my PC. It doesn't help that you can't access the Group Policy editor on XP Home...according to my knowledge.

[lunarlander]

I am guessing - I think the other computer is logging on anonymously to list your folder shares, if you have any.

[Laura.B]

Nope, no folder shares. If you had access to this person's computer, what would you do to find out?