How should I address Security Failure Audits in Windows XP that are associated with loss of network connection and possible memory leaks?
Posted on 2004-11-07
My daughter has a Dell Inspiron 8100 laptop running Windows XP Home. It became very slow and started freezing up due to spyware I think. I ran AdAware and Spybot to get rid of lots of spyware. The computer rans faster now, but I still have a problem. After rebooting the computer, it will run about an hour and then the Event Viewer for Security starts showing "Failure Audits." I get event ID 529, "unknown user name or bad password". It shows the User Name and Domain as me and my computer. It also shows: , "Logon Type 2, Logon Process Advapi; Authentication Package: Negotiate"
I get a Failure Audit Event ID 680 which shows the User as the "NT Authority/System" on the local computer. It shows "Logon attempt by MICROSOFT_AUTHENITCATION_pACKAGE_V1_0."
I also get Failure Audit Event ID 615 that shows the category "Policy Change" and the User as 'NT/AUTHORITY/NETWORK SERVICE." It further states that IPSEec Services failed to get the complete list of network interfaces on the machine."
When these audit failures occur, I get a temporary loss of my network connection for up to about a minute. Then within another half hour or so, programs on my computer begin hanging up or not responding.
What should I do to address this problem? FYI, I have run the latest Norton Antivirus and my system appears clean. Do I even need IPSEC running on my computer if I'm not operating a VPN?