Error » Error News and Info » Knowledge Base » Strange Event Log, Possible serivce exploit?

Knowledge Base Most common error and how to trouble shoot them off

Post New Thread Reply
  Strange Event Log, Possible serivce exploit?
LinkBack Thread Tools Display Modes
Old 29-Mar-2007, 05:11 AM   #1 (permalink)
Fixed Error!
 
Iphone's Avatar

Posts: 4,202
Join Date: Mar 2007
Rep Power: 6 Iphone is on a distinguished road

IM:
Default Strange Event Log, Possible serivce exploit?

Im running windows 2003 server, All up to date with tomcat web service.
I rebooted my web server this morning due to an application hanging. When i rebooted and looked in my system event viewer i noticed some printer events, which i thought to be strange because I didnt install any printers on this server. Anyways, when i looked at them they were clearly not printers on my network. I think its either someone or something trying to exploit or exploiting the printer service. I do play world of warcraft and when i say ironforge and azeroth i thought i might be losing it because those are from the game. Any thoughts?

Event Type: Information
Event Source: Print
Event Category: None
Event ID: 9
Date: 2/20/2007
Time: 9:23:50 AM
User: NT AUTHORITY\SYSTEM
Computer: XXXXXX
Description:
Printer RICOH Aficio 650 PCL 6 on GONDOR (from AZEROTH) in session 1 was set.

For more

information, see Help and Support Center at Events And Errors Message Center: Basic Search.


Event Type: Information
Event Source: Print
Event Category: None
Event ID: 2
Date: 2/20/2007
Time: 9:23:50 AM
User: NT AUTHORITY\SYSTEM
Computer: XXXXXXX
Description:
Printer RICOH Aficio 650 PCL 6 on GONDOR (from AZEROTH) in session 1 was created.

For more

information, see Help and Support Center at Events And Errors Message Center: Basic Search.


Event Type: Warning
Event Source: TermServDevices
Event Category: None
Event ID: 1108
Date: 2/20/2007
Time: 9:23:50 AM
User: N/A
Computer: XXXXXXXXX
Description:
Configuration information for the RICOH Aficio 650 PCL 6 on GONDOR (from AZEROTH) in session

1 printer could not be restored.

For more information, see Help and Support Center at

Events And Errors Message Center: Basic Search.
Data:
0000: 0c 00 00 00 72 0f 00 00 ....r...

Event Type: Information
Event Source: Print
Event Category: None
Event ID: 9
Date: 2/20/2007
Time: 9:23:51 AM
User: NT AUTHORITY\SYSTEM
Computer: XXXXXX
Description:
Printer RICOH Aficio 650 PCL 6 on GONDOR (from IRONFORGE) in session 1 was set.

For more

information, see Help and Support Center at Events And Errors Message Center: Basic Search.


Event Type: Information
Event Source: Print
Event Category: None
Event ID: 2
Date: 2/20/2007
Time: 9:23:51 AM
User: NT AUTHORITY\SYSTEM
Computer: XXXXXXXXX
Description:
Printer RICOH Aficio 650 PCL 6 on GONDOR (from IRONFORGE) in session 1 was created.

For

more information, see Help and Support Center at Events And Errors Message Center: Basic Search.


Event Type: Warning
Event Source: TermServDevices
Event Category: None
Event ID: 1108
Date: 2/20/2007
Time: 9:23:51 AM
User: N/A
Computer: XXXXXXXX
Description:
Configuration information for the RICOH Aficio 650 PCL 6 on GONDOR (from IRONFORGE) in

session 1 printer could not be restored.

For more information, see Help and Support Center

at Events And Errors Message Center: Basic Search.
Data:
0000: 0c 00 00 00 72 0f 00 00 ....r...


Event Type: Error
Event Source: TermServDevices
Event Category: None
Event ID: 1111
Date: 2/20/2007
Time: 9:23:52 AM
User: N/A
Computer: XXXXXXXX
Description:
Driver HP Color LaserJet 4600 PCL 6 required for printer !!GONDOR!HP Color LaserJet 4600 PCL

6 is unknown. Contact the administrator to install the driver before you log in again.

For

more information, see Help and Support Center at Events And Errors Message Center: Basic Search.
Data:
0000: 00 00 00 00 12 0d 00 00 ........


Event Type: Error
Event Source: TermServDevices
Event Category: None
Event ID: 1111
Date: 2/20/2007
Time: 9:23:52 AM
User: N/A
Computer: XXXXXXXX
Description:
Driver hp LaserJet 1300 PCL 6 required for printer !!GONDOR!Executive 1300n is unknown.

Contact the administrator to install the driver before you log in again.

For more

information, see Help and Support Center at Events And Errors Message Center: Basic Search.
Data:
0000: 00 00 00 00 12 0d 00 00 ........

Event Type: Warning
Event Source: Print
Event Category: None
Event ID: 8
Date: 2/20/2007
Time: 9:25:25 AM
User: NT AUTHORITY\SYSTEM
Computer: XXXXXXXX
Description:
Printer RICOH Aficio 650 PCL 6 on GONDOR (from AZEROTH) in session 1 was purged.

For more

information, see Help and Support Center at Events And Errors Message Center: Basic Search.


Event Type: Warning
Event Source: Print
Event Category: None
Event ID: 4
Date: 2/20/2007
Time: 9:25:25 AM
User: NT AUTHORITY\SYSTEM
Computer: XXXXXXXXX
Description:
Printer RICOH Aficio 650 PCL 6 on GONDOR (from AZEROTH) in session 1 is pending deletion.

For more information, see Help and Support Center at

Events And Errors Message Center: Basic Search.


Event Type: Warning
Event Source: Print
Event Category: None
Event ID: 3
Date: 2/20/2007
Time: 9:25:25 AM
User: NT AUTHORITY\SYSTEM
Computer: XXXXXXXXXX
Description:
Printer RICOH Aficio 650 PCL 6 on GONDOR (from AZEROTH) in session 1 was deleted.

For more

information, see Help and Support Center at Events And Errors Message Center: Basic Search.


Event Type: Warning
Event Source: Print
Event Category: None
Event ID: 8
Date: 2/20/2007
Time: 9:25:25 AM
User: NT AUTHORITY\SYSTEM
Computer: XXXXXXXX
Description:
Printer RICOH Aficio 650 PCL 6 on GONDOR (from IRONFORGE) in session 1 was purged.

For more

information, see Help and Support Center at Events And Errors Message Center: Basic Search.


Event Type: Warning
Event Source: Print
Event Category: None
Event ID: 4
Date: 2/20/2007
Time: 9:25:25 AM
User: NT AUTHORITY\SYSTEM
Computer: XXXXXXXXX
Description:
Printer RICOH Aficio 650 PCL 6 on GONDOR (from IRONFORGE) in session 1 is pending

deletion.

For more information, see Help and Support Center at

Events And Errors Message Center: Basic Search.


Event Type: Warning
Event Source: Print
Event Category: None
Event ID: 3
Date: 2/20/2007
Time: 9:25:25 AM
User: NT AUTHORITY\SYSTEM
Computer: XXXXXXXXX
Description:
Printer RICOH Aficio 650 PCL 6 on GONDOR (from IRONFORGE) in session 1 was deleted.

For

more information, see Help and Support Center at Events And Errors Message Center: Basic Search.
Iphone is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit!
Reply With Quote
   


   
Post New Thread Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


All times are GMT -8. The time now is 05:15 PM.

Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.2.0

DMCA Policy

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227