Windows XP PRO Newbee Please help



Thomas Grassi
07-10-2005, 02:08 AM
Everytime I restart my PC running Windows XP PRO SP2 I get a lot of these
event messages

Event Type: Failure Audit
Event Source: Security
Event Category: Detailed Tracking
Event ID: 861
Date: 5/13/2005
Time: 8:40:07 PM
User: NT AUTHORITY\NETWORK SERVICE
Computer: TGKW001
Description:
The Windows Firewall has detected an application listening for incoming
traffic.

Name: -
Path: C:\WINDOWS\system32\svchost.exe
Process identifier: 908
User account: NETWORK SERVICE
User domain: NT AUTHORITY
Service: Yes
RPC server: No
IP version: IPv4
IP protocol: UDP
Port number: 1077
Allowed: No
User notified: No

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

It happens on several services at startup

First of all the Windows Firewall is not enabled I use McAfee's Firewall
program.

Any ideas

Thanks

Tom

MowGreen [MVP]
07-10-2005, 02:08 AM
> Description:
> The Windows Firewall has detected an application listening for incoming
> traffic.

>> First of all the Windows Firewall is not enabled I use McAfee's Firewall
>> program.
>>

Obviously, one of these statements is not correct. The SE log shows that
the Windows Firewall *is* on. Did you have the McAfee firewall running
when SP2 was installed or was it installed afterwards ?
You can ascertain whether the Windows Firewall is being loaded on
startup by opening the Services console and checking that the Startup
type has been set to Disabled.

MowGreen [MVP 2004-2005]
===============
*-343-* FDNY
Never Forgotten
===============

Thomas Grassi wrote:

> Everytime I restart my PC running Windows XP PRO SP2 I get a lot of these
> event messages
>
> Event Type: Failure Audit
> Event Source: Security
> Event Category: Detailed Tracking
> Event ID: 861
> Date: 5/13/2005
> Time: 8:40:07 PM
> User: NT AUTHORITY\NETWORK SERVICE
> Computer: TGKW001
> Description:
> The Windows Firewall has detected an application listening for incoming
> traffic.
>
> Name: -
> Path: C:\WINDOWS\system32\svchost.exe
> Process identifier: 908
> User account: NETWORK SERVICE
> User domain: NT AUTHORITY
> Service: Yes
> RPC server: No
> IP version: IPv4
> IP protocol: UDP
> Port number: 1077
> Allowed: No
> User notified: No
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> It happens on several services at startup
>
> First of all the Windows Firewall is not enabled I use McAfee's Firewall
> program.
>
> Any ideas
>
> Thanks
>
> Tom
>
>


Windows XP PRO Newbee Please help