windows 8.1 is executing winsat.exe automatically even though its disabled in task scheduler. When Checking event viewer security logs it tells me someone logged into my computer even though I was already logged in but idle and executed winsat.exe. Is this normal or is someone logging into my computer remotely? I have multiple logins and special logins in my Log and logoffs when i did not logoff.
Code:
Audit Success 6/29/2014 5:29:03 PM Microsoft Windows security auditing. 4616 Security State Change
Audit Success 6/29/2014 5:03:25 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 5:03:25 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 2:13:16 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 2:13:16 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 2:03:54 PM Microsoft Windows security auditing. 4634 Logoff
Audit Success 6/29/2014 2:03:54 PM Microsoft Windows security auditing. 4634 Logoff
Audit Success 6/29/2014 2:00:18 PM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 2:00:18 PM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 2:00:18 PM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 2:00:18 PM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 2:00:15 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 2:00:15 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 2:00:15 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 2:00:15 PM Microsoft Windows security auditing. 4648 Logon
Audit Success 6/29/2014 2:00:07 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 2:00:07 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 2:00:07 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 2:00:07 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 2:00:07 PM Microsoft Windows security auditing. 4648 Logon
Audit Success 6/29/2014 2:00:06 PM Microsoft Windows security auditing. 4647 Logoff
Audit Success 6/29/2014 12:55:51 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 12:55:51 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 12:43:02 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 12:43:02 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 12:43:02 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 12:43:02 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 12:16:13 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 12:16:13 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:20:53 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:20:53 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:19:04 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:19:04 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:09:04 AM Microsoft Windows security auditing. 6406 Other System Events
Audit Success 6/29/2014 11:07:59 AM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 11:07:59 AM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 11:07:59 AM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 11:07:59 AM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 11:07:57 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:57 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:56 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:56 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:56 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:56 AM Microsoft Windows security auditing. 4648 Logon
Audit Success 6/29/2014 11:07:50 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:50 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:48 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:48 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:45 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:45 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:45 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:44 AM Microsoft Windows security auditing. 5024 Other System Events
Audit Success 6/29/2014 11:07:44 AM Microsoft Windows security auditing. 5033 Other System Events
Audit Success 6/29/2014 11:07:44 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:44 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4648 Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4624 Logon
Last edited by a moderator:
My Computer
System One
-
- OS
- windows 8.1
- Computer type
- PC/Desktop