advapi

[Sacramento]

I hope this is in the correct category, couldn't really decide where to put it. apologies if it's not in the right place.
In the management console under the security section, the event logger shows successful log-ons and log-offs, the properties of these mention a thing called advapi in the network service. I heard somewhere that this can be used to remotely read files etc. off this PC. Anyone know anything about this and how, if needed, I can get rid of it. I have a suspicion that someone is doing this. I keep getting, upon windows startup, extraneous user accounts appearing with different names.WTF is going on here folks?

Running XP pro with service pack 2

Any ideas, advice greatly appreciated.

Steve

[liaeb]

have a read through this;
http://www.authsecu.com/nntp/microso...ent-viewer.htm