Server security audit cleared by strange computer name

When I logon to a server today I noticed a messenger server pop up kind of
"Message from <kioskmachineonmynetwork> to "MyServer".

As a curiosity I checked the security audit all logs entried were cleared at
7:00AM, today.

The audit log was cleared:
Primary User Name:SYSTEM
Primary Domain: NT Authority
Primary logon ID:(0x0,0x3E7)
Client UserName: Administrator
Client Domain:DBDCH621
Client Logon ID: (0x0,0x656A)

At this time I already changed local admin password and rebooted the server,
ran AV scan.

Am I able to get any relevant information from the log description above ?
DBDCH621 client is totally unknown to me.

Sandi
Wed May 19 07:25:42 CDT 2004

Do you use a firewall?

--
Hyperlinks are used to ensure advice remains current
_______________________________________
Sandi - Microsoft MVP since 1999 (IE/OE)
http://inetexplorer.mvps.org/



Marlon Brown wrote:
> When I logon to a server today I noticed a messenger server pop up
> kind of "Message from <kioskmachineonmynetwork> to "MyServer".
>
> As a curiosity I checked the security audit all logs entried were
> cleared at 7:00AM, today.
>
> The audit log was cleared:
> Primary User Name:SYSTEM
> Primary Domain: NT Authority
> Primary logon ID:(0x0,0x3E7)
> Client UserName: Administrator
> Client Domain:DBDCH621
> Client Logon ID: (0x0,0x656A)
>
> At this time I already changed local admin password and rebooted the
> server, ran AV scan.
>
> Am I able to get any relevant information from the log description
> above ? DBDCH621 client is totally unknown to me.