Ghost Logins

We have an NT based network (NT servers etc) but using Windows 98 clients.

Looking at the server event logs I find that alot of PCs are attempting to login when unattended mostly in to accounts not in use on the machine. Is this normal? or is it a virus?