I have a stand-alone old PC that I don’t ever connect to the Internet or any other machine–just for home use. However, several times a day I get messages under Security in Event Viewer to the effect that Network Service logged on and certain events occured. For Anonymous Logon I get similar messages but only once or twice a day, usually hours after logging on myself.
I audit success and failure events from Local Security settings.
I use Comodo operating system firewall to deal with viruses etc from using USBs from the internet. I noticed that svchost.exe is often trying to access/enable RPC/ntvcs about every 10 minutes or so. Likewise, Explorer.exe is also doing this.
I have disabled everything connected with remote access and networking in services.
Why would this be happening?
Thank you.
