Windows 10: Event 4672 & 4624 & 5379 PC Freezing

Discus and support Event 4672 & 4624 & 5379 PC Freezing in Windows 10 BSOD Crashes and Debugging to solve the problem; I have had this for a while now but it seems to have gotten worse recently. My PC has been freezing (1-4 seconds every hour or so) and the only thing... Discussion in 'Windows 10 BSOD Crashes and Debugging' started by Ryan Olrod, Jan 20, 2019.

  1. Event 4672 & 4624 & 5379 PC Freezing


    I have had this for a while now but it seems to have gotten worse recently. My PC has been freezing (1-4 seconds every hour or so) and the only thing that I can tie in is these Events happening at the same time as the freeze all the time.


    Events 4672 (Special privileges assigned to new logon) and 4624 (An account was successfully logged on) happen together 3 times and Event 5379 (Credential Manager credentials were read) happens 9 times and i'm positive this is what is causing this.


    Anyone have any thoughts as to why this causes a lockup?

    :)
     
    Ryan Olrod, Jan 20, 2019
    #1

  2. Events 4672 & 4624 ARE NOT A PROCESS -THEY ARE KILLING MY NEW PC

    Please don't BS me ... the events 4672 & 4624 are always logging in and it's much more then a process. The so called process has

    shut down crucial services. Deleted my account three times ... stolen the registry SAMS Keys and completely reconfigured the registry to fail .. and that's just today. There are no virus's or unusual IP's showing. They are truly logging in. This is not
    a joke. I believe they are administrators of 1-5-31-545 .. 1-5-32-549 .. S-1-32-551 the list has 42 members. They have also created groups with memberships, turned on file sharing and locked my setting with the AppLocker App. I have reinstalled windows
    three times today and reset it twice since yesterday. When I say reset, I mean completely wiping the drive. They are logging in while the computer is doing the last minute tweaks. How do I block theses A-H...s? I've been at this 24 plus hours w/no sleep.
    Is this part of their job? If so it illegal ( Hello Microsoft) Wake up!!! I know for a fact others have complained and I KNOW windows is aware of this behavior. It's not easy to access a PC offline which does limit the potential prospects. Now my questions
    is " HOW DO I BLOCK THESE SO CALLED ADMINISTRATORS" ? I spoke to a Federal Agent today who had an interesting solution ... However, blocking them might be quicker. I'm not sure, I'm still think?? Can someone please step-up and help solve this problem.
    Maybe point me in the right direction. There should be a way to lock them out, considering THIS IS TOTALLY ILLEGAL. In the past two days I've tried everything readily available in the search engines. I think need something a little more advanced w/instructions.
    Any advice would help??

    Last Question: Why are they employed?? Does anyone do a background check? From what I've read the hiring process appears to be knowledge based with a licensing fee. No background checks whatsoever. Maybe that's why the FEDS are so busy?? I don't know
    .. just guessing?? Anyways, Please reply & TY
     
    AnnaMichell, Jan 20, 2019
    #2
  3. lukeaar Win User
    Windows 10 - Alert Sound played every few minutes corresponding to Event ID 4624, 4672

    Every three-ish minutes, my windows 10 machine plays an alert sound. After annoying me for a couple of weeks, I've finally found that the sound corresponds to two Security events logged in the event viewer (I have replaced my computer name with COMPUTER_NAME).

    The first is a 4624 Logon event as follows:

    An account was successfully logged on.

    Subject:

    Security ID: SYSTEM

    Account Name: COMPUTER_NAME$

    Account Domain: WORKGROUP

    Logon ID: 0x3E7

    Logon Information:

    Logon Type: 5

    Restricted Admin Mode: -

    Virtual Account: No

    Elevated Token: Yes

    Impersonation Level: Impersonation

    New Logon:

    Security ID: SYSTEM

    Account Name: SYSTEM

    Account Domain: NT AUTHORITY

    Logon ID: 0x3E7

    Linked Logon ID: 0x0

    Network Account Name: -

    Network Account Domain: -

    Logon GUID: {00000000-0000-0000-0000-000000000000}

    Process Information:

    Process ID: 0x2f8

    Process Name: C:\Windows\System32\services.exe

    Network Information:

    Workstation Name:

    Source Network Address: -

    Source Port: -

    Detailed Authentication Information:

    Logon Process: Advapi

    Authentication Package: Negotiate

    Transited Services: -

    Package Name (NTLM only): -

    Key Length: 0

    The second 4672 event is as follows:

    Special privileges assigned to new logon.

    Subject:

    Security ID: SYSTEM

    Account Name: SYSTEM

    Account Domain: NT AUTHORITY

    Logon ID: 0x3E7

    Privileges: SeAssignPrimaryTokenPrivilege

    SeTcbPrivilege

    SeSecurityPrivilege

    SeTakeOwnershipPrivilege

    SeLoadDriverPrivilege

    SeBackupPrivilege

    SeRestorePrivilege

    SeDebugPrivilege

    SeAuditPrivilege

    SeSystemEnvironmentPrivilege

    SeImpersonatePrivilege

    It seems that this is a service running every couple of minutes. Why am I getting an alert sound every time? I can't find anything in Task Scheduler to explain these events.

    Instead of just muting sounds and ignoring it, I'd like to fix the problem properly. Any thoughts?
     
    lukeaar, Jan 20, 2019
    #3
  4. Event 4672 & 4624 & 5379 PC Freezing

    dell insperation 5379

    i have an insperation 5379 and i was wondering if it has keyboard backlighting and if it does how do i find it?
     
    sezzasezza, Jan 20, 2019
    #4
Thema:

Event 4672 & 4624 & 5379 PC Freezing

Loading...
  1. Event 4672 & 4624 & 5379 PC Freezing - Similar Threads - Event 4672 4624

  2. event id 4624

    in Windows 10 BSOD Crashes and Debugging
    event id 4624: Shutting down sky-rim, this event claims to be for old versions of windows why is it running and why is it shutting down my game? Also how do I stop it I'm running win 10 home? also 4672....
  3. Continuous freezing - event viewer showing floods of 5379 as well as periodic 4672, 4624, 4798

    in Windows 10 BSOD Crashes and Debugging
    Continuous freezing - event viewer showing floods of 5379 as well as periodic 4672, 4624, 4798: Processor: IntelR CoreTM i3-2350M CPU @ 2.30GHz 2.30 GHz 64-bit operating system, x64-based processor RAM: 8.00 GB Edition: Windows 10 Home Version: 20H2 OS Build: 19042.662 Experience: Windows Feature Experience Pack 120.2212.551.0 My 2012 HP G6-series laptop has...
  4. Event Viewer Spam Causing PC Stutter - Events 5379, 4624, 4672 -- Security Audits

    in Windows 10 Ask Insider
    Event Viewer Spam Causing PC Stutter - Events 5379, 4624, 4672 -- Security Audits: [ATTACH] Hi, Since getting my new PC, I have experienced these instances of noticeable stutter when browsing, gaming, or simply being on the desktop. The best way to describe it is as a very brief but noticeable micro-stutter/micro-freeze, the screen does not flash and...
  5. Event Viewer Spam Causing PC Stutter - Events 5379, 4624, 4672 -- Security Audits

    in Windows 10 BSOD Crashes and Debugging
    Event Viewer Spam Causing PC Stutter - Events 5379, 4624, 4672 -- Security Audits: Hi, Since getting my new PC, I have experienced these instances of noticeable stutter when browsing, gaming, or simply being on the desktop. The best way to describe it is as a very brief but noticeable micro-stutter/micro-freeze, the screen does not flash and audio does...
  6. Microsoft Windows Security Auditing Event 4624 Followed By Event 4672 Crashes Games

    in Windows 10 Gaming
    Microsoft Windows Security Auditing Event 4624 Followed By Event 4672 Crashes Games: I have recently been having an issue where I'll be playing Rainbow Six Seige and the game will close at random. When the game closes (when I'm in the middle of playing it) there is no crash report and no report in the Application section of Event Viewer. But, when I go to the...
  7. What is event 4672?

    in AntiVirus, Firewalls and System Security
    What is event 4672?: I've experienced some real interesting and worrying issues with my pc. It has taken over my life effected me psychologically and I feel as if in a virtual prison. I got 1903. What is going on?...
  8. Intermittent temporary freezes-Event Viewer shows dozens of event 5379

    in Windows 10 Performance & Maintenance
    Intermittent temporary freezes-Event Viewer shows dozens of event 5379: I'm having a tough time tracking down an issue with a new system. Occasionally, my system will freeze for a few seconds. The mouse will usually lock in place, but not always. In any case, the system doesn't register input. If audio was playing, the audio will glitch or loop....
  9. Intermittent temporary freezes-Event Viewer shows dozens of event 5379

    in Windows 10 Support
    Intermittent temporary freezes-Event Viewer shows dozens of event 5379: I'm having a tough time tracking down an issue with a new system. Occasionally, my system will freeze for a few seconds. The mouse will usually lock in place, but not always. In any case, the system doesn't register input. If audio was playing, the audio will glitch or loop....
  10. Events 4672 & 4624 Win 10 Freezes - special LOGON ?

    in AntiVirus, Firewalls and System Security
    Events 4672 & 4624 Win 10 Freezes - special LOGON ?: My window 10 machine continues to freeze for 5-30 seconds intermittently. [ATTACH] I am running with an boot drive on an M2 SSD, which seems to be a common thread of most people having this issue. I have already done the SFC scan, and the reset/validation of all...

Users found this page by searching for:

  1. event id 5379

    ,
  2. event id 5379 windows 10

    ,
  3. eventid 5379

    ,
  4. event id 4672 windows 10,
  5. crash to desktop on nt authority login EventID 4672 ,
  6. pc event id 5379,
  7. 4672 5339 4624,
  8. <EventID>5379</EventID>,
  9. event 4672 windows10,
  10. security events 4624.4672 5379,
  11. windows 10 event 5379 ????,
  12. what is microsoft windows 10 event id 5379 ,
  13. credential manager credentials were read freeze,
  14. what is event id 5379,
  15. fix event id 5379 desktop