Event Log Shows Guest Account & dopus.exe

Help & Support
1

I have Audit Failures in my Security Event Log that shows dopus.exe try to use the Guest account. Do you know why is this occurring? I reinstalled Windows last week, so all the software hasn't been reconfigured.

An account failed to log on.

Subject:
Security ID: TerminalB-PC\kahlil
Account Name: kahlil
Account Domain: TerminalB-PC
Logon ID: 0x245EE

Logon Type: 3

Account For Which Logon Failed:
Security ID: NULL SID
Account Name: Guest
Account Domain: TerminalB-PC

Failure Information:
Failure Reason: Account currently disabled.
Status: 0xC000006E
Sub Status: 0xC0000072

Process Information:
Caller Process ID: 0x2d90
Caller Process Name: C:\Program Files\GPSoftware\Directory Opus\dopus.exe

Network Information:
Workstation Name: TerminalB-PC
Source Network Address: -
Source Port: -

2

It's not something Opus does explicitly, but it sounds like it can happen when a program (any program, not just Opus) tries to access files which are permissioned for Everyone (but, presumably, not the current user, although the details are vague):

http://forum.ultimatewindowssecurity.com/Topic5221-168-1.aspx

If you can work out which folder you access to trigger the issue, you'll most likely see the same thing from explorer.exe as well, if you access the same folder from it.