Which of the following may be an indication of a possible system compromise