XP oddballness - Network / Other

[gopher_yarrowzoo]

Okay machine at work has 2 nic's - both similar ip addresses for simplicity really.
1 connects to a LAN where all the web traffic is routed in/out via cisco firewall kit and via content filtering system "Websense" the onto ADSL link, 2nd nic is direct into our own ADSL link, DHCP Off on both, fixed IP's.
Power Saving - Always on, nothing to turn off.

Now I left on Friday at 5, yeah I was working friday - lucky me! Now I left NIC 1 as normal - disabled, NIC 2 enabled so we aren't using anyone else's bandwidth now can someone please explain HOW the following could happen...
NIC 1 - enabled - all traffic routing via here which is BAD as we stream video 24/7 from a remote site.
NIC 2 - disabled - DHCP off and IP reset to 192.168.0.1 no gateway / subnet
Power Saving - Turn off Monitor after 20 minutes.

Oh and a corrupt Application Event Log.

Anyone any freaking ideas, I've removed the network lead from NIC 1 and reset the power saving to what it should be.

[IronBits]

Power failure, reverted to last known state from previous reboot.

[gopher_yarrowzoo]

But it's been rebooted several times with this setup intact can't see wtf it would suddenly do that...
Unless someone was trying to access the internet who isn't me. The other nic has internet access via a password system, so I might be able to get a look at that on the QT although I suspect I won't get anywhere.

[Shish]

Hardware disconnect always better, ie pull the plug out. Bit bolting the stable door I know but...
Main culprit has to be someone else trying to get on www but could also be a reboot due to system failure and last setup being used after some file corruption due to brownout/very short power poof whatever. Get at log files and check all you can get at, but I would ask around and see if anyone may have had legitimate reason (or not) to use your sys and didn't know or forgot to change things back. Would have to be someone who knew a little about your setup.

[gopher_yarrowzoo]

Well the Application Event Log was corrupted couldn't see beyond 21st and it was full of google updater trying to update - it's in FF3 so that's now been disabled..
It's not my machine exactly more one we run for 1 reason and 1 reason only to remote view a set of cameras on a site for a customer.
Now I know for a fact that well 2 of the guys, just know how to restart the software / computer and how to move the cameras and that's it, a third has a bit more savvy but wouldn't touch anything as she doesn't do tech - I mean her new Ipod is beyond her, the last guy well he's tech savvy so he'd be the main suspect will ask him when I see him... I don't mind the internet access it's the fact it's the other link which was in danger of being cut off due to excessive bandwidth usage.... 24/7 x multiple camera streams using java based software..
Yeah let's just say I've seen worse software...