Forum Home
Press F1
Thread ID: 132193	2013-05-10 01:37:00	Another user is still logged on to this computer???	Billy T (70)	Press F1

Post ID	Timestamp	Content	User
1340528	2013-05-10 01:37:00	Hi Team I've been doing some maintenance work on Billy Jnr's computer, which is now used only by Mrs T, and a couple of days ago there was a warning on her Gmail that somebody in Tunisia was trying to access the computer, so we changed the password, but got the same message again yesterday, so we changed it again. I had previously run a routine scan with Spybot and MWB, with both picking up a single problem each. Spybot dealt with the first one, which sounded innocuous, and MWB had quarantined the second which had a name like Agent4 or very similar. Last night we got the same Tunisia warning again from Gmail, so we changed the Gmail password yet again, and since the computer had been acting a bit clunky for quite some time I decided to do some housekeeping. I ran full scans with MSE, the online version of Nod32, then Spybot and MWB, then I emptied the temp file and defragged the disk. It is working a lot better after that, but when I shut it down, it tells me that there is somebody else logged on and asks if I wish to continue. It has been doing that for some time actually, but I wasn't concerned because there had been no apparent problems and since I was shutting down, it was going to terminate the connection anyway. Now I think I should try to find out who or what is allegedly still logged on after I have logged out, but I don't have a clue where to start looking. The two computers are not networked, but they are both connected to the net via a NAT Router with a very strong password, and Shields Up has always given the system a clean bill of health as well. OS is XP Pro, and any insights or advice would be welcome. Cheers Billy 8-{)	Billy T (70)
1340529	2013-05-10 02:31:00	If you go into the Control Panel / users Accounts, apart from the Guest how many other accounts are showing.	wainuitech (129)
1340530	2013-05-10 02:58:00	If you open up the Task Manager (right click the task bar or CTRL+ALT+DEL), click on the Users tab it should show you the logged on users.	WarNox (8772)
1340531	2013-05-10 03:22:00	Are you sure they were not trying to enter Gmail i would change that password	gary67 (56)
1340532	2013-05-10 03:56:00	If you go into the Control Panel / users Accounts, apart from the Guest how many other accounts are showing. Thanks WT. There were only two accounts, Mrs T's and his (with administrator rights) but the guest account was open, so I have closed it. Hopefully that will be the end of it. We left rellies staying here while we were in Oz at Xmas, and they were less than cooperative on a number of fronts. A few days before we left, I came back from a job and found one of them in my office trying to use my colour laser to print a heap of personal stuff. I locked my office, but left them with guest access for emails on Billy Jnr's computer, so maybe I didn't get it right, or perhaps they fiddled with it. When I shut it down tonight I'll soon know if it is OK or not. Cheers Billy 8-{)	Billy T (70)
1340533	2013-05-10 04:00:00	Hopefully its sorted it Billy -- you have to remember - No ones touched anything -- Honest ;)	wainuitech (129)
1340534	2013-05-10 04:02:00	If you go into the Control Panel / users Accounts, apart from the Guest how many other accounts are showing. Wai, had a bit of trouble with GMail here. Notice there is a ASP.NET in the Users Account, Dr Google states it's a Microsoft facility, should it be deleted if possible ?. Thanks, Lurking.	Lurking (218)
1340535	2013-05-10 04:05:00	I think they were trying to enter Gmail, that was the gist of the Gmail alert so far as I was concerned, and to crack the changed password would not have been hard, Mrs T only changed the location of two numbers. It now has an alphanumeric password that is quite different. One of the reasons I leave my computers off at night is because the bad guys on the other side of the World probably start up in the early hours of our morning, so their opportunities to work on stuff in our time zone is limited. It wouldn't stop the pro's but it might slow down the wannabe's. Cheers Billy 8-{)	Billy T (70)
1340536	2013-05-10 07:25:00	They are not trying to get into your PC. They are trying to access your account on googles server. Your PC being on or off makes no difference.	fred_fish (15241)
1340537	2013-05-10 09:40:00	Billy, Are you sure Billy Junior isn'r still using his PC from some far away place! However, at the RUN prompt enter: control userpasswords2 and you will see the list of users including the odd ones setup by the installer (and maybe by the cleaning lady, visiting plumber and half a dozen relies). Installers may have set up an access so that they can respond to your service call remotely - sometimes they don't bother to tell you about it - it should be on the basis that you have to be there to agree to remote access. Take care while in the depths of user control as a false step may plunge you into the darkest abyss - or no access! I suggest Google 'control userpasswords2' or 'How to find hidden users'. And yes, once a pirate has stolen your current gmail password he/she doesn't need your computer, until you change the password again.	coldot (6847)
1 2