Being hacked, or Windows error??

[fizzy_drink]

Hello.

A friend of mine has a question which I can't answer, can you help please?

Hey Omz
How are you doing? Hope all is well with you...

I have a quick question to ask you - for the past couple of evenings when I've gone to shut down my computer I have received a message to say that there are other users logged on to my computer - what other users? I ask myself! Is it possible that someone is logging onto my broadband remotely, and if so, how do I stop them?

Speak soon

Susie xxx

I talked her through disabling all other accounts, including the guest account: No joy.

 

[Final Maxim]

is she connected via a router?

how many networks does she have up?

is the network she connects to passworded?

 

[jimmy_mac]

Is it wireless?

^^ another question.

 

[Final Maxim]

i wanna be smart like you

 

[G_F]

Terminal services and Windows file sharing via Lan can cause this. Shut down all shares.

Also, check in task manager that only one instance of Explorer.exe is there, any more indicates multiple logged in users = bad.

 

[Maxx]

Sounds like shes got wireless and other people are using her network

 

[fizzy_drink]

Ta for the replies.

I'll pass on the questions, and see what I can find out.

 

[Mike_182]

I talked her through disabling all other accounts, including the guest account: No joy.

If she's getting that message when the other accounts are disabled, it's either a random message from a buggered OS, or she's got file sharing set up and people have drives mapped which will also cause that message.

May be other instances but as long as the only account that is enabled is hers then nobody will be able to open another session on there as a) in client versions of windows you can only have EITHER a local or a remote session and b) you can only use a local account once, so even if for some reason she'd got TS licenses on her machine they'd still need a valid login for the computer which wasn't already in use locally.

 

[KDF]

Sounds like shes got wireless and other people are using her network

Not if she had a wireless router. Its more likely to be file sharing or terminal services as mentioned above as that is the error they throw up when someone has mapped a drive to their computer etc.

 

[fizzy_drink]

Here's the reply I got:

Hi

I am connected to Orange broadband services in France using a 'Livebox' - a temperamental piece of technology that is the standard for using ADSL in France. I am not connected to any other network.

My computer is physically connected to the livebox, partly because I am mistrustful of wireless, and partly because I couldn't get the wireless dongle to work.

I only file share through AIM, which is accessible by password, and has not been logged on either time when I have received the message that other people are using my computer. There is currently only one instance of explorer showing up on Task Manager.

Thanks for all the advice!

Susie

 

[G_F]

http://filehippo.com/download_zonealarm_free/

 

[sn00p]

Control Panel/Administrative Tools/Computer Management

Then in the tree:

Shared Folders
Sessions <- click on this.

Should show who is connected to what share.

 

[Final Maxim]

yeah ide probably give zone alarm a try too, then anytime someone tries to access something incoming or outgoing she'll get a box pop and and ultimatly find out what it is thats doing this.