Re: PASSWORDS

From: Michael Solomon \(MS-MVP\) (user_at_#notme.com)
Date: 01/19/05


Date: Wed, 19 Jan 2005 12:43:11 -0800

There could be all kinds of ways he might have done this but given that he
was trying to show you that you could not stop him from entering your user
account and it appears he knows you wish to stop such access, the most
logical way for him to have done this would be to have installed a keylogger
program on your system.

Most firewalls won't detect a keylogger but they will detect if a keylogger
is trying to send information to whomever installed the keylogger. If you
have a firewall installed, check the logs for suspicious activity. If you
don't see any it may only mean the firewall has cleaned the logs for that
period so now you should be checking the firewall logs daily for any such
activity.

You may find more information about key loggers and how to determine if one
is installed on your system by doing a search on keyloggers on Google.

Also, there is a hidden administrator account in XP and it is called
"Administrator." Most users don't assign a password for this account, many
don't even know it exists. If your mate knows about, he could log on to
that account and while he couldn't open your files, he might have been able
to see first and last files in the folder you specified. After all, they
were in "My Shared Documents" which tells the system these docs can be
shared.

-- 
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/
"clitlicker46" <clitlicker46@discussions.microsoft.com> wrote in message 
news:070269E3-6CB2-4337-9192-BF52C56E4C43@microsoft.com...
>I hate people touching my computer so I put a password on the one and only
> user account, mine. However my mate stayed in the computer room last night
> and when I woke up this morning he listed the name of the first and last
> files in "My Shared Documents" I dont have guest enabled on the computer 
> so I
> would like to know 1. How he got in because theres no way he guessed the
> password and 2. How can i stop him getting in again?
>
> please help
>
> clitlicker46