Re: Hidden User Account Created By Disgruntled Room mate.

From: Jupiter Jones (jones_jupiter@hotnomail.com)
Date: 10/23/02 

From: "Jupiter Jones" <jones_jupiter@hotnomail.com>
Date: Wed, 23 Oct 2002 00:26:53 -0600

That all sounds normal and similar to mine.
Be sure you firewall is enabled, if unsure how, go to Help and Support
and look for "firewall".
Run an updated virus scan.
Run Ad-Aware:
http://www.webattack.com/get/adaware.shtml
You are probably OK though. 

--
Jupiter Jones
Please respond to newsgroup only.
Everyone can benefit from the message.
"cristina" <blondelatin2002@yahoo.com> wrote in message
news:481301c27a31$462b1550$39ef2ecf@TKMSFTNGXA08...
> Thanks for your quick response. i just did that (and have
> norton antivirus), and tweakui at logon gives me three
> options: parse autoexec.bat at logon (checked)
> show administrator (unchecked)
> and show cristina (eg me, the user) (checked).
> everything seems fine except for the first line. can you
> please let me know what autoexec.bat is? i cant even open
> the file b.c. i dont understand the suffix. thanks again
> for your help
>
> >-----Original Message-----
> >Go to Start/All Programs.
> >Click on Power Toys. then click Tweak UI
> >Click on Logon on the left side
> >Place checkmarks where you want.
> >If you do not have Power Toys:
> >http://www.microsoft.com/windowsxp/pro/downloads/powertoy
> s.asp
> >Run an updated virus scan.
> >Run Ad-Aware:
> >http://www.webattack.com/get/adaware.shtml
> >
> >--
> >Jupiter Jones
> >Please respond to newsgroup only.
> >Everyone can benefit from the message.
> >
> >
> >"cristina" <blondelatin2002@yahoo.com> wrote in message
> >news:93d801c27998$c0a342b0$2ae2c90a@phx.gbl...
> >> I am also concerned that someone has set up another
> user
> >> profile directly on my computer and/or can somehow
> access
> >> it remotely without my approval. I dont know what Tweak
> >> UI is or how to search for it on my hard drive. can you
> >> please provide more information on that and also some
> >> advice on how i can check to see if a program or
> profile
> >> has been set up on my computer without my knowledge? I
> am
> >> afraid my Windows XP firewall is pretty much useless.
> >> thank you
> >> >-----Original Message-----
> >> >I am not sure if Administrator access would
> constitute a
> >> weakness.
> >> >You gave him physical access and Administrator access,
> >> the weakness is
> >> >yours not Windows.
> >> >You probably have Tweak UI installed.
> >> >Open up Tweak UI.
> >> >Click on Logon on the left side.
> >> >Place checkmarks in all except Administrator (unless
> you
> >> want to see
> >> >Administrator at logon screen.)
> >> >You will probably see the other profiles your "friend
> >> created"
> >> >From there you can go to User Accounts in Control
> Panel
> >> and delete the
> >> >profiles you do not want.
> >> >
> >> >--
> >> >Jupiter Jones
> >> >Please respond to newsgroup only.
> >> >Everyone can benefit from the message.
> >> >
> >> >
> >> >"Kris Sangani Sangani" <kris.sangani@orange.net> wrote
> >> in message
> >> >news:u2DbvnXeCHA.1652@tkmsftngp09...
> >> >> Recently, while looking at a former room mate's
> >> document folder (who
> >> >I
> >> >> kicked out for not paying rent), I discovered an
> >> apparent hidden
> >> >user
> >> >> account with administrator privileges.
> >> >>
> >> >> I discovered this in the permissions for that
> >> particular folder. Its
> >> >name
> >> >> comprised a long string of letters and numbers.
> >> >>
> >> >> However, when I looked at the list of user accounts
> in
> >> the control
> >> >panel,
> >> >> its not there? I suspect my former room-mate (who
> had
> >> threatened to
> >> >plant a
> >> >> trojan), created this account.
> >> >>
> >> >> How do I remove it? Does anyone know about this
> >> weakness in Windows
> >> >XP?

Relevant Pages

  • Re: seeing another computer on a LAN
    ... I tried to change the user name from "User" to "Administrator" but got the message "An account named 'Administrator' already exists..." ... If you are able to see a user called Administrator on one of the machines in Regular Mode, ... create matching user accounts on both machines. ... Problems sharing files between computers on a network are generally caused by 1) a misconfigured firewall; or 2) inadvertently running two firewalls such as the built-in Windows Firewall and a third-party firewall; and/or 3) not having identical user accounts and passwords on all Workgroup machines; 4) trying to create shares where the operating system does not permit it. ...
    (microsoft.public.windowsxp.network_web)
  • Re: XP Media Center can see one of the users but not all
    ... Administrator and Owner are not used. ... You need to create user accounts and passwords that match on both computers. ... by 1) a misconfigured firewall or overlooked firewall (including a stateful ... Configure firewalls on all machines to allow the Local Area Network ...
    (microsoft.public.windowsxp.network_web)
  • Re: PASSWORD LOGON
    ... stupidly i thought if i got rid of my user accounts on XP i ... If Home, reboot into Safe mode, logon as "administrator" (likely no ... press CTRL+ALT+DEL twice at the welcome screen and logon as ... You can add the Dialog box that comes up when running control userpasswords ...
    (microsoft.public.windowsxp.general)
  • Re: ADMINISTRATOR PASSWORD
    ... I don't know what happened but I have not been able to logon and I am the only administrator. ... If you have forgotten your password, if you have another user account with administrative privileges you can log into that account and change your original user account's password from the User Accounts applet in Control Panel. ... If you don't have another account like this set up or don't have the password to it, you'll need to log into the built-in Administrator account. ...
    (microsoft.public.windowsxp.newusers)
  • Re: XP Home Instability & Odd Behavior
    ... >> before I'll have time to try this out, but I'm hopeful that this will ... new User Accounts, both with Admin privileges. ... files from the old to the new Logon, ... hardware firewall in place. ...
    (microsoft.public.windowsxp.general)