Re: Login screen

From: Alan Tyler (alan_tyler.remove@thisSPAM.btopenworld.com)
Date: 04/18/03


From: "Alan Tyler" <alan_tyler.remove@thisSPAM.btopenworld.com>
Date: Fri, 18 Apr 2003 14:42:02 +0100


<re-sorted for continuity>
> "Steve" <sverdee@optonline.net> wrote in message
> news:T8tma.62010$Xd1.22533668@news4.srv.hcvlny.cv.net...
> > Hi all. All of a sudden my computer opens up to a log in screen, with
only
> > my account listed. I have to click on my name to open windows. I'm
running
> > XP Professional. I do see another user in the Control Panel, called
> ASP.Net
> > Machine A, which was never there before. I realize I can delete this
user.
> > Does anyone know why I have to login all of a sudden, and how this other
> > user got there? And how I can turn this login screen off? I'm used to
just
> > having Windows open to my account, which btw is the only one I set up
> here.
> > Thanks in advance.
> >

>"Steve" <sverdee@optonline.net> wrote in message
news:yyAma.67563$Xd1.23599658@news4.srv.hcvlny.cv.net...
> Ok, I was able to get rid of it by deleting the other account. Strange
since
> that account was not up on the screeen for selection to login. Strange
also
> since I don't know where it came from. I did a search for "ASP.Net" and
got
> some info on it. But I'll be dammed if I know how it became a user on my
> machine. Oh well.
>

I've just had exactly the same problem on my machine. Suddenly I was
introduced to the login screen after a recently installed windows 'security'
update. (I shall post further details when I find them). Could this be a
potential loophole in windows that somebody has managed to get through via a
trojan or other method? I've had no warnings from Norton Antivirus/Norton
Internet Security. I have also deleted the ASP.net account. I now wonder if
this was a wise move.

I also recently have a problem with 'Windows messenger ' popup adverts which
I investigated via google. I discovered that there is a security/networking
loophole in WinXP and wonder if this could be connected? To solve it I had
to re-enable the built in WinXP firewall on my (ADSL) connection. I believed
NIS would cover this form of attack but discovered the WinXP built-in
firewall is the only remedy. I also did as recommended and stopped/disabled
'messenger' in Admin Tools/Services.

I cross post this to the (hopefully) relevent groups in the hope that
somebody may be able to help a 'novice' (I have been using a standalone
windows PC for years, but security has only really been a major issue since
I installed ADSL, which I've now had for nearly a year without problems
until around a week ago). As this was the only example I could find of this
problem I wonder if it may be rare and/or unrecognised and perhaps this will
make other users aware of a potential problem.
Can any networking gurus out there spread any light on this?



Relevant Pages

  • RE: [in] Re: [Full-Disclosure] IE is just as safe as FireFox
    ... The first account created on Windows is Administrator, ... and even it had poor initial security when it was really tested. ... doesn't require admin either). ...
    (Full-Disclosure)
  • Re: Need help closing security holes in my Windows XP home system!
    ... >>stop using the win xp user account with admin, ... >>windows as the admin, ... then you really don't understand security for the ...
    (comp.security.firewalls)
  • Re: Home Networking/Firewall problem
    ... security design flaws. ... which open windows. ... Sebastian calles this an "attack vector", ... Add an extra user account. ...
    (comp.security.firewalls)
  • Re: what is reset account?
    ... No I don't think that policy value was available in Windows 2000. ... I believe the policy was added in K3, but the reg value works in 2K as well as NT. ... windows 2000 server security options. ... deployed based on computer account. ...
    (microsoft.public.win2000.active_directory)
  • Re: Logon with disabled admin account possible!
    ... Microsoft MVP (Windows Server System: Security) ... > disable the built in administrator account. ... >> possible to disable the built-in admin account - you could rename ...
    (microsoft.public.windows.server.security)