|
|||||||
![]() |
|
|
LinkBack | Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
|
#1 |
|
Member (9 bit)
Join Date: Jan 2005
Posts: 264
|
How can I tell who's logged in to my PC?
On trying to shut my PC, I got a message that someone else is logged in. Interesting considering there's only one login. How can I tell who else might ne logged in? And then block them? Or could it just be a gremlin?
Dazzer XP SP3 |
|
|
|
|
|
#2 |
|
Ride 'em Cowboy
Join Date: Dec 1999
Location: Dallas, Tx
Posts: 9,109
|
OUCH - guessing you know this can be a Really BAD thing....
Are you on a wireless connection by any chance? Do you have more then one PC and the one in question has a shared printer? Did you make any type of Remote Desktop Connection to the pc in question? |
|
|
|
|
|
#3 |
|
Member (9 bit)
Join Date: Jan 2005
Posts: 264
|
I am on a wireless connection, but it's encrypted. Only one PC was on. The firewall should block any other access. No remote desktop.
Dazzer |
|
|
|
|
|
#4 |
|
Ride 'em Cowboy
Join Date: Dec 1999
Location: Dallas, Tx
Posts: 9,109
|
Close your brower(s)
Click START->Run and type: CMD Then from the cmd prompt type: NETSTAT Hopefully you won't see any established connections. |
|
|
|
|
|
#5 |
|
Staff
Premium Member
Join Date: Sep 2004
Location: Cardiff, Wales. UK
Posts: 6,105
|
Are you running QuickBooks or any other type of software that creates a user account?
__________________
Niwa no niwa ni wa, niwa no niwatori wa niwaka ni wani o tabeta. |
|
|
|
|
|
#6 |
|
Member (9 bit)
Join Date: Jan 2005
Posts: 264
|
There are quite a lot of established connections. Most to localhost but some to an akamai address:
a92-122-209-27.deploy.akamaitechnologies.com:http TIME_WAIT and a few like 81.52.205.183:http some more like ww-in-f167.1e100.net:http and 64.124.194.59.available.above.net:http. It seems like the 81 ... is also Akamai, the ww- ones are Google and the last one is Abovenet Should I worry about these? Should I block them in my Firewall? Dazzer |
|
|
|
|
|
#7 |
|
Ride 'em Cowboy
Join Date: Dec 1999
Location: Dallas, Tx
Posts: 9,109
|
Did you close your browser so you don't see dozens from web sites ;-)
|
|
|
|
|
|
#8 |
|
Member (9 bit)
Join Date: Jan 2005
Posts: 264
|
Ah no I didn't. I shut my browser and Outlook Express and ran Netstat again.
I get four or five with addresses similar to this now: co114ds.col114.mail.services.live.com:http Dazzer |
|
|
|
|
|
#9 |
|
Ride 'em Cowboy
Join Date: Dec 1999
Location: Dallas, Tx
Posts: 9,109
|
That looks like a Windows Live aka Messenger or something....
Did you ever get the pc shut dwon from yesterday? |
|
|
|
|
|
#10 |
|
Member (9 bit)
Join Date: Jan 2005
Posts: 264
|
I did shut the PC down. But I understand now that this was not the first time this message had come up. Could it be something like the Channel4 TV watch again service that's peer2peer?
Dazzer |
|
|
|
|
|
#11 |
|
Premium Member
Join Date: Jun 1999
Posts: 9,231
|
Run a 'net session' command .. to see if there are other users connected in.
|
|
|
|
|
|
#12 |
|
Member (9 bit)
Join Date: Jan 2005
Posts: 264
|
I get "There are no entries on this list" - I presume that means all's well I hope,
Dazzer |
|
|
|
![]() |
| Bookmarks |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|