Recently people have been telling me I was on the computer when I was not
even near one. I have been told that someone must have access to my password
to do this. My computer has a program that must run to check for virus's
once every day at a certain time. Is it possible that when the virus checker
powers up the computer it is signing me in automatically? Or how else could
this be happening.
--
leslied

RE: someone else is signing in on my email by WongTuckWah

WongTuckWah
Wed Aug 03 22:13:03 CDT 2005

Ask these questions...

Is your machine being physically login using your accout, if not
Is your AV able to power up the machine to perform the scan, if not
Are you currently logon from another machine when someone report this, if not
Someone Might Already Know Your Account and Use It Somewhere Else.

Social Engineering might be one of the method used though.

HTH.


Re: someone else is signing in on my email by Shenan

Shenan
Wed Aug 03 22:17:05 CDT 2005

leslie wrote:
> Recently people have been telling me I was on the computer when I was
> not even near one. I have been told that someone must have access to
> my password to do this. My computer has a program that must run to
> check for virus's once every day at a certain time. Is it possible
> that when the virus checker powers up the computer it is signing me
> in automatically? Or how else could this be happening.

Why ask.. Change all your passwords.

Good passwords are those that meet these general rules
(mileage may vary):

Passwords should contain at least six characters, and the character
string should contain at least three of these four character types:
- uppercase letters
- lowercase letters
- numerals
- nonalphanumeric characters (e.g., *, %, &, !, :)

Passwords should not contain your name/username.
Passwords should be unique to you and easy to remember.

One method many people are using today is to make up a phrase that
describes a point in their life and then turning that phrase into their
password by using only certain letters out of each word in that phrase.
It's much better than using your birthday month/year or your anniversary
in a pure sense. For example, let's say my phrase is:
'Moved to new home in 2004'
I could come up with this password from that:
'Mv2n3whmN04'

The suggested time to change passwords varies, but I will throw out a 'once
in every 3 to 6 months for every account you have.'

And just running a scheduled task to scan for viruses wouldn't log you on,
check your email or open your Instant Messenger.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html



Re: someone else is signing in on my email by WongTuckWah

WongTuckWah
Wed Aug 03 22:59:13 CDT 2005

Haha, good suggestion by changing the password immediately. But this might
not be the solution to discover the root cause :)



Re: someone else is signing in on my email by Lanwench

Lanwench
Thu Aug 04 11:28:45 CDT 2005



In news:9358B4F7-F08C-4B32-816E-C5B3921D6503@microsoft.com,
Wong Tuck Wah <WongTuckWah@discussions.microsoft.com> typed:
> Haha, good suggestion by changing the password immediately. But this
> might not be the solution to discover the root cause :)

Personally, when I have a problem, my immediate concern is fixing it.
Forensics, if required, can be done later. ;-)



Re: someone else is signing in on my email by Robert

Robert
Thu Aug 04 14:05:40 CDT 2005

Wong Tuck Wah wrote:
> Haha, good suggestion by changing the password immediately. But this
> might not be the solution to discover the root cause :)

If you report to the hospital emergency room with a massive bleed thats
endangering your life, would you rather they stopped the bleed and allowed
you to live, or took as long as they needed pondering what caused it and
only then got around to healing you if you were still alive by then?

--
--
Rob Moir
Website - http://www.robertmoir.co.uk
Virtual PC 2004 FAQ - http://www.robertmoir.co.uk/win/VirtualPC2004FAQ.html
Kazaa - Software update services for your Viruses and Spyware.



Re: someone else is signing in on my email by WongTuckWah

WongTuckWah
Thu Aug 04 22:46:24 CDT 2005

Dear all, pls don't get me wrong, let me clarify my point in more details.

I personally agree to all of your points that stopping the "bleeding" is of
higher priority than anythings else, for this I have no doubt in it. What I
would like to stress is that as long as the root cuase is not reslove, no
matter how complex the password is not going to be safed. Let me quote a real
life example.

Free internet mails like hotmail and yahoo require you to give an answer to
a specific chosen question of your choice during the creation of the account.
This allows you to reset your password easily if you ever forget yours. This
seems to be a great feature set BUT if you really sit down and observe, all
the questions are identical.

What a cracker need to do is to memorise all the questions and use his
perfect social engineering skills to probe tactfully for your answer.

So you see my point here? To compromise something can be achieved in
different ways, having a complex password is not the only solution.

HTH.



Re: someone else is signing in on my email by Lanwench

Lanwench
Fri Aug 05 09:33:10 CDT 2005



In news:056D8B63-BC6F-4479-921F-0D46DCB3317F@microsoft.com,
Wong Tuck Wah <WongTuckWah@discussions.microsoft.com> typed:
> Dear all, pls don't get me wrong, let me clarify my point in more
> details.
>
> I personally agree to all of your points that stopping the "bleeding"
> is of higher priority than anythings else, for this I have no doubt
> in it. What I would like to stress is that as long as the root cuase
> is not reslove, no matter how complex the password is not going to be
> safed. Let me quote a real life example.
>
> Free internet mails like hotmail and yahoo require you to give an
> answer to a specific chosen question of your choice during the
> creation of the account. This allows you to reset your password
> easily if you ever forget yours. This seems to be a great feature set
> BUT if you really sit down and observe, all the questions are
> identical.
>
> What a cracker need to do is to memorise all the questions and use his
> perfect social engineering skills to probe tactfully for your answer.
>
> So you see my point here? To compromise something can be achieved in
> different ways, having a complex password is not the only solution.

Of course not...security is a process, right? And a layered one, at that.
You can put the best deadbolt money can buy on your front door, and if
someone really wants to get into your house, they will.

>
> HTH.