other people are logged on message at shutdown (XP Pro SP2)

[dianne18]

When shutting down the PC I occasionally am told that other people are logged on. There is another account (my son's) but I always log on using my own account (administrator). Any suggestions as to the cause of this message and any implications of concern?
Many thanks
Dianne

[DaveA]

Did the other account get logged out or did some use "Switch User"?

[dianne18]

Dave, I am the only one who uses the PC. We set up the second account "just in case" my son ever needed to use my PC, which he has a couple of times, many months ago. Since then, only I log on and am the sole user from log on to log off.
Dianne

[DocWatson]

<hr><center>Since then, only I log on and am the sole user from log on to log off.</center><hr>

At least that is what you suspect... Has this been happening since you first setup your son's account or is it something that comes and goes ?? If so, then someone is logging on to your son's account and then not logging off before you get on the machine. Is this at least "theoretically" possible ???

[dianne18]

Doc, not possible. PC in my office at home, no one else in the house but my other half who no idea how to use a PC and is unlikely to try while I slip off to the bathroom- the only time I am away from the machine while it is in use.
The behaviour has been recent- just the last few weeks and only intermittent, perhaps once or twice a week. The cat and dog are above suspicion (no pet primates around) and the goldfish look very innocent.
Cheers
Dianne

[DaveA]

I want you to log out as the current user and then log in as the other users. Check out that account and then log out. Log back in as the other user and then restart your machine.

On shut down did you get the message that you have been getting?


Note: I like you since of humor in regards th the about questions about others in the household.

[DocWatson]

Just eliminating the most likely suspects first. <img src=/S/smile.gif border=0 alt=smile width=15 height=15> But you know, those goldfish only look innocent !! [ <img src=/S/laugh.gif border=0 alt=laugh width=15 height=15>

Dave has already posted my next suggestion, so let's see what happens. <img src=/S/crossfingers.gif border=0 alt=crossfingers width=17 height=16>

[StuartR]

Is this PC connected to any kind of network at the time? Does physically disconnecting it from the network cause the error to go away?

StuartR

[dianne18]

Dave and Doc - I followed Dav's advice-nothing untoward. But the log-off message is only intermittent, so that may not be so helpful.
Mmmm........you mean those damp patches on the desk aren't from the bottom of my tea mug? I'll check the lid on the goldfish bowl.
Thank you both
Dianne

[dianne18]

Stuart, it's a stand-alone PC, not on a network.
Dianne

[StuartR]

When you say not on a network, does this mean "not connected to the Internet". You would get a message like this if someone had managed to "hack" in to your computer.

StuartR

[DocWatson]

What is it with this thread ?? Somebody is always jumpin' in with my next suggestion before I can get it posted !! <img src=/S/laugh.gif border=0 alt=laugh width=15 height=15> That was where I was headed Stuart. I don't believe the message is just "happening", I think someone is or has been logged on to that account. If it's not someone in the household, then the next likely source would be a hacker or Trojan. Are there any trojan or spuyware detection programs running and has a complete system scan been done recently ??

[dianne18]

Good question- I have WebRoot Spy Sweeper and CounterSpy.. Also Zone Alarm Security Suite (firewall, AV etc). All updated and on from boot-up. Regular and frequent full scans and nil to find. Still use AdAware and SpyBot from time to time (sounds paranoid, I know) -again nil found. Was using my laptop today- exactly the same message at shutdown. Surprised me for sure. There is only one account (administrator). Running XP Home on it ,with SP2. Using Zone Alarm Antivirus and MS Spyware beta - all scans show no nasties. Rarely used with internet connection and protection always updated and scanned regularly.
Am wondering whether ZA could be creating the message...............will have to do some digging.

[Leif]

Just before you log off, Ctrl-Alt-Delete and select Task Manager. Click on the Processes tab, and make sure the "Show processes for all users" option is selected at the bottom. Does that show any stranger logged in?

[DocWatson]

<center>

<hr>sounds paranoid, I know<hr>

</center>Not parinoid.... careful. I'd say your protection scheme is quite appropriate and not overkill in the least. <img src=/S/yep.gif border=0 alt=yep width=15 height=15> My next thought would be that one of these "friendlies" is updating itself automatically on your son's account and the account is active when you are logging off, thus causing the message at shutdown, but I'm really just grabbing at straws here. See if Leif's suggestion sheds any light on what might be happening right before you shut down.