RE: WinXP Login Logs

["mart" <mart () nimrodx net>]

> -----Original Message-----
> From: Bruno Guedes Souto [mailto:brunoguedes () gmail com]
> Sent: 06 January 2005 12:45
> To: security-basics () securityfocus com
> Subject: WinXP Login Logs
>
>
> Suddenly here in my work, some PCs are being turned on by "ghosts"
> during night/clean periods and they are being used! How can I know the
> last person who logged in? Are there some kind of login logs in win
> xp?
>
> Regards
>
> Bruno Souto

Hi,

I've had the same problems before. Namely looking at the phonebill and
finding that the
pc had been dialling out on a premium rate number. What puzzled me was the
client had
left the machine turned off and the times of dialling out - no-one was
physically in the
premesis. I checked the modem logs to find out if, indeed, the pc had been
dialling out
and yes, it had.

I too would be interested in any information the list members may have about
this.

Mart