User Permissions changed

G

Guest

A few months ago, I noticed that when I logged off there was suddenly an
option to "switch user" and around the same time, McAfee informed me that
changes were made to my registry. Being a relatively new user (Windows XP SP
2), I didn't think much of it, but yesterday, I found that I had an option to
go to the registry by running regedit. I didn't attempt to change anything,
but did try to remove all the users there other than myself.
When I originally set my computer up, I named it MOMAA and I was established
as the owner. Now, I'm denied the right to remove a user. Where did all the
other users come from? There are approximately 6 of them.
I'm attaching a report I received from McAfee. If anyone can look at it and
make some sense of it, I'd appreciate it.

System Information report written at: 12/03/05 20:07:51
System Name: MOMAA
[Software Environment]

Time Change Name Details Type
12/3/2005 7:55:17
PM CHANGED C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe Property "User"
changed from "MOMAA\Sarah DiFiore" to "All Users". Startup Programs
12/3/2005 7:55:17
PM CHANGED C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe Property "Location"
changed from
"HKU\S-1-5-21-898805597-3437109185-440105723-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
to "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run". Startup Programs
12/3/2005 7:55:17 PM CHANGED DESKTOP.INI Property "User" changed from
".DEFAULT" to "All Users". Startup Programs
12/3/2005 7:55:17 PM CHANGED DESKTOP.INI Property "Location" changed from
"Startup" to "Common Startup". Startup Programs
12/3/2005 7:55:17 PM CHANGED DESKTOP.INI Property "User" changed from
"MOMAA\Sarah DiFiore" to ".DEFAULT". Startup Programs
12/3/2005 7:55:17 PM CHANGED DESKTOP.INI Property "User" changed from "NT
AUTHORITY\SYSTEM" to "MOMAA\Sarah DiFiore". Startup Programs
12/1/2005 12:11:28 AM REMOVED C:\PROGRA~1\McAfee.com\Shared\mcappins.exe
/v=3 /cleanup Startup Programs
12/1/2005 12:11:28
AM REMOVED C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe Startup Programs
11/29/2005 10:11:19 PM ADDED "C:\Program Files\Winferno\Secure
IE\SIEPulse.exe" Startup Programs
11/29/2005 10:11:19 PM ADDED C:\PROGRA~1\McAfee.com\Shared\mcappins.exe /v=3
/cleanup Startup Programs
11/29/2005 10:11:19
PM ADDED c:\progra~1\mcafee\MCAFEE~1\masalert.exe Startup Programs
11/29/2005 10:11:19
PM REMOVED C:\PROGRA~1\MYWEBS~1\bar\3.bin\MWSOEMON.EXE Startup Programs
11/29/2005 10:11:19 PM REMOVED MyWebSearch Email Plugin.lnk Startup Programs
11/28/2005 8:58:32 PM REMOVED C:\PROGRA~1\McAfee.com\Shared\mcappins.exe
/v=3 /cleanup Startup Programs
11/27/2005 8:54:47
PM REMOVED C:\PROGRA~1\mcafee.com\agent\McUpdate.exe Startup Programs
11/26/2005 6:06:26 PM ADDED "C:\Program Files\DAP\DAP.EXE" /STARTUP Startup
Programs
11/26/2005 6:06:26
PM REMOVED C:\PROGRA~1\mcafee.com\agent\mcupdate.exe Startup Programs
11/26/2005 6:06:26 PM ADDED C:\PROGRA~1\McAfee.com\Shared\mcappins.exe /v=3
/cleanup Startup Programs
11/25/2005 12:40:36 AM REMOVED C:\PROGRA~1\McAfee.com\Shared\mcappins.exe
/v=3 /cleanup Startup Programs
11/22/2005 8:40:49 AM ADDED C:\PROGRA~1\McAfee.com\Shared\mcappins.exe /v=3
/cleanup Startup Programs
 
T

Tom

Really don't know what is it. Consider Windows reinstallation, install
McAffe and a firewall,

greetings,
Tom

U¿ytkownik "smd9296 said:
A few months ago, I noticed that when I logged off there was suddenly an
option to "switch user" and around the same time, McAfee informed me that
changes were made to my registry. Being a relatively new user (Windows XP
SP
2), I didn't think much of it, but yesterday, I found that I had an option
to
go to the registry by running regedit. I didn't attempt to change
anything,
but did try to remove all the users there other than myself.
When I originally set my computer up, I named it MOMAA and I was
established
as the owner. Now, I'm denied the right to remove a user. Where did all
the
other users come from? There are approximately 6 of them.
I'm attaching a report I received from McAfee. If anyone can look at it
and
make some sense of it, I'd appreciate it.

System Information report written at: 12/03/05 20:07:51
System Name: MOMAA
[Software Environment]

Time Change Name Details Type
12/3/2005 7:55:17
PM CHANGED C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe Property "User"
changed from "MOMAA\Sarah DiFiore" to "All Users". Startup Programs
12/3/2005 7:55:17
PM CHANGED C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe Property "Location"
changed from
"HKU\S-1-5-21-898805597-3437109185-440105723-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
to "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run". Startup Programs
12/3/2005 7:55:17 PM CHANGED DESKTOP.INI Property "User" changed from
".DEFAULT" to "All Users". Startup Programs
12/3/2005 7:55:17 PM CHANGED DESKTOP.INI Property "Location" changed from
"Startup" to "Common Startup". Startup Programs
12/3/2005 7:55:17 PM CHANGED DESKTOP.INI Property "User" changed from
"MOMAA\Sarah DiFiore" to ".DEFAULT". Startup Programs
12/3/2005 7:55:17 PM CHANGED DESKTOP.INI Property "User" changed from "NT
AUTHORITY\SYSTEM" to "MOMAA\Sarah DiFiore". Startup Programs
12/1/2005 12:11:28 AM REMOVED C:\PROGRA~1\McAfee.com\Shared\mcappins.exe
/v=3 /cleanup Startup Programs
12/1/2005 12:11:28
AM REMOVED C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe Startup Programs
11/29/2005 10:11:19 PM ADDED "C:\Program Files\Winferno\Secure
IE\SIEPulse.exe" Startup Programs
11/29/2005 10:11:19 PM ADDED C:\PROGRA~1\McAfee.com\Shared\mcappins.exe
/v=3
/cleanup Startup Programs
11/29/2005 10:11:19
PM ADDED c:\progra~1\mcafee\MCAFEE~1\masalert.exe Startup Programs
11/29/2005 10:11:19
PM REMOVED C:\PROGRA~1\MYWEBS~1\bar\3.bin\MWSOEMON.EXE Startup Programs
11/29/2005 10:11:19 PM REMOVED MyWebSearch Email Plugin.lnk Startup
Programs
11/28/2005 8:58:32 PM REMOVED C:\PROGRA~1\McAfee.com\Shared\mcappins.exe
/v=3 /cleanup Startup Programs
11/27/2005 8:54:47
PM REMOVED C:\PROGRA~1\mcafee.com\agent\McUpdate.exe Startup Programs
11/26/2005 6:06:26 PM ADDED "C:\Program Files\DAP\DAP.EXE" /STARTUP
Startup
Programs
11/26/2005 6:06:26
PM REMOVED C:\PROGRA~1\mcafee.com\agent\mcupdate.exe Startup Programs
11/26/2005 6:06:26 PM ADDED C:\PROGRA~1\McAfee.com\Shared\mcappins.exe
/v=3
/cleanup Startup Programs
11/25/2005 12:40:36 AM REMOVED C:\PROGRA~1\McAfee.com\Shared\mcappins.exe
/v=3 /cleanup Startup Programs
11/22/2005 8:40:49 AM ADDED C:\PROGRA~1\McAfee.com\Shared\mcappins.exe
/v=3
/cleanup Startup Programs
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Hacked >> Many changed passwords 1
Hacjker Changes many user names 1
computer sending emails 17
netsh.exe popup on startup and task manager is disabled even though im the administrator 2
WCG Stats Thursday 03 December 2020 1
WCG Stats Tuesday 06 December 2022 3
xlime offeroptimizer and webrebates 1
WCG Stats Thursday 16 February 2023 3

Top