Access When PC Off

  • Thread starter Thread starter Parker
  • Start date Start date
P

Parker

Hello Everyone,
I have a couple of basic questions. I have 2 desktops setup on a wireless
router for internet access and setup for file sharing. All works quite
well. My questions are: If PC 1(mine/wired to router) is completely
shutdown and router disconnected from the internet via status page in
router, can someone else possibly get into my PC(not knowing passwords) and
change the date and or time to break into my files? I found in event viewer
that the time and date was changed 3 hours after I shutdown and disconnected
from the Internet in the router in the security section. Can PC2 on the
wireless workgroup I have get into the files after PC1is shutdown and
disconnected from internet again via status page. I'm a bit at a loss on
this,seeing that my time and date were changed! Any responses would be
welcome.

Thanks in Advance
 
If you're serious then here's your answer: No, nobdody can get to your PCs
when they're shutdown. File sharing relies on some network protocols that
obviously aren't running while the system is off so nobody can get to your
files. The hardware clock keeps running even when the PC is off (in order
to keep correct time) using the BIOS/CMOS backup battery (it's on the
motherboard). If the battery is dying then the date could change when the
system is off but the Event Log isn't running so there is no way for the
Event Viewer to know what happened. Your system may have some extended CMOS
utilities installed that allow the BIOS to hold hardware event information
and log it in the Windows Event Log when the system is up - I haven't seen a
system like that so far but I guess it's possible. I'd replace the
BIOS/CMOS battery and see if it happens again.
 
Fritz,

I appreciate your response. Yes I was serious. I turn that PC off
everynight and shut down the internet at the status tab in the router. The
second PC is my son's. I now wonder if he has figured out my password!!
I'll have to change it again. Thank you again :-))
 
If you're serious then here's your answer: No, nobdody can get to your PCs
when they're shutdown. File sharing relies on some network protocols that
obviously aren't running while the system is off so nobody can get to your
files.
Click to expand...

Many PC's can be setup to Wake at a specific time in the BIOS, many UPS
systems will wake a PC, there is also Wake On Lan that can wake a PC
across the network.
 
Still, if the PC is powered off, another PC can't access it to change the
time.

--
Star Fleet Admiral Q @ your service!
"Google is your Friend!"
www.google.com

***********************************************
 
Hello Parker,

Good to hear from you.

According to the post, I understand that you wonder whether it is possible
to access the computer when it is shut down and disconnected from the
internet. Is this correct?

I agree with Fritz and Admiral that it is impossible to access a computer
when it is shut down.

As for the change of time, I am not quite clear. Do you mean you see event
logs with the time which is 3 hours after you shut down the computer in the
event viewer? What do you mean by "change the date and time to break into
my files"? Have you seen you files modified with the new time?

In addition, please check if you have enabled standby mode, which will
possibly wake your computer, as Leythos said. You can cut the power off to
make sure the computer is completely shut down.

The following articles are about "standby mode" which I offer for your
reference.

Standby mode
http://www.microsoft.com/windowsxp/mediacenter/using/productdoc/default.asp?
url=/windowsxp/mediacenter/using/productdoc/rmtview/htm/standbymode.asp

How To Enable or Disable the Standby Mode
http://support.microsoft.com/default.aspx?scid=kb;en-us;274309

Pay extra attention to the snippet "Enabling Devices to Wake the Computer".
Microsoft? Windows? XP Professional Resource Kit Documentation
http://www.microsoft.com/mspress/books/sampchap/5566d.asp


If you have any further questions, don't hesitate to get in touch!

Best regards,

Frances He


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Hello Francis,

I shut the PC completely off from the start button, and did a shutdown after
disconnecting from the internet within the router "status settings". In the
event viewer in the security section there were 2 entries that showed that
(it appeared) someone successfully logged onto the computer and that the
time was august of 2010 and yet changed again in the second entry to
another date. This was the reason for the initial question. I did not know
why it occurred. I have not found any problems with any of my files or
programs. And yes, these entries happened approx 3Hrs after I shut the
unit down. I found these entries the next morning. Wake on LAN in the BIOS
is disabled, and standby mode is disabled on the system. The date and time
on the PC is correct as of that morning. Virus scans and adware programs
are run in safe mode all the time and ususally clear of problems. None were
found that morning.

Thank You Again
 
Hello Parker,

According to your reply, it is really strange.

To let me have a clear understanding, please send the event logs to me for
further research.

Follow the steps below to get Event Log and send them to
(e-mail address removed). I will try my best to see what I can do regarding
this issue.

1. Click Start (menu) -> Control Panel (menu)

2. Double click Administrative Tools (icon) in Control Panel (folder) to
navigate to Administrative Tools (folder)

3. Double click Event Viewer (icon) in Administrative Tools (folder)

4. Highlight Application (sub tree of Event Viewer (Local)) and right click
it

5. Choose Save Log File As¡­ (menu) from the context menu

6. Save it as Application.evt and send it to me as attachment.

7. Do the same with Security and System and save the logs as Security.evt
and System.evt.

In addition, have you changed the password to make sure it is not your
son's trick?

I am looking forward to your reply!

Best regards,

Frances He


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Yes, we have changed the password and I will get the log to you.
Thanks Again for all of Your Support!
 
Hello Parker,

You are welcome. Let us see what we can do for you based on your logs. :)

Best regards,

Frances He


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Frances, I have solved the problem. I very recently downloaded Microsoft
AntiSpyware Beta1. When I went to download the updates my clock and date
changed. I'm not sure how to explain that but it did. After bootup the
next day the time syncronized itself by internet time and I never noticed
the entries in the event viewer. Thats is where I found the culprit, in the
applications viewer that the download had put an "!" in the viewer that told
me that the clock had changed. Again I thank all of everyones efforts in
these News Forums for there knowledge and time to help us correct our PC
problems and pointing us in the right direction.

Thank You All
 
Hello Parker,

Thank you for informing me the problem is resolved.

I have researched the relationship between "Microsoft AntiSpyware" and
"change of time". However, I haven't found any known issue about them. It
is really strange.

Anyway, we are sure the computer will have no security issue when it is
completely shut down and disconnected from the network. :)

In the future, if you have any other concern, please feel free to let us
know.

Best regards,

Frances He


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top