Help to find remote computer User Name?

Question

I found that my computer was being accessed on a default account.  Since I cannot find a way to log into this account nor the public one.  I need to find the location of the remote computer Users Name and location.

Answer 1

Hi Vickyl71,

I am Aster, an Independent Advisor and I'm here to help you with your problem.

You can try the steps here provided by another support personnel that has helped other users with a similar issue as well: https://answers.microsoft.com/en-us/windows/for...

If the above does not help, you can try the following:

1. open Command Prompt
2. type in the below:

wmic.exe /node:"IP-or-HostName" ComputerSystem Get UserName

Example:

wmic.exe /node:"172.28.1.100" ComputerSystem Get UserName

and it will output the following:

UserName

DOMAIN\User

*Note: take note that the /node value must be quoted.

Hope it helps, thank you.

Answer 2

I'm having a issue/problem getting signing into my cmd as administrator

Answer 3

AsterT1

Thank you for your response.  I finally got to sign in as admin on the command line.  I did not change the password yet.  I felt like I would probably kick a remoter hacker off my computer.  

So, this is my results

I cannot reach the RPC server is unavailable.

Answer 4

That would not work because you did not specify your IP address in the command. You need to enter your IP address into the command like below:

wmic.exe /node:"172.28.1.100" ComputerSystem Get UserName

You need to first get your IP address using this command:

1. open cmd and type ipconfig, press Enter
2. then look for IPv4 Address, it will state what is your IP address

For example, your IP address is 192.444.1.333

Then use it to put into this command:

wmic.exe /node:"192.444.1.333" ComputerSystem Get UserName

Let me know after you have tried this. Thank you.

Answer 5

Well, whatever should did shake the remote hacker up. For the first time since 2016.  I see sign in names on the left hand side of my login screen and it still looks like there is a filter on it, the picture does not come through like it use too.  Also I have never seen any name there except for my PC name and sometimes guest. And I have not seen that since 2016.  Now, it is back since I did that.  And I have done that in July 2019.  I could not remember how to do it but I have signed in as admin before like that on the command line.  Why, I found I was locked out of my pc had to figure out how to get back in without the password I had wrote down.

I have a default account on my computer that was set up somehow.  And I have actually reset my computer back to factory in the fall of 2016 but this default account was set up in July of 2016.  

Which leads me to believe the reset did not actually work since the default creation date on this is July/  /2016.  

And this default account I saw on my computer has a file one it name Hidden cm, switch accounts, two cmd console shortcuts....A lot of short cuts.  Also, in my task manager I see double app's running all the time and I could not figure out what was going on.  But, it feels like someone just rewrites the way my software acts on my computer as if they lust after making my life difficult. 

Oh, and the default account I saw that it was connected to a public internet.  Now, when I sign into my router which has been hacked several times,  I've seen more devices then what should actually be active then when I go to view them, the device number changes usually before I can get a chance to see what the device name is.  And just even tonight my MSA account was signed in and I signed out.  Earlier the settings asked me a question if I wanted to stayed signed in and I said no and I found that I was signed in since earlier today.

I have someone bothering me, I have had people intrude into my home and violate my things and video of them and it gets muted or manipulated so the police cannot do anything about it.  But, they did reference my neighbor and I recognized one of the person and they did nothing.  I can not ever get a picture of them because it is getting deleted on me by the hacker.

I took a picture of this on my screen on my iPhone and I cannot get it to make a noise like it was sent and I am not receiving it.  And I have not received it in my email yet either.  I tried it again, after rebooting my iPhone and it made noise that was very low and short and I still do not have it in my inbox.

So, I will try the other way, but the filteron my screen and what I have been going through should give you or anyone else the ability to find this hacker and do something to prosecute them!  Since I have to unknow accounts with permission in the properties.  

Just in typing this they have been taking out the space button a lot.  I just did not correct one of them.  Oh, not only that but just on correct,they would not let me have the second 'r'

The example with the IP address showing,well I did not get that the first timeI read this.   This person can change the way a webpage looks on me too.  Tryin gto make me look like I was stupid and whatever you want to call it.