Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Windows 7 Remote Desktop Keeps Reappearing

28 Apr 2013   #1
jackbn

Windows 7 Professional 64bit
 
 
Windows 7 Remote Desktop Keeps Reappearing

Using Norton 360 with Windows 7 for a long time, with no obvious problems.

Recently, however, Remote Desktop shows up when I clean files with CCleaner. This is apparently unrelated to a particular website.

Norton 360 is fully enabled.
Norton 360 controls the Windows 7 firewall.
Remote Desktop is disabled via Control Panel.
File sharing is disabled.

Remote Desktop still often appears in a CCleaner list of deleted files.
This occurs with Firefox or Chrome; haven't tried IE.

I have gone to Control Panel, Administrative Tools, Computer Management, Services and Applications, Services

There I have disabled Remote Desktop on three sequential places. HOWEVER something is resetting at least one of these.

I see no evidence on-screen of Remote Desktop, but wonder whether someone is accessing my computer.

What is going on, and how to stop it?


My System SpecsSystem Spec
.
30 Apr 2013   #2
UsernameIssues

W7 Pro SP1 64bit
 
 

Please post a screenshot of the CCleaner entry (entries?) that shows the remote desktop files. Adjust the windows size and the columns to show as much info as you can. Just press the Analyze button and not the Run Cleaner button.

Screenshots and Files - Upload and Post in Seven Forums

Also, please show a screenshot of the three services that you have disabled.
My System SpecsSystem Spec
30 Apr 2013   #3
Ztruker

Windows 10 Pro X64
 
 

If someone connected to your computer via RDT then it would be sitting at the login screen when you returned. Of course that doesn't help if that's where it is normally when you go to use it the next time.
My System SpecsSystem Spec
.

30 Apr 2013   #4
jackbn

Windows 7 Professional 64bit
 
 

Thanks for your interest.
Here is CCleaner, main screen, and details on Remote Desktop item.


Attached Thumbnails
-ccleaner.jpg   -ccleanerb.jpg  
My System SpecsSystem Spec
30 Apr 2013   #5
jackbn

Windows 7 Professional 64bit
 
 

And here is one of the Remote Desktop settings.
I had set it to disabled hours ago, but this is how it looks now, just after running the CCleaner I posted.

The other three items I have been setting are immediatelly above the window. The window is for the middle one. The other two remain disabled, but Remote Desktop just ran minutes ago anyway.


Attached Thumbnails
-remotedesktop.jpg  
My System SpecsSystem Spec
01 May 2013   #6
UsernameIssues

W7 Pro SP1 64bit
 
 

@jackbn,
Thanks for the screenshots.
When the Remote Desktop Services server service is disabled or not running, that should prevent incoming connections to your computer.

The cache file in your screenshot is created by Remote Desktop Connection (RDC). RDC is used to make outgoing connections that let you control another computer. The time stamp on the cache file should reflect the time that the RDC session ended.

RDC is Microsoft's client application. Remote Desktop Protocol (RDP) is the method that RDC uses to connect to and control another computer. There are browser based apps that use RDP to get stuff too... I just don't know if they use the cache folder that CCleaner is showing you.

If an outgoing RDC connection was established, then there should be a log entry. Look in the Windows Event Viewer > Security log. Event ID 4634 (RDC disconnect) should have a time stamp that roughly correlates to the time stamp on the cache file that CCleaner is showing you. (Use the find/search feature to search for 4634.)

Event ID 4648 (RDC connect) should have info about the RDC connection... we just don't know how long the outbound RDC session was, so we don't know how far back in the log to look. So use the search feature.


We will deal with the Remote Desktop Services that you disable and someone or something sets to manual after you let us know what you learned from the Windows Event logs.
My System SpecsSystem Spec
01 May 2013   #7
UsernameIssues

W7 Pro SP1 64bit
 
 

Quote   Quote: Originally Posted by Ztruker View Post
If someone connected to your computer via RDT then it would be sitting at the login screen when you returned. Of course that doesn't help if that's where it is normally when you go to use it the next time.
There is a way to disconnect and unlock the remote computer:

Code:
tscon.exe 1 /dest:console


Sorry about the bad video quality. It really does not like the VMs at those screen resolutions.

Edit: I've replaced the video with a better one - still a bit fuzzy.
For those that might not know:
click on play
select the gear to change the resolution to 720P
click on full screen

-vid-info.png


My System SpecsSystem Spec
01 May 2013   #8
Kari

Microsoft Community Contributor Award Recipient

 

I noticed from OP's specs he is using Windows 7 Professional which makes him eligible for Windows XP Mode.

Using the XP Mode or any other Microsoft Virtual PC vm is done over RDP connection, in other words if you run XP Mode you need RDP.

Kari
My System SpecsSystem Spec
01 May 2013   #9
Ztruker

Windows 10 Pro X64
 
 

Can you describe it in words? I can't follow the video, it's to small.
My System SpecsSystem Spec
01 May 2013   #10
UsernameIssues

W7 Pro SP1 64bit
 
 

Quote   Quote: Originally Posted by Ztruker View Post
Can you describe it in words? I can't follow the video, it's to small.
Even at 480p and full screened it does looks pretty bad:-(

While you are connected, the remote screen will be locked (per the norm). But if you disconnect from the RDC session using this line in a batch file...
Code:
tscon.exe 1 /dest:console
...then the remote computer should unlock.

The batch file must be run as admin and the number 1 might be another number if there are more than one person logged on to the remote computer (switch user). Task manager can show you the session that you are disconnecting from by adding the Session ID column to the Processes tab.
My System SpecsSystem Spec
Reply

 Windows 7 Remote Desktop Keeps Reappearing




Thread Tools




Similar help and support threads
Thread Forum
Deleted folder keeps reappearing on desktop
Hi, I have a folder on my desktop which I used as a temporary location for pictures and videos. Once it was empty I deleted it but every time I open my internet browser it pops up again. I am using Mozilla Firefox and have checked the download settings but this folder is not named in any path that...
General Discussion
Deleted Desktop Folder Keeps Reappearing
I have a folder on my PC's Desktop that will not stay deleted. It reappears after rebooting, shutting down and restarting and some times it seems to spontaneously reappear without a restart. I have loaded it with things to be deleted, then deleted it only to have it reappear again, but empty. I...
General Discussion
Remote features not working -remote desktop, WMC, iTunes remote, etc.
OS: Win8 64bit (My desktop is Win8, my laptop is Win7. We're dealing with the desktop here.) Where I am: university network, but these features seem to be working with my laptop. Things I've checked: allowing services through Windows Firewall (Bonjour, WMC services, etc.) Allowing remote...
Network & Sharing
Infection Of Windows Through Remote Access/Remote Desktop
This morning, I heard a nationally syndicated computer expert state that some Chinese hackers were "getting into" Windows based computers through "Remote Access/Remote Desktop" even if the service is turned off. According to the guru, "They will turn it on for you." Being very concrete, as well...
System Security
Desktop computer disappearing and reappearing on network (from Laptop)
Hello, I have trawled the forums and have googled and can't seem to find anything that seems to be able to resolve the situtation. I have a windows7 home laptop and a Windows XP desktop. There are connected through a wireless modem. For ages the laptop could find the desktop no worries,...
Network & Sharing
Reappearing folder on desktop at startup
hello, as stated above i have a folder which keeps reappearing every time i start my computer, it's an empty folder and no other program is using it. tried removing it in safe mode and from the registry, but no results. can someone help me? thank you in advance!
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:13.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App