A friend of mine upgraded his account to group account and now his password is not accepted. And he used "Forgot logon info" to check if the password was changed and he copy+pasted the password from e-mail and he still can't log in. The account name is rsalumpit.

This is almost always caused by not updating "saved password" in some software (usually FTP client software) that remembers the old password.

If you keep logging on using a wrong password, then your account will be blocked for a couple hours until you stop logging on. Many FTP client programs remember your password and automatically retrying logon when logon failed. This causes your account being blocked. So please make sure you update all applications that have saved your old password, quit the application and wait for a couple hours.

It's been more than 10 hours since that account is not accessible with any password (old one or the new one - on e-mail the new one is sent but on login it's not accepted). What can be done? Is there a way to request a password reset hash via e-mail or something?

>> Dear rsalumpit, >> Below is your logon info as you have just requested. Using that logon information with copy+paste from e-mail after no FTP client was started for 10 hours this is what happens (on this website, not on FTP) : >> Logon failed! >> Please check your username/password and make sure your account is activated. As I see, this "feature" to block accounts indefinitely can be used by anyone to DoS any account. Is it enough for someone to send a wrong password every 10 hours for any account to block it indefinitely ? If this is what happens, what can be done to prevent this? What can someone do to "unblock" his account?

We have other anti-abuse and anti-DoS protections. However, please note in most cases, it is because users have installed some 3rd party software, which keeps retrying.

I see the user account is fine now. Please email customer support if you have any more questions. DriveHQ customer support can also change your username or block the attacking IP address as needed.

>> I see the user account is fine now. It still is exactly the same problem. Nothing has changed. The password is not accepted. How can 3rd party software on a fresh Windows install (without installing anything btw) try to access an account if the computer is off for 10 hours ?