I don't think it's that complicated personnally. You did say they just rezzed next to you in-world yes? In this case subsequent login attempts then force the avatar offline and you can connect again afterwards or the avatar remains locked in-world - In that case until either a in-world time-out or in the worst case, a region restart is needed. Vanilla's postulation is interesting however I believe this shows up when your session disconnects and your avatar stays in-world 'disconnected' from a session. Or worst, you created a password named 'password' or some such simple thing. Way 6 - You shared a password with a really trusted friend in SL who you have never met. Way 5 - The SL server code totally screwed up and mis-directed the Avatar Updates to the wrong PC & Mac Address on your home network. Way 4 - They've created incredibly complicated password intercept software using the directions found on a slip of paper dropped by a Russian Mafia member. Way 1a - They have on of those password memorizing utilities for folks that hate to remember their passwords and you used their PC to login in once to SL. Way 1 - You logged onto your Avatar account from their PC and forgot that the default option to save the password is turned on with several TPVs.