Accounts With Blank Passwords Show Password Protected Again

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

The Computer Lab of Zephyrhills - 26 May 2008 23:48 GMT

This is a Dell Dimension 4600 with XP PRo still with SP1. When I remove all
four user's passwords they show cleared; then if I return right back to the
Users applet, they show they are password protected again. Did this six
times. The password asked for is unknown. Does not affect the "Test"
account I created.

So, I'll go for a malware infection but need what cleaning tool to look for
besides re-Ghosting the machine. That would be too easy but I am always
curious for detailed fixes.

Reply to this Message

Malke - 27 May 2008 00:43 GMT

> This is a Dell Dimension 4600 with XP PRo still with SP1. When I remove
> all four user's passwords they show cleared; then if I return right back
[quoted text clipped - 7 lines]
> besides re-Ghosting the machine. That would be too easy but I am always
> curious for detailed fixes.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. You will
generally be asked to:

1. Download and execute HiJack This! (HJT) -
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap - In Notepad.exe; Format --> uncheck; "Word
wrap"

3. Download/run Deckard's System Scanner -
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post at the
forum you chose. DO NOT POST LOGS IN THE MS NEWSGROUPS.

Malke

Signature

MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!

Reply to this Message