Accounts With Blank Passwords Show Password Protected Again

[Guest The Computer Lab of Zephyrhills]

This is a Dell Dimension 4600 with XP PRo still with SP1. When I remove all

four user's passwords they show cleared; then if I return right back to the

Users applet, they show they are password protected again. Did this six

times. The password asked for is unknown. Does not affect the "Test"

account I created.

 

So, I'll go for a malware infection but need what cleaning tool to look for

besides re-Ghosting the machine. That would be too easy but I am always

curious for detailed fixes.

[Guest Malke]

Re: Accounts With Blank Passwords Show Password Protected Again

 

The Computer Lab of Zephyrhills wrote:

> This is a Dell Dimension 4600 with XP PRo still with SP1. When I remove

> all four user's passwords they show cleared; then if I return right back

> to the

> Users applet, they show they are password protected again. Did this six

> times. The password asked for is unknown. Does not affect the "Test"

> account I created.

>

> So, I'll go for a malware infection but need what cleaning tool to look

> for

> besides re-Ghosting the machine. That would be too easy but I am always

> curious for detailed fixes.

 

Go through these general malware removal steps systematically -

http://www.elephantboycomputers.com/page2.html#Removing_Malware

 

Include scanning with David Lipman's Multi_AV and follow instructions to do

all scans in Safe Mode.

 

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions

http://tinyurl.com/yoeru3 - download link and more instructions

 

When all else fails, get guided help. Choose one of the specialty forums

listed at the first link. Register and read its posting FAQ. You will

generally be asked to:

 

1. Download and execute HiJack This! (HJT) -

http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

 

2. Disable Notepad's word wrap - In Notepad.exe; Format --> uncheck; "Word

wrap"

 

3. Download/run Deckard's System Scanner -

http://www.techsupportforum.com/sectools/Deckard/dss.exe

 

4. Save the scan results (Main.txt and Extra.txt)

 

5. And then post the contents of Main.txt and Extra.txt in your post at the

forum you chose. DO NOT POST LOGS IN THE MS NEWSGROUPS.

 

Malke

--

MS-MVP

Elephant Boy Computers

http://www.elephantboycomputers.com

Don't Panic!