Skunkers, i have a computer that keeps on changing the windows XP password, i bought Kaspersky, installed updated and scanned but to no avail, also there is an installation that keeps on popping up and even when i try to stop it or cancel, it doesnt go away, kindly assist -- "do not look at where you fell but where you slipped" -African Proverb
Hi Joel, Kindly send more details ie how frequent does the password change? what application tries to install? What information accompanies the pop ups and what information is presented when you try to cancel the installation? Regards, Wilson. On Wed, Jan 5, 2011 at 11:33 AM, joel eliakim <joeliakim@gmail.com> wrote:
Skunkers, i have a computer that keeps on changing the windows XP password, i bought Kaspersky, installed updated and scanned but to no avail, also there is an installation that keeps on popping up and even when i try to stop it or cancel, it doesnt go away, kindly assist -- "do not look at where you fell but where you slipped" -African Proverb
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
teach time i log in the admin account using safemode and remove the passwords for the other users and restart the machines, i am able to lig in using any of the passwords but after a few minutes after startup theres is an application that asks for the setup disk for a program called status,when i cancel the installation it comes up again, that aside, when i go to the user accounts and click on usersi find that the usernames that i removed the passwords now are password protected. it is for a user in my org and i am really avoiding re installation of the OS, -- "do not look at where you fell but where you slipped" -African Proverb
When you're logged in in safe mode, try and get the process name for the pop up and get its location and delete it. Then you can scan your registry using ccleaner or wintools and delete broken references. On 5 January 2011 11:55, joel eliakim <joeliakim@gmail.com> wrote:
teach time i log in the admin account using safemode and remove the passwords for the other users and restart the machines, i am able to lig in using any of the passwords but after a few minutes after startup theres is an application that asks for the setup disk for a program called status,when i cancel the installation it comes up again, that aside, when i go to the user accounts and click on usersi find that the usernames that i removed the passwords now are password protected. it is for a user in my org and i am really avoiding re installation of the OS,
-- "do not look at where you fell but where you slipped" -African Proverb
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Two words for you: Combofix Drweb Cureit On Wed, Jan 5, 2011 at 3:10 PM, Simon Mbuthia <simon.mbuthia@gmail.com>wrote:
When you're logged in in safe mode, try and get the process name for the pop up and get its location and delete it. Then you can scan your registry using ccleaner or wintools and delete broken references.
On 5 January 2011 11:55, joel eliakim <joeliakim@gmail.com> wrote:
teach time i log in the admin account using safemode and remove the passwords for the other users and restart the machines, i am able to lig in using any of the passwords but after a few minutes after startup theres is an application that asks for the setup disk for a program called status,when i cancel the installation it comes up again, that aside, when i go to the user accounts and click on usersi find that the usernames that i removed the passwords now are password protected. it is for a user in my org and i am really avoiding re installation of the OS,
-- "do not look at where you fell but where you slipped" -African Proverb
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Am thinking someone is hacking into your XP. XP has very poor security, change the password and make sure you are the only one with physical access to the computer for at least a week and see if it keeps changing anymore(during that period). Back in College, we used to do that to the computers at the lab so that we could get administrative privileges to install programs "we needed" like IDM.
thanks On Wed, Jan 5, 2011 at 4:25 PM, Derrick Wesonga <wesongaderrick@gmail.com>wrote:
Am thinking someone is hacking into your XP. XP has very poor security, change the password and make sure you are the only one with physical access to the computer for at least a week and see if it keeps changing anymore(during that period). Back in College, we used to do that to the computers at the lab so that we could get administrative privileges to install programs "we needed" like IDM.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- "do not look at where you fell but where you slipped" -African Proverb
Sounds like some malware that has been doin rounds on campus. Try another av like avira On 1/5/11, joel eliakim <joeliakim@gmail.com> wrote:
thanks
On Wed, Jan 5, 2011 at 4:25 PM, Derrick Wesonga <wesongaderrick@gmail.com>wrote:
Am thinking someone is hacking into your XP. XP has very poor security, change the password and make sure you are the only one with physical access to the computer for at least a week and see if it keeps changing anymore(during that period). Back in College, we used to do that to the computers at the lab so that we could get administrative privileges to install programs "we needed" like IDM.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- "do not look at where you fell but where you slipped" -African Proverb
-- Regards, Mark Mwangi http://mwangy.posterous.com Skype : mark.mwangy
Try scanning with Kaspersky in directory services restore mode that will sort out your issues in case its a malware that is residing on that. On 5 January 2011 11:33, joel eliakim <joeliakim@gmail.com> wrote:
Skunkers, i have a computer that keeps on changing the windows XP password, i bought Kaspersky, installed updated and scanned but to no avail, also there is an installation that keeps on popping up and even when i try to stop it or cancel, it doesnt go away, kindly assist -- "do not look at where you fell but where you slipped" -African Proverb
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
directory services restore mode?and i am using XP? -- "do not look at where you fell but where you slipped" -African Proverb
participants (7)
-
Derrick Wesonga -
Joe Maina -
joel eliakim -
Mark Mwangi -
Samuel Wachira -
Simon Mbuthia -
Wilson Bandi