log in accounts being assigned passwords by virus

anyone know how to remove a virus which assigns passwords to every user account... in windows xp .. hence locking out users... My Macfee cant detect...

is it in a network environment? any servers? On Wed, Nov 24, 2010 at 11:27 AM, Jacinta Gugu <jess.gugu@gmail.com> wrote:
anyone know how to remove a virus which assigns passwords to every user account... in windows xp .. hence locking out users...
My Macfee cant detect...
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- No mountain is too high to keep you from Climbing it.... Life is not about waiting for storms to pass....it's about learning how to dance in the rain,or even swim when necessary ** Lawrence K +254737103681

nop stand alone machine On Wed, Nov 24, 2010 at 11:32 AM, Lawrence Kago <lawrencekago@gmail.com>wrote:
is it in a network environment? any servers?
On Wed, Nov 24, 2010 at 11:27 AM, Jacinta Gugu <jess.gugu@gmail.com>wrote:
anyone know how to remove a virus which assigns passwords to every user account... in windows xp .. hence locking out users...
My Macfee cant detect...
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- No mountain is too high to keep you from Climbing it....
Life is not about waiting for storms to pass....it's about learning how to dance in the rain,or even swim when necessary **
Lawrence K +254737103681
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

On Wed, Nov 24, 2010 at 11:33 AM, Jacinta Gugu <jess.gugu@gmail.com> wrote:
nop stand alone machine
Get UBCD <http://www.ubcd4win.com/downloads.htm>, boot off the CD and rip apart all the manifestations of that virus. I am sure you've already read how it manifests itself. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!

Jacinta, even easier,log in to the machine using safe mode and type in the run prompt "msconfig" and disable the "suspicious programs. yours in this case is most likely a .vbs script running.look for a file or also blank under the startup item tab.Exercise extreme caution as any changes you make here may force you to repair your OS if you dont know how to undo them. -- A negative thinker sees a difficulty in every opportunity,A positive thinker sees an opportunity in every difficulty

I would suggest you rid the PCs of the virus first, using a bootable CD such as Kaspersky rescue disk or Windows PE. On Windows PE you may run mwav.exe [get it from http://bit.ly/gHp6sa] then reset the passwords using a tool such as active@ password changer. Good luck On 24 November 2010 12:01, joel eliakim <joeliakim@gmail.com> wrote:
Jacinta, even easier,log in to the machine using safe mode and type in the run prompt "msconfig" and disable the "suspicious programs. yours in this case is most likely a .vbs script running.look for a file or also blank under the startup item tab.Exercise extreme caution as any changes you make here may force you to repair your OS if you dont know how to undo them.
-- A negative thinker sees a difficulty in every opportunity,A positive thinker sees an opportunity in every difficulty
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
participants (5)
-
Jacinta Gugu
-
joel eliakim
-
Lawrence Kago
-
Odhiambo Washington
-
Simon Mbuthia