Password pretyped
Marc K.04-01-04, 05:35 AMsomethingI upgraded our WIN 2000 Servers from SP3 to SP4, we are using a well known Antivirus-protection with daily updates. This morning my boss came to me and told me, angry and surprised, that he must not enter his password to login the system. After starting h
is pc following by pressing Ctrl-Alt-del his username and his password (hidden with the right amount of stars) was already typed in!!! He could just proceed to type enter to login his profile.
Does anyone know what happened and how this could be eliminated?
Steven L Umbach04-02-04, 11:29 PMsomethingI have never seen that and I use SP4. Does it happen when he boots into safe mode??
If not an application/process/service [non MS, possibly malicious] is causing it to
happen and you will need to do more investigation with something like msconfig from
an XP box to do selective startup. Check Event Viewer to see if anything is recorded
there that may give you a clue. Make sure you do a complete virus scan on it and a
trojan scan. and use something like process Explorer from SysInternals to see if you
can find anything unusual in reported processes. See the link from the FAQ for things
to do including links to trojan scan programs. I would consider the computer
compromised unless you can come up with a plausible explanation. --- Steve
http://securityadmin.info/faq.asp#virustoc
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml
"Marc K." <anonymous@discussions.microsoft.com> wrote in message
news:1FFE9906-24DE-4790-8168-5B8310B30572@microsoft.com...
> I upgraded our WIN 2000 Servers from SP3 to SP4, we are using a well known
Antivirus-protection with daily updates. This morning my boss came to me and told me,
angry and surprised, that he must not enter his password to login the system. After
starting his pc following by pressing Ctrl-Alt-del his username and his password
(hidden with the right amount of stars) was already typed in!!! He could just proceed
to type enter to login his profile.
>
> Does anyone know what happened and how this could be eliminated?
is pc following by pressing Ctrl-Alt-del his username and his password (hidden with the right amount of stars) was already typed in!!! He could just proceed to type enter to login his profile.
Does anyone know what happened and how this could be eliminated?
Steven L Umbach04-02-04, 11:29 PMsomethingI have never seen that and I use SP4. Does it happen when he boots into safe mode??
If not an application/process/service [non MS, possibly malicious] is causing it to
happen and you will need to do more investigation with something like msconfig from
an XP box to do selective startup. Check Event Viewer to see if anything is recorded
there that may give you a clue. Make sure you do a complete virus scan on it and a
trojan scan. and use something like process Explorer from SysInternals to see if you
can find anything unusual in reported processes. See the link from the FAQ for things
to do including links to trojan scan programs. I would consider the computer
compromised unless you can come up with a plausible explanation. --- Steve
http://securityadmin.info/faq.asp#virustoc
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml
"Marc K." <anonymous@discussions.microsoft.com> wrote in message
news:1FFE9906-24DE-4790-8168-5B8310B30572@microsoft.com...
> I upgraded our WIN 2000 Servers from SP3 to SP4, we are using a well known
Antivirus-protection with daily updates. This morning my boss came to me and told me,
angry and surprised, that he must not enter his password to login the system. After
starting his pc following by pressing Ctrl-Alt-del his username and his password
(hidden with the right amount of stars) was already typed in!!! He could just proceed
to type enter to login his profile.
>
> Does anyone know what happened and how this could be eliminated?