The Computer Lab of Zephyrhills wrote:
> This is a Dell Dimension 4600 with XP PRo still with SP1. When I remove
> all four user's passwords they show cleared; then if I return right back
> to the
> Users applet, they show they are password protected again. Did this six
> times. The password asked for is unknown. Does not affect the "Test"
> account I created.
>
> So, I'll go for a malware infection but need what cleaning tool to look
> for
> besides re-Ghosting the machine. That would be too easy but I am always
> curious for detailed fixes.
Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/...moving_Malware
Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode.
http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions
When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. You will
generally be asked to:
1. Download and execute HiJack This! (HJT) -
http://www.trendsecure.com/portal/en...HJTInstall.exe
2. Disable Notepad's word wrap - In Notepad.exe; Format --> uncheck; "Word
wrap"
3. Download/run Deckard's System Scanner -
http://www.techsupportforum.com/sect...eckard/dss.exe
4. Save the scan results (Main.txt and Extra.txt)
5. And then post the contents of Main.txt and Extra.txt in your post at the
forum you chose. DO NOT POST LOGS IN THE MS NEWSGROUPS.
Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!