Accounts With Blank Passwords Show Password Protected Again

[The Computer Lab of Zephyrhills]

This is a Dell Dimension 4600 with XP PRo still with SP1. When I remove all
four user's passwords they show cleared; then if I return right back to the
Users applet, they show they are password protected again. Did this six
times. The password asked for is unknown. Does not affect the "Test"
account I created.

So, I'll go for a malware infection but need what cleaning tool to look for
besides re-Ghosting the machine. That would be too easy but I am always
curious for detailed fixes.

 

[Malke]

This is a Dell Dimension 4600 with XP PRo still with SP1. When I remove
all four user's passwords they show cleared; then if I return right back
to the
Users applet, they show they are password protected again. Did this six
times. The password asked for is unknown. Does not affect the "Test"
account I created.

So, I'll go for a malware infection but need what cleaning tool to look
for
besides re-Ghosting the machine. That would be too easy but I am always
curious for detailed fixes.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. You will
generally be asked to:

1. Download and execute HiJack This! (HJT) -
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap - In Notepad.exe; Format --> uncheck; "Word
wrap"

3. Download/run Deckard's System Scanner -
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post at the
forum you chose. DO NOT POST LOGS IN THE MS NEWSGROUPS.

Malke