laptop stolen, then returned, but...

[Maggie]

Church laptop was stolen then returned but it seems
that the thief tried to delete Administrator user. I can't
log on with Administrator. Or maybe they changed the
password. It is xp home. I have gone into safe mode
and created a new user and gave that user admin privileges.
But something isn't working. When I try to go into administrator
as a user, it says it doesn't have permission.

Any help??
Thanks

 

[David H. Lipman]

You can't trust a thief.
You can't trust the notebook now either!

To be on the safe side, WIPE the notebook and reinstall the OS and applications.

Dave




| Church laptop was stolen then returned but it seems
| that the thief tried to delete Administrator user. I can't
| log on with Administrator. Or maybe they changed the
| password. It is xp home. I have gone into safe mode
| and created a new user and gave that user admin privileges.
| But something isn't working. When I try to go into administrator
| as a user, it says it doesn't have permission.
|
| Any help??
| Thanks
|
|

 

[R. McCarty]

If the notebook contained any type of Financial or login data
that could be accessed you should change appropriate passwords
and notify financial institutions about possible breach of account
security.

For security purposes on a Notebook - I would enable a BIOS
password. This makes it necessary to type it in at turn on to boot
the computer. While not fool (Thief) proof, it makes it harder to
access data.

 

[Malke]

Church laptop was stolen then returned but it seems
that the thief tried to delete Administrator user. I can't
log on with Administrator. Or maybe they changed the
password. It is xp home. I have gone into safe mode
and created a new user and gave that user admin privileges.
But something isn't working. When I try to go into administrator
as a user, it says it doesn't have permission.

Since your computer was in hostile hands, IMO it would be foolish for
you to do anything but format the drive and clean install Windows. You
have no idea whether the machine has been compromised, backdoor trojan
installed, etc. Most laptops come with either a Recovery Disk or a
process to start the mftr.'s Recovery Program. Refer to your manual or
information on the mftr.'s website for how to do this. Do *not* do a
Repair Install. You should return the laptop to factory-condition.

Malke

 

[David H. Lipman]

Thank you. I should have included that information. I'm sorry I left it out :-(

Dave



| If the notebook contained any type of Financial or login data
| that could be accessed you should change appropriate passwords
| and notify financial institutions about possible breach of account
| security.
|
| For security purposes on a Notebook - I would enable a BIOS
| password. This makes it necessary to type it in at turn on to boot
| the computer. While not fool (Thief) proof, it makes it harder to
| access data.

 

[Maggie]

Thanks all. I used some data recovery software to get the files I really
wanted. This computer is primarily used for children's church and does
not contain any financial info. Mostly, it was power point shows that had
been created around songs. The info was important in terms of the time it
took to create all the shows. But I have them safely on a cd now. So I
will format and reinstall. Thanks all. By the way, it appears that all
they
did was first to delete (probably thinking they were going to keep the
laptop),
and change passwords (which were blank).

Then they repented of their theft and were able to sneak the laptop back
into the building to a place where it would be found.

thanks all,
m

 

[Maggie]

It now appears that the thief simply deleted some files and change the
password
on the main user.

Is there a way to get that password for the main user? It is winxp home.

thanks,
m

 

[David H. Lipman]

No. Wipe and reinstall.

Please -- Don't play with it and don't connect it to a LAN or ISP without extensively
checking it for; spam zombies, remote access Trojans, viruses, spyware and other malware !

Dave



| It now appears that the thief simply deleted some files and change the
| password
| on the main user.
|
| Is there a way to get that password for the main user? It is winxp home.
|
| thanks,
| m
|
|

 

[Guest]

http://home.eunet.no/~pnordahl/ntpasswd/


Yes there is, follow the link, however it's best if you format and do a
clean install