Need access method for administrative lockout

[Scott Richardson]

About a week ago, my personal computer was hacked by
someone using the "expIorer.exe" trojan. Once gaining
access to my machine, they subsequently changed the local
security policy denying "Administrator" (me) local logon
access to my machine once my machine force-restarted.
What is the quickest and most effective way to return
local logon control of my machine to me?

 

[Steven L Umbach]

See link below for two possibilities that will require access from another network
computer assuming that is not locked out also. Otherwise you will need to reinstall
operating system. You could boot from cdrom and then choose to install into existing
\winnt folder without doing any formatting. Your data files should be preserved
unless they were EFS encrypted and you will have to reinstall all applications on top
of themselves and then go to Windows Update to install service pack and critical
updates. Do not connect to the internet until you have a firewall either at the
cable/dsl modem or one of the free personal one's installed such as Zone Alarm,
Sygate, or Kerio. Zone Alarm would be my last choice but it is easiest for novices.
You would also have a new user profile created but your old one should still be
available under the documents and settings folder. Personally if it was my computer,
I would put the hard drive in another W2K/XP computer that has up to date virus
protection and then I would scan the drive for viruses and copy my data files. Then I
would reformat the whole drive and do a fresh install of W2K. --- Steve

http://www.jsiinc.com/SUBG/TIP3300/rh3361.htm
http://www.microsoft.com/security/protect/

 

[Bobby McMillan [MSFT]]

Scott,
Take a look at this:

276590 Error Message: The Local Policy of This System Does Not Permit You to
http://support.microsoft.com/?id=276590

This will only work if they have not set the "access computer from the
network" policy as well.

good luck, Let me know what I can offer


This posting is provided "AS IS" with no warranties, and confers no rights.