Re: corrupted Microsoft programs

From: Steven Umbach [MVP] (n9rou_at_nsattbi.com)
Date: 07/10/03


Date: Thu, 10 Jul 2003 06:06:58 GMT


       Hard to say without seeing your computer as to what happened.
Corrupted generally means that a program would not start, stop, locks up,
refuses to load or save files, etc. What you described almost sounds like
someone did a reinstall or restore from backup on your computer - someone
who would have had administrator access. You could check the dates on your
winnt folder, your profile folder under document and settings, and maybe
some application folders under program files to see if they have very recent
dates. In my opinion, this type of thing did not happen without someone
turning on your computer while you were not at work . Unless auditing of
account log on events was enabled on your computer, it would be hard to get
more information - an even if it was a maliciuos user with administrator
privileges could have deleted the log. I would download Spybot Search and
Destroy and run it on your computer to check for things like a keyboard
logger. After that have the administrator account and any accounts in the
local administrator group change their passwords. Be sure to lock your
computer when not using it by using control+alt+del and selecting lock. Go
to http://scan.sygatetech.com/ and do at least a quick scan of the firewall
for any obvious vulnerabilities. --- Steve

http://security.kolla.de/

"Nancy O" <obernier@oacns.com> wrote in message
news:005601c3455d$0e6aef30$a101280a@phx.gbl...
> Came to work on Monday and all Microsoft programs on my
> computer, and only my computer were corrupted, we are on a
> network server with 8 computers. My computer acted as if I
> had just installed Windows 2000, Office 2000, Outlook
> Express etc etc. I was able to locate my documents in a
> different folder that had not been on my computer before.
> I lost everything in Outlook including address book and
> all emails.
> Any program that is not related to Microsoft is running
> normally.
> Any ideas what might have happened.
> My computer was shut down on Thursday before I left work.
> We do have a firewall that the network runs through and I
> have Virus software with current updates running, did scan
> for virus but did not find any.
> Nancy O
> Nancy O



Relevant Pages

  • Re: Lost XP User Account Settings
    ... file ownership and permissions supersede administrator rights. ... This is not your administrator account, ... Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ...
    (microsoft.public.windowsxp.accessibility)
  • Re: Windows Media player(transfering files between user accnts.)
    ... file ownership and permissions supersede administrator rights. ... This is not your administrator account, ... >> Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ...
    (microsoft.public.windowsxp.basics)
  • Re: Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... policy to rename the account although it is not really necessary or useful. ... Did I check Group Policies for references to the Administrator ... Failed to perform redirection of folder Desktop. ...
    (microsoft.public.windows.server.general)
  • Re: Wheres the saved files from deleted users
    ... I know I did not try logging in as Administrator - can I do that? ... If you renamed the account to Board, that wouldn't have renamed the user ... profile folder; that would still be Bill Hepburn. ... However, if this is *your* user profile, it's very odd you can't see the ...
    (microsoft.public.windowsxp.general)
  • Re: Deleting Multiple Users
    ... You cannot log on to the Administrator account except in safe mode. ... The Windows folder in the David folder is nothing to worry about--it is ...
    (microsoft.public.windowsxp.setup_deployment)