Re: help! administrator password bared to all

From: annalee (milleniumwildcat@msn.com)
Date: 06/02/02 

From: "annalee" <milleniumwildcat@msn.com>
Date: Sat, 1 Jun 2002 18:23:55 -0700

Thanks Bryce - i have already changed my computer's
password and name, plus added "new user" - but I'm not
sure how to "wipe and load of the machine"; and dont
worry - NOT ONLINE ON MINE! (computer, that is). -Also,
the trojan JS.ExceptionExploit tried to assault my
computer twice and i have read very bad things about this
one - it gets access to passwords, etc. - do they (the
heathen hackers)possibly have my info? - my Norton caught
and SAID it deleted it, but Norton online scan said still
in memory - Norton wanted me to buy a recovery disc -
trendvirus caught it also on online scan and easily
deleted the files - but then that brings up a whole new
story...>-----Original Message-----
> Yikes, A complete wipe and load of the machine and
restoration of all
>data from a last known good backup is highly recommended
after any
>root-level compromise. I wouldn't bring it back onto
the net (including
>your intranet) until you've done so. His advice about
logging on as admin
>to do admin things, and doing everything else as a
limited user is good
>advice. Lots of work, but what he's indirectly taught
you is that when
>you're logged on as an admin, any piece of executable
code you run has the
>potential to cost you hours or days of work in
recovering from a serious
>breach of security, whereas if you're logged on as a
limited user, all you
>need to do is delete that user profile.
>
>-Bryce
>
>"annalee" <anna@anna.com> wrote in message
>news:93fb01c209c2$a40a7790$9ee62ecf@tkmsftngxa05...
>> A big problem here! i emailed my workplace computer a
>> calendar via my email; the next day the other secretary
>> and i opened the email to pick out 1 of my calendars.
>> When checking our company's mail we always right-click
>> the email header and view "message source". Especially
>> since we were receiving 5 to 8 emails per day "ala
Klez"!
>> (message source sender for Klez was "net.magic"; Yea,
>> right - we've seen this magic before and hex is the
>> better word). We received 24 total before linked
>> businesses cleared up. Thankfully we were unscathed
>> (norton deleted all), but when i checked email sent by
me
>> on "message source", ---THERE WAS MY COMPUTER'S
PASSWORD,
>> id #, data, etc. I read the article "why you should not
>> run your computer as administrator" in Microsoft help
but
>> still unsure EXACTLY what to do. Can i just add "new
>> user" in outlook? Thanks ahead for help! Am afraid to
use
>> my own computer! - miss novice annalee
>
>
>
>
>.
>

Relevant Pages

  • Re: Norton Personal Firewall 2003.......HELP PLEASE!!!!
    ... NOT UNLESS THE CHRYSLER WAS TOWING MY TOYOTA!!!!!! ... it works in admin account and not in "USER" accounts. ... > I would probably recommend asking in the free Norton support group at ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Application failed to initialize- Oxc0000022
    ... messages but system won't run Norton and presumably other progs. ... Fortunately my Admin. ... grant the Read & Execute permission to the Users ... Identify a Damaged User Profile and Create a New Profile in Windows ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Internet Explorer 8 Error Messages and Dump File
    ... the Norton Internet Security folder I just found. ... unnecessary apps that load down a PC and cause an overall ...
    (microsoft.public.windowsxp.general)
  • Re: VERY VERY BAD... Help???!
    ... I get the impression that you load more or less ... any garbage onto your pc and then expect Norton System Works to fix the ... NSW, in my humble opinion, is one of the worst pieces of garbage ... that anybody can install on a computer (or anything Norton).. ...
    (microsoft.public.windowsxp.general)
  • VIRUS
    ... to follow the instrucrions to remove norton,and load ... never load Norton or mcAfee again.This is a great product ... >I've got another virus. ... >then vendor has an anti-virus program running). ...
    (microsoft.public.windowsxp.perform_maintain)