PC Query

[merchant42]

There is a PC where I volunteer, that seems to have been tampered with, all the files that were on the PC are still there, but the Microsoft Office seems to have been reset and the AVG AV has gone.

Anybody have an idea on how this was done ?

 

[bigmck]

What do you mean the "MS Office was reset"? == Does the PC have a password so only a few can enter it? If so those would be the people to ask.

 

[merchant42]

PC has a password, and it was not the person who had the password, I should have stated that, sorry, what I am asking is there a way to do what I queried via another means (cd or Dvd or memory stick) to introduce something onto the PC that would make it do what I have described

MS Office Outlook had been setup so that it would automatically open the charity email addies, now it is telling us to re-enter everything

 

[Layback Bear]

merchant42 I think you are asking us to help you do something on this computer that you do not have administration rights or passwords.

We will not help do this as per our rules.
Rule #6 should apply.

 

[merchant42]

no I am not asking that, I am asking if anyone knows how someone could do what I described,

I am trying to figure out how someone could have done it.

Also I do have admin rights and the PC password which the administrator gave to me yesterday

 

[DavidE]

Is the PC in an open/public area where anyone can walk up and use it ?
Is it in a secured/office location ?
Who has access to the PC ?
Can anyone use the PC (with a limited or guest account), or just the people with the admin password using the admin ID?

 

[Layback Bear]

Anybody with the admin password could do this.
They could of changed the password so the old password doesn't work any more. If I remember correctly their are infection that can cause this to happen.

These tutorials might be helpful.
By Bare Foot Kid.

http://www.sevenforums.com/tutorials/65207-password-reset-using-system-restore-windows-7-a.html

By Brink.

http://www.sevenforums.com/tutorials/7417-built-administrator-account-change-name.html

 

[Alejandro85]

Another posibility is that the administrator created a second user account and set autologin into it, thus all programs in the new user account are asking for new per-user settings. You can easily check this by looking at control panel.

 

[merchant42]

Thanks to all for your replies, there was no second account, and the PC would not let me install anything, I have done a System Restore, and I will have to go in today as the PC reverted and Locked me out ! as I did not know the password from the date that I restored it back too.

I have now got an email from the Admin with the pw for that date so fingers crossed everything will be back to what it was

Still does not tell me how it was done

 

[Layback Bear]

We have no way of telling you what was done and/or by whom.