Tech Support > Computers & Technology > Computer Security > Norton Ghost- HACKED by my coworker - What would you do?
Norton Ghost- HACKED by my coworker - What would you do?
Posted by . on July 2nd, 2006


HI All,
I've been violated...

I was away sick for a week from the office, & came back to find that a
co-worker had hacked past my windows login, blanked-out my
administrator password and installed Norton Ghost.

I think that I've disabled ghost from making any backups of my drive
but can't be 100 percent certain.

They can't accuse him directly, & mgmt isn't 100% behind me in finding
proof of what's been done... untill I can.

his PC has windows installed twice, & there's three user-login's per
version of windows (both xp pro.. & don't ask why. your guess is as
good as mine.)

I know he's used a program called folderlock to hide files/folders on
his pc previously & got in shit for it.. now I/we can't be certain he
hasn't installed in in my pc. hidden ghost & the folderlock program
itself. And.. if he hasn't copied my files to his system & hidden
them. I have 200GB of archives of "secure?" office data that was
not to be accessible to all employees.

Is there a workaround for Folder Lock® - by NewSoftwares.net Inc.
(version unknown)

Can I disable firewire on boot at bios or level?
I also have a brand-new network connection that previously didn't
exist labled "firewire".

Since then, I've installed the bios password,
disabled floppy/cd/dvd on boot,
changed all account names & pwds.
but he could have installed & hidden a keylogger also?


We've arranged for a computer shop to take a look at his system &
verify if there's any of my files on his system, but that won't happen
untill next week.

Any suggestions, or thoughts beforehand?
What would you do?
Clean install of windows on new HD & copy over files to keep?

B

Posted by David H. Lipman on July 2nd, 2006


From: "." <bc_pa@axxent.ca>

| HI All,
| I've been violated...
|
| I was away sick for a week from the office, & came back to find that a
| co-worker had hacked past my windows login, blanked-out my
| administrator password and installed Norton Ghost.
|
| I think that I've disabled ghost from making any backups of my drive
| but can't be 100 percent certain.
|
| They can't accuse him directly, & mgmt isn't 100% behind me in finding
| proof of what's been done... untill I can.
|
| his PC has windows installed twice, & there's three user-login's per
| version of windows (both xp pro.. & don't ask why. your guess is as
| good as mine.)
|
| I know he's used a program called folderlock to hide files/folders on
| his pc previously & got in shit for it.. now I/we can't be certain he
| hasn't installed in in my pc. hidden ghost & the folderlock program
| itself. And.. if he hasn't copied my files to his system & hidden
| them. I have 200GB of archives of "secure?" office data that was
| not to be accessible to all employees.
|
| Is there a workaround for Folder Lock® - by NewSoftwares.net Inc.
| (version unknown)
|
| Can I disable firewire on boot at bios or level?
| I also have a brand-new network connection that previously didn't
| exist labled "firewire".
|
| Since then, I've installed the bios password,
| disabled floppy/cd/dvd on boot,
| changed all account names & pwds.
| but he could have installed & hidden a keylogger also?
|
| We've arranged for a computer shop to take a look at his system &
| verify if there's any of my files on his system, but that won't happen
| untill next week.
|
| Any suggestions, or thoughts beforehand?
| What would you do?
| Clean install of windows on new HD & copy over files to keep?
|
| B

Co-worker ?

Please contact your network administrator/MIS/IT personnel.

If it was modified by a co-worked it is an actionable offense.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Similar Posts