ctl-alt-del forces reboot

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi

Dell GX270 / XP pro

We've had 3 machines in 2 days in which ctl-alt-del forces the machine
to reboot rather than bring up the login screen. The fact that this has
never happened before and now has started makes me suspicious that one
of the students has found a way to trigger this! We have a bios setup
password so they aren't getting into that (so far as I know LOL), and
they shouldn't be able to access system settings either.

Just a long shot, but has anybody out there seen anything like this before?

tia
andy
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCXQn3qmlxlf41jHgRAsYFAJ9GzX18arpgYGVvZfFIRaoC8zzplQCfcMus
uJYRRyj+jKZzou1kvgNXDWU=
=M16Z
-----END PGP SIGNATURE-----

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Hi Andy.

Having fun with the students again??

I don't really know what is happening offhand but I would try booting into
safe mode to see if it still happens and if it does not then they may have
installed something on the computer. You could also try to use another
computer to access the problem computer remotely to see what shows in Event
Viewer and for running processes. You can use Computer Management and
msinfo32 to view other computers Event Viewer and processes. I also like
psexec from Sysinternals to get a command prompt of a remote computer on my
admin desktop if you have never tried that. If Remote Desktop is available
on those computers then that may be another option to connect to see what is
going on and possibly even run a spyware/malware scanner that way. It is
great that you are using cmos passwords and such but it may not be that hard
to crack those passwords with free utilities since I assume these students
have physical access to those computers. Good luck. --- Steve

http://www.sysinternals.com/ntw2k/freeware/psexec.shtml -- psexec
http://www.sysinternals.com/ntw2k/freeware/rootkitreveal.shtml -- something
else for your arsenal

"andy smart" <anonymus@discussions.microsoft.com> wrote in message
news:d3j1lp$a9p$1@newsfeed.th.ifl.net...
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi
>
> Dell GX270 / XP pro
>
> We've had 3 machines in 2 days in which ctl-alt-del forces the machine
> to reboot rather than bring up the login screen. The fact that this has
> never happened before and now has started makes me suspicious that one
> of the students has found a way to trigger this! We have a bios setup
> password so they aren't getting into that (so far as I know LOL), and
> they shouldn't be able to access system settings either.
>
> Just a long shot, but has anybody out there seen anything like this
> before?
>
> tia
> andy
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.5 (MingW32)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
>
> iD8DBQFCXQn3qmlxlf41jHgRAsYFAJ9GzX18arpgYGVvZfFIRaoC8zzplQCfcMus
> uJYRRyj+jKZzou1kvgNXDWU=
> =M16Z
> -----END PGP SIGNATURE-----

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

I've made progress with this - it booted into safe mode but not safe
mode with networking. Then I noticed that the date was set to 2099 and
the time zone to Tonga! Put this right and hey presto it boots! Little
horrors... Got to be alert for that one.

Steven L Umbach wrote:
> Hi Andy.
>
> Having fun with the students again??
>
> I don't really know what is happening offhand but I would try booting into
> safe mode to see if it still happens and if it does not then they may have
> installed something on the computer. You could also try to use another
> computer to access the problem computer remotely to see what shows in Event
> Viewer and for running processes. You can use Computer Management and
> msinfo32 to view other computers Event Viewer and processes. I also like
> psexec from Sysinternals to get a command prompt of a remote computer on my
> admin desktop if you have never tried that. If Remote Desktop is available
> on those computers then that may be another option to connect to see what is
> going on and possibly even run a spyware/malware scanner that way. It is
> great that you are using cmos passwords and such but it may not be that hard
> to crack those passwords with free utilities since I assume these students
> have physical access to those computers. Good luck. --- Steve
>
> http://www.sysinternals.com/ntw2k/freeware/psexec.shtml -- psexec
> http://www.sysinternals.com/ntw2k/freeware/rootkitreveal.shtml -- something
> else for your arsenal
>
> "andy smart" <anonymus@discussions.microsoft.com> wrote in message
> news:d3j1lp$a9p$1@newsfeed.th.ifl.net...
>
> Hi
>
> Dell GX270 / XP pro
>
> We've had 3 machines in 2 days in which ctl-alt-del forces the machine
> to reboot rather than bring up the login screen. The fact that this has
> never happened before and now has started makes me suspicious that one
> of the students has found a way to trigger this! We have a bios setup
> password so they aren't getting into that (so far as I know LOL), and
> they shouldn't be able to access system settings either.
>
> Just a long shot, but has anybody out there seen anything like this
> before?
>
> tia
> andy

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

That's a new one for me that the wrong time caused a reboot when trying to
logon. Good job tracking it down. --- Steve


"andy smart" <anonymus@discussions.microsoft.com> wrote in message
news:d48910$c3f$1@newsfeed.th.ifl.net...
> I've made progress with this - it booted into safe mode but not safe
> mode with networking. Then I noticed that the date was set to 2099 and
> the time zone to Tonga! Put this right and hey presto it boots! Little
> horrors... Got to be alert for that one.
>
> Steven L Umbach wrote:
>> Hi Andy.
>>
>> Having fun with the students again??
>>
>> I don't really know what is happening offhand but I would try booting
>> into
>> safe mode to see if it still happens and if it does not then they may
>> have
>> installed something on the computer. You could also try to use another
>> computer to access the problem computer remotely to see what shows in
>> Event
>> Viewer and for running processes. You can use Computer Management and
>> msinfo32 to view other computers Event Viewer and processes. I also like
>> psexec from Sysinternals to get a command prompt of a remote computer on
>> my
>> admin desktop if you have never tried that. If Remote Desktop is
>> available
>> on those computers then that may be another option to connect to see what
>> is
>> going on and possibly even run a spyware/malware scanner that way. It is
>> great that you are using cmos passwords and such but it may not be that
>> hard
>> to crack those passwords with free utilities since I assume these
>> students
>> have physical access to those computers. Good luck. --- Steve
>>
>> http://www.sysinternals.com/ntw2k/freeware/psexec.shtml -- psexec
>> http://www.sysinternals.com/ntw2k/freeware/rootkitreveal.shtml --
>> something
>> else for your arsenal
>>
>> "andy smart" <anonymus@discussions.microsoft.com> wrote in message
>> news:d3j1lp$a9p$1@newsfeed.th.ifl.net...
>>
>> Hi
>>
>> Dell GX270 / XP pro
>>
>> We've had 3 machines in 2 days in which ctl-alt-del forces the machine
>> to reboot rather than bring up the login screen. The fact that this has
>> never happened before and now has started makes me suspicious that one
>> of the students has found a way to trigger this! We have a bios setup
>> password so they aren't getting into that (so far as I know LOL), and
>> they shouldn't be able to access system settings either.
>>
>> Just a long shot, but has anybody out there seen anything like this
>> before?
>>
>> tia
>> andy