[OPLINTECH] Potential Computer Vandalism

Wed Nov 20 12:15:42 EST 2013

Dell’s solution is to send me new HDs.  Good news they are still under warranty – bad news is we are down for the next two days as we wait to get the HDs and get them reloaded.

Lesson learned – password protect your bios.

Mike Hensel

Director, MLIS

London Public Library

20 E. First Street

London, OH 43140

www.mylondonlibrary.org

740-852-9543

Mobile 614-325-1429

From: oplintech-bounces at lists.oplin.org [mailto:oplintech-bounces at lists.oplin.org] On Behalf Of Chad Morris
Sent: Wednesday, November 20, 2013 11:22 AM
To: oplintech at lists.oplin.org
Subject: Re: [OPLINTECH] Potential Computer Vandalism

Try this:  <http://www.wikihow.com/Break-a-BIOS-Password> http://www.wikihow.com/Break-a-BIOS-Password and  <http://bios-pw.org/> http://bios-pw.org/ and http://www.pwcrack.com/bios.shtml

Chad Morris

Technology Coordinator

Franklin-Springboro Public Library

44 E. Fourth Street

Franklin, OH 45005

Office:  (937) 746-2665 ext 116
Fax:     (937) 746-2847

Email:   <https://mail.oplin.org/webmail/src/compose.php?send_to=morrisch%40oplin.org> morrisch at oplin.org
www.fspl.org

From:  <mailto:oplintech-bounces at lists.oplin.org> oplintech-bounces at lists.oplin.org [ <mailto:oplintech-bounces at lists.oplin.org> mailto:oplintech-bounces at lists.oplin.org] On Behalf Of Mann, James H.
Sent: Wednesday, November 20, 2013 11:18 AM
To: Mike Hensel; 'Stephen Cram';  <mailto:oplintech at lists.oplin.org> oplintech at lists.oplin.org
Subject: Re: [OPLINTECH] Potential Computer Vandalism

Mike

Just for grins is “secure boot” enabled in the bios?

And, have you considered trying “crack” from a bootable drive?

Jim Mann

Technology Coordinator

Greene County Public Library

76 E. Market St

Xenia OH 45385

937 352 4000 x1210

 <http://www.greenelibrary.info/> Discover. Learn. Grow.

 <mailto:jmann at gcpl.lib.oh.us> jmann at gcpl.lib.oh.us

 <http://www.facebook.com/greenelibrary.info>  <http://twitter.com/#!/greenelibrary>  <http://www.youtube.com/greenelibrary>  <http://www.flickr.com/photos/greene-library> 

From:  <mailto:oplintech-bounces at lists.oplin.org> oplintech-bounces at lists.oplin.org [ <mailto:oplintech-bounces at lists.oplin.org> mailto:oplintech-bounces at lists.oplin.org] On Behalf Of Mike Hensel
Sent: Wednesday, November 20, 2013 11:11 AM
To: 'Stephen Cram';  <mailto:oplintech at lists.oplin.org> oplintech at lists.oplin.org
Subject: Re: [OPLINTECH] Potential Computer Vandalism

Stephen:

I cleared the Bios and tried reinstalling a new OS.  Basically the computer read the HD as having no access so that failed as Chad stated.  I need Dell to give me a backdoor password or the hard drives are unless. 

Mike Hensel

Director, MLIS

London Public Library

20 E. First Street

London, OH 43140

www.mylondonlibrary.org

740-852-9543

Mobile 614-325-1429

From:  <mailto:oplintech-bounces at lists.oplin.org> oplintech-bounces at lists.oplin.org [ <mailto:oplintech-bounces at lists.oplin.org> mailto:oplintech-bounces at lists.oplin.org] On Behalf Of Stephen Cram
Sent: Wednesday, November 20, 2013 10:51 AM
To: Oplin Tech list
Subject: Re: [OPLINTECH] Potential Computer Vandalism

All other issues aside, I believe you can salvage the hard drives by attaching to another PC and formatting them and then  re-installing it in the old PC and reloading Windows and beginning again.

And if you identify the culprit, I can send you some toothpicks to shove under their fingernails if you'd like.  I recently found gum shoved into an SD card reader so I'm saving some of my toothpicks for use here.

Stephen Cram

Facilities Coordinator

North Baltimore Public Library

I have been known to accomplish the impossible at times.  

However, accomplishing the impossible only means the boss will add it to your regular duties.

-------Original Message-------

From:  <mailto:henselmi at oplin.org> Mike Hensel

Date: 11/20/2013 9:21:21 AM

To:  <mailto:oplintech at lists.oplin.org> oplintech at lists.oplin.org

Subject: [OPLINTECH] Potential Computer Vandalism

OPLINTech Libraries:

I’ve got a situation where one of my patron computers last week booted up with a Security Manager Screen that basically needed a password to boot from the hard drive.  We run DeepFreeze on all of the computers.  I eventually had to get another hard drive sent from Dell.  Last night 5 more computers displayed the same message.  We lock the computers down with policies as well.  I have not seen any virus alerts pop up in Symantec.  We run Symantec Endpoint.  I don’t believe we had the bios locked down so the only thing I can think of is someone logged into the bios and setup an password on access to the HD which is leaving our machines dead. 

Has anyone run across this scenario and is there any easy fixes besides getting a new hard drive and rebuilding the machine.   I’m trying to determine if it was a local hack (patron at each machine) or virus.

Any help would be appreciated.

Mike Hensel

Director, MLIS

London Public Library

20 E. First Street

London, OH 43140

www.mylondonlibrary.org

740-852-9543

Mobile 614-325-1429

 <http://www.incredimail.com/?id=621131&did=10501&ppd=2812,201301281447,9,1,748381821347692543&rui=153799619&app_test_id=0&sd=20131120> FREE Animations for your email - by IncrediMail 

 <http://www.incredimail.com/?id=621131&did=10501&ppd=2812,201301281447,9,1,748381821347692543&rui=153799619&app_test_id=0&sd=20131120> Click Here! 

 <http://www.incredimail.com/?id=620777&did=10501&ppd=2741,201201221253,9,1,748381821347692543&rui=153799619&app_test_id=0&sd=20131120> ► 

 <http://www.incredimail.com/?id=621131&did=10501&ppd=2812,201301281447,9,1,748381821347692543&rui=153799619&app_test_id=0&sd=20131120> 

  <http://www2l.incredimail.com/gcontent/stamps/new2011/pixel.gif?upn=748381821347692543> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20131120/1c9bfbfa/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 1074 bytes
Desc: not available
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20131120/1c9bfbfa/attachment-0004.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1027 bytes
Desc: not available
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20131120/1c9bfbfa/attachment-0005.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 1157 bytes
Desc: not available
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20131120/1c9bfbfa/attachment-0006.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.jpg
Type: image/jpeg
Size: 1067 bytes
Desc: not available
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20131120/1c9bfbfa/attachment-0007.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.gif
Type: image/gif
Size: 34603 bytes
Desc: not available
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20131120/1c9bfbfa/attachment-0001.gif>