[OPLINTECH] Potential Computer Vandalism

Wed Nov 20 11:17:52 EST 2013

Mike
Just for grins is “secure boot” enabled in the bios?
And, have you considered trying “crack” from a bootable drive?

Jim Mann
Technology Coordinator
Greene County Public Library
76 E. Market St
Xenia OH 45385
937 352 4000 x1210
Discover. Learn. Grow.<http://www.greenelibrary.info/>
jmann at gcpl.lib.oh.us<mailto:jmann at gcpl.lib.oh.us>
[cid:image002.jpg at 01CEE5E2.274B29D0]<http://www.facebook.com/greenelibrary.info>[cid:image003.jpg at 01CEE5E2.274B29D0]<http://twitter.com/#!/greenelibrary>[cid:image004.jpg at 01CEE5E2.274B29D0]<http://www.youtube.com/greenelibrary>[cid:image005.jpg at 01CEE5E2.274B29D0]<http://www.flickr.com/photos/greene-library>

From: oplintech-bounces at lists.oplin.org [mailto:oplintech-bounces at lists.oplin.org] On Behalf Of Mike Hensel
Sent: Wednesday, November 20, 2013 11:11 AM
To: 'Stephen Cram'; oplintech at lists.oplin.org
Subject: Re: [OPLINTECH] Potential Computer Vandalism

Stephen:
I cleared the Bios and tried reinstalling a new OS.  Basically the computer read the HD as having no access so that failed as Chad stated.  I need Dell to give me a backdoor password or the hard drives are unless.

Mike Hensel
Director, MLIS
London Public Library
20 E. First Street
London, OH 43140
www.mylondonlibrary.org
740-852-9543
Mobile 614-325-1429

From: oplintech-bounces at lists.oplin.org<mailto:oplintech-bounces at lists.oplin.org> [mailto:oplintech-bounces at lists.oplin.org] On Behalf Of Stephen Cram
Sent: Wednesday, November 20, 2013 10:51 AM
To: Oplin Tech list
Subject: Re: [OPLINTECH] Potential Computer Vandalism

All other issues aside, I believe you can salvage the hard drives by attaching to another PC and formatting them and then  re-installing it in the old PC and reloading Windows and beginning again.

And if you identify the culprit, I can send you some toothpicks to shove under their fingernails if you'd like.  I recently found gum shoved into an SD card reader so I'm saving some of my toothpicks for use here.

Stephen Cram
Facilities Coordinator
North Baltimore Public Library

I have been known to accomplish the impossible at times.
However, accomplishing the impossible only means the boss will add it to your regular duties.

-------Original Message-------

From: Mike Hensel<mailto:henselmi at oplin.org>
Date: 11/20/2013 9:21:21 AM
To: oplintech at lists.oplin.org<mailto:oplintech at lists.oplin.org>
Subject: [OPLINTECH] Potential Computer Vandalism

OPLINTech Libraries:

I’ve got a situation where one of my patron computers last week booted up with a Security Manager Screen that basically needed a password to boot from the hard drive.  We run DeepFreeze on all of the computers.  I eventually had to get another hard drive sent from Dell.  Last night 5 more computers displayed the same message.  We lock the computers down with policies as well.  I have not seen any virus alerts pop up in Symantec.  We run Symantec Endpoint.  I don’t believe we had the bios locked down so the only thing I can think of is someone logged into the bios and setup an password on access to the HD which is leaving our machines dead.

Has anyone run across this scenario and is there any easy fixes besides getting a new hard drive and rebuilding the machine.   I’m trying to determine if it was a local hack (patron at each machine) or virus.

Any help would be appreciated.

Mike Hensel
Director, MLIS
London Public Library
20 E. First Street
London, OH 43140
www.mylondonlibrary.org
740-852-9543
Mobile 614-325-1429

FREE Animations for your email - by IncrediMail <http://www.incredimail.com/?id=621131&did=10501&ppd=2812,201301281447,9,1,748381821347692543&rui=153799619&app_test_id=0&sd=20131120>

Click Here! <http://www.incredimail.com/?id=621131&did=10501&ppd=2812,201301281447,9,1,748381821347692543&rui=153799619&app_test_id=0&sd=20131120>

► <http://www.incredimail.com/?id=620777&did=10501&ppd=2741,201201221253,9,1,748381821347692543&rui=153799619&app_test_id=0&sd=20131120>

[cid:image006.gif at 01CEE5E2.274B29D0]<http://www.incredimail.com/?id=621131&did=10501&ppd=2812,201301281447,9,1,748381821347692543&rui=153799619&app_test_id=0&sd=20131120>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20131120/0a90e0c2/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1074 bytes
Desc: image002.jpg
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20131120/0a90e0c2/attachment-0004.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 1027 bytes
Desc: image003.jpg
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20131120/0a90e0c2/attachment-0005.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.jpg
Type: image/jpeg
Size: 1157 bytes
Desc: image004.jpg
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20131120/0a90e0c2/attachment-0006.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.jpg
Type: image/jpeg
Size: 1067 bytes
Desc: image005.jpg
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20131120/0a90e0c2/attachment-0007.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.gif
Type: image/gif
Size: 34603 bytes
Desc: image006.gif
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20131120/0a90e0c2/attachment-0001.gif>