Reply
Old July 8th, 2008 Top | #21

OSNN Folding Team  
Dark Atheist's Avatar
OSNN Veteran Addict
Joined: April 2003
Location: In The Void
Posts: 6,373
Blog Entries: 9
Reputation: 1877
Power: 193

Default Re: Service.exe infection

well i have taken hard drives out of other pcs in the past and got peoples information from them - so i know for a fact it can be done, i have copied their programs, music, videos everything
Dark Atheist is offline   Reply With Quote
Old July 8th, 2008 Top | #22
 
roirraW "edor" ehT's Avatar
Builder/Installer
Joined: May 2008
Posts: 529
Reputation: 742
Power: 62

Default Re: Service.exe infection

I do all the time too. But almost 100% of the time I do it the accounts aren't passworded or encyrpted, and the other times I'm either using their password they gave me to enter their old account, or after having used Passware Key Enterprise to remove their passwords.

You are saying that you have definitely copied their data and that their documents were definitely passworded and encrypted?

Gigabyte full tower GZ-FA2CA-AJB
Gigabyte motherboard MA790X-UD4P
HIS Radeon HD 4850 512MB
AMD Athlon 64 X2 4400+ 2.3GHz
Corsair TWIN2X4096-6400C4DHX 4-4-4-12
4x1TB SATA RAID 0+1/2x640GB SATA RAID 0/Misc. PATA
Windows 7 x86
roirraW "edor" ehT is offline   Reply With Quote
Old July 8th, 2008 Top | #23

OSNN Folding Team  
Dark Atheist's Avatar
OSNN Veteran Addict
Joined: April 2003
Location: In The Void
Posts: 6,373
Blog Entries: 9
Reputation: 1877
Power: 193

Default Re: Service.exe infection

all the accounts had passwords on them yet i was still able to copy programs (backup) from c:\program files and copy the entire my documents folder, most people i know use truecrypt as their encryption and as long as you have the kefile or remember the pass they have never had problems moving files from one pc to the next or accessing their files after a reinstall
Dark Atheist is offline   Reply With Quote
Old July 8th, 2008 Top | #24

OSNN Folding Team  
kcnychief's Avatar
█▄█ ▀█▄ █
Joined: April 2005
Location: Massachusetts
Posts: 16,949
Reputation: 4941
Power: 305

Default Re: Service.exe infection

Windows passwords wouldn't really matter, but the fact of the issue is what level of encryption and what software did it - was it EFS (poop) or some 3rd party? There may be certificates, keys or other involved.

I wish we could just try it and find out already

XBOX Live Gamertag: kcnychief
kcnychief is offline   Reply With Quote
Old July 8th, 2008 Top | #25
 
roirraW "edor" ehT's Avatar
Builder/Installer
Joined: May 2008
Posts: 529
Reputation: 742
Power: 62

Default Re: Service.exe infection

The Windows account only having a password on them (without using Windows' feature of hiding files) doesn't keep you from copying files from anyone's documents folder, it simply keeps you from logging in to that account and is the default behavior of putting a password on an account. I have tried to access someone's documents when they did have their files hidden and I wasn't able to access them. Likewise if they only have a password but without hiding their files I was still able to access their files from another account.

Windows passwords don't affect Program Files, only user accounts.

If the user was using a third-party encryption, Windows wouldn't care if you copied the files so it wouldn't stop you. You wouldn't even need the encryption key to do that, only to actually open the files.

I plan on performing some controlled environment tests in VMWare Workstation and get to the bottom of this.

Gigabyte full tower GZ-FA2CA-AJB
Gigabyte motherboard MA790X-UD4P
HIS Radeon HD 4850 512MB
AMD Athlon 64 X2 4400+ 2.3GHz
Corsair TWIN2X4096-6400C4DHX 4-4-4-12
4x1TB SATA RAID 0+1/2x640GB SATA RAID 0/Misc. PATA
Windows 7 x86
roirraW "edor" ehT is offline   Reply With Quote
Old July 8th, 2008 Top | #26
 
loaderbull's Avatar
OSNN Junkie
Joined: August 2005
Location: Midlands, UK
Posts: 52
Reputation: 120
Power: 84

Default Re: Service.exe infection

Originally Posted by roirraW "edor" ehT View Post
The Windows account only having a password on them (without using Windows' feature of hiding files) doesn't keep you from copying files from anyone's documents folder, it simply keeps you from logging in to that account and is the default behavior of putting a password on an account. I have tried to access someone's documents when they did have their files hidden and I wasn't able to access them. Likewise if they only have a password but without hiding their files I was still able to access their files from another account.

Windows passwords don't affect Program Files, only user accounts.

If the user was using a third-party encryption, Windows wouldn't care if you copied the files so it wouldn't stop you. You wouldn't even need the encryption key to do that, only to actually open the files.

I plan on performing some controlled environment tests in VMWare Workstation and get to the bottom of this.
Hey peeps,

Just been reading this thread and this is what i have experienced in the past;

Putting a password on an XP installation only stops people from logging on to the machine on that computer. Adding a password and choosing to make your files 'private' (My Documents) encrypts the files, so if someone were to take that Hard Drive out and attach it to another machine to access files, the My Documents folder will be inaccessible to you. Also logging on to that computer with another user name does not let you view files in My Documents.

This is using XP's built in encryption and password methods, not 3rd party software.

Only my own personal experience, but thought i would add it to help, or to confuse even more!

HP TouchSmart tx2
AMD Turion X2 RM72
4GB Ram
200GB 7200rpm 16MB Cache
Windows 7 x64
loaderbull is offline   Reply With Quote

Reply

Bookmarks

Thread Tools

Posting Rules

Similar Threads
Thread Thread Starter Forum Replies Last Post
Web Service Bman Green Room 6 April 12th, 2006 9:14am
Email Service rik Green Room 10 August 23rd, 2004 3:24pm
[Xp Service packs] How many? Lee Windows Desktop Systems 3 July 31st, 2004 3:24pm
XP Service pack 1 Atom Punkly Windows Desktop Systems 3 July 5th, 2002 3:18pm
service pack? feliclope Windows Desktop Systems 1 June 30th, 2002 5:58pm