Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

motherboard and forensics


  • Please log in to reply
8 replies to this topic

#1 marileehunter

marileehunter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:01:27 AM

Posted 27 December 2012 - 07:17 PM

My PC's motherboard was replaced by a computer guy in 2009/2010. The authorities' forensics has my PC and discovered a user other than myself was in? the PC 2009/2010. My question is Does a computer repairman have to add himself as a User to replace a motherboard, por favor?!?

The User found in my PC is the same name as the repairman.

2nd query is: Can such a replacement of the motherboard allow Porn or a virus or spyware to infect the PC?

Thank you very much and Merry Xmas and Happy New Year!!

BC AdBot (Login to Remove)

 


#2 Blade

Blade

    Strong in the Bleepforce


  • Site Admin
  • 12,702 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US
  • Local time:03:27 AM

Posted 27 December 2012 - 07:41 PM

The actual replacement of the motherboard is a hardware only process. No user creation should be needed.

The replacement of the motherboard has no bearing on a malware infection. If an infection occurred at the time of the replacement then it was due to something else (unsafe surfing or compromised flash drive are a couple of examples).

Posted Image

If I am helping you, it has been 48 hours since your last post, and I have yet to reply to your topic, please send me a PM
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Circle us on Google+


#3 marileehunter

marileehunter
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:01:27 AM

Posted 28 December 2012 - 12:28 PM

Thx for quick reply! It really helps me a lot!! Maybe the User was using my PC to surf?!? It was out of my custody for a week or so.....

Do you have any thoughts on a Repairman creating a User as in having to go on the 'net so as to download a program to get rid of something that is in the Motherboard?!?

I ran across such a possibility while researching this issue....I cannot remember the scenario but it was something like some unwanted program was needing to be removed from the motherboard to make the motherboard compatible with Windows XP.....ie. the re-install of XP was hindered b/c the new motherboard did not recognize the re-installed XP?!?

I'm not quite sure if I have remembered this issue properly?!?

My PC was XP.

#4 James Litten

James Litten

    Ԁǝǝ˥q


  • BC Advisor
  • 1,945 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:02:27 AM

Posted 28 December 2012 - 01:03 PM

Hi

I repair a lot of consumer computers and it is challenging because they can all be very different (I enjoy that :) ).

Does your user account require a password that the tech did not know?

If so, perhaps he chose to create a new account rather than try to login as administrator or ask you for the password. He may have needed to reactivate XP after adding a new motherboard or as you have suggested, change or add drivers.

Not the choice that I would make, I like to call and talk to the client about everything as I do the job. Many techs prefer to just sit down and do the job in one shot so they will do things like create their own user account.

I doubt that anything malicious occurred but if you are concerned, call and speak to them about it and let us know what they say and we can tell you whether or not it makes sense.

James

#5 marileehunter

marileehunter
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:01:27 AM

Posted 28 December 2012 - 01:26 PM

No user password required b/c I am the only User. He did do the replacement of motherboard without any input from me.

I've misplaced the work-receipt (am searching for tax return to ensure I deducted it as a business expense!) and the Tech says he doesn't have any receipts either.

He may be Chary of helping me b/c my PC was found to have 33 images of CP (Children Porn) in the Unallocated Space, which should serve to Exculpate me b/c of that Location, but it would help me further if the Chain of Custody of my PC is 'broken', which it is by this Tech's work thereon, AND he was the User, which we suspect is true b/c the time period is when he was working on it and the User name is his own!

I've a computer expert for my defense BUT I'd like to find as much other stuff as I can to try to show that I did not Upload the CP!!!

God Bless you for helping us!!

#6 James Litten

James Litten

    Ԁǝǝ˥q


  • BC Advisor
  • 1,945 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:02:27 AM

Posted 28 December 2012 - 01:51 PM

I'm not a lawyer but I think it would be best for you to discuss things with your attorney and allow them to decide what should be asked (if anything) in a public forum.

James

#7 marileehunter

marileehunter
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:01:27 AM

Posted 28 December 2012 - 02:13 PM

TYVM!! But we are NOT Divulging any kind of Confidential Info that could hurt us!! All Parties involved are interested in whatever info can be secured from this Great Forum!!

My Attorney and My Expert are vitally interested in anything I can Glean here!!

#8 marileehunter

marileehunter
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:01:27 AM

Posted 28 December 2012 - 06:44 PM

Just found out that oftentimes Techs will create their own User Id so as to be able to avoid something that may be running automatically in the background and/or to avoid the owner's User ID which may have its own problems...and then just forgot to remove their own User Id....

#9 marileehunter

marileehunter
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:01:27 AM

Posted 05 January 2013 - 03:48 PM

Well, forensics has confirmed that my computer tech was using his User Id on my PC while he had my PC and remotely accessed my PC after it was returned to me. Guess the Moral is to remember who worked on your PC and use forensics program to ascertain such?!? Thx for all ya'lls' help!!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users