Deleted Profiles and Security Alerts

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Three days ago I created a second user account with administrative rights.
The computer turned off for an automatic update, and when it turned back on,
my original user account was missing. All of my docs are gone along with my
Outlook profile and journals. I am running XP sp2 and have Norton Internet
Security.

Nothing was in the recycle bin, and I am understandably miffed about all of
this. As I was trying to figure out what happened, I began looking through
Norton logs. I found in the alerts file several "Unauthorized Access Logged"
warnings (36 between 10:42:21 and 10:42:23). There were another 63 logged
between 11:06:03 and 12:07:11. This is around the time I would have lost the
profile... or maybe a bit later in the day. There were more logged the next
time I turned my computer on.

The warnings all say the following:
Actor: C:\WINNT\system32\winlogon.exe (PID=664)
Target: C:\Program Files\Common Files\Symantec Shared\ccProxy.exe

My question is twofold: Has someone been hacking into my computer? and Is
there a way to retrieve my lost data?

Thank you to anyone who can help!!!

Timon
 
Try looking under documents and settings for the user profiles on your
computer. It is possible that even if the user account was deleted that the
user profile still exists there with the user name. What happened seems
strange and would be hard to determine without examining the computer
further. In the future PLEASE backup your important files to an external
hard drive or optical media just in case something like this happens again.
Even if the files were not in recycle bin or my documents\username they may
be recoverable with a third party program as shown in the links below
particularly if you have a lot of free disk space on the partition where
they were.

Steve

http://www.snapfiles.com/Freeware/system/fwdatarecovery.html
http://www.snapfiles.com/Shareware/system/swdatarecovery.html
 
Back
Top