refering to a USB pen.?

Question

if a person used a pen to download my pc information, would it give them my password, or words to login on my computer. 

Would it give him my administration info, including my password?  Also, I am try to get to my Bios, access the "Required pass word prompt"  I was told to do a F2, but when?  when I shut of and reboot, i must type in a pass word, f2 does nothing there,  then when I give it my pass word, it loads my settings.  When do I perform the " delete or f2 ?"

I am sorry guys & gals for asking these kinds of question, but if this person has done this I would like to stop him.

W G · Accepted Answer

The computer does not physically store the unencrypted version of the password on it.  It first hashes your input in a one way hash and stores that information.  However, one can boot your system on an alternate operating system (or in another system) and take files off it to brute force your password off line.  The file is called the "Security Accounts Manager" (SAM).  The final brute force will tell them all of the passwords on your computer if they are less than 14 characters in length and if they are not complicated pass phrases with numbers, upper, lower, and special characters in them (in other words, dictionary or common use passwords).

They can also use a program installed on your computer called a keylogger.  This logs all of your keystrokes to a file, which can be taken off the system for later analysis.

F2 is likely getting you into BIOS.  BIOS is weak on desktops but can be very effective on laptops for protecting the computer system.  It does not protect someone from getting data off your computer, however, as that's normally stored unencrypted on the hard drive.  If you want true protection, encrypt your hard drive with TrueCrypt.  As long as the system is off when they try to get data off it, they will not be able to do it unless your password is something stupid like "password" or they shoulder surf it off you.  Again, use pass phrases, mixed cases, and special characters to make it much harder.

To reset your desktop BIOS password, you normally open the case, remove the battery and boot the system back up.  If it's more modern, it sometimes requires placing a jumper over two pins to short out the BIOS and reset it.  Read your manual online to find out procedures for your particular motherboard.  To find out your motherboard brand, open the box and look for the manufacturer and model number on the board or lookup the manufacturer on the outside of the box and start searching their web site for info.

Good luck reclaiming your own PC.  It shouldn't take much as this type of thing is more of a practical joke than it is a real hindrance.  With TrueCrypt and a BIOS password, you can make it much harder for someone else to change in the future and will be protecting yourself at the same time.

WG

Trending News

refering to a USB pen.?

1 Answer