[ale] Help unraveling a "practical joke"?

Greg Freemyer greg.freemyer at gmail.com
Tue Nov 2 18:03:54 EDT 2010


No, it's more complex than that, but don't worry I'll chase it without ALE help!

If I figure it out, I post it back here so that others can have some
fun with their co-workers!

On Tue, Nov 2, 2010 at 5:41 PM, Michael Trausch <mike at trausch.us> wrote:
> OT as it might be, look for what ms calls "folder redirection".
>
> On Nov 2, 2010 4:59 PM, "Greg Freemyer" <greg.freemyer at gmail.com> wrote:
>> All,
>>
>> I've got a situation where two business partners were having issues
>> with each other.
>>
>> Based on a brief look at the image of one of their computers:
>>
>> When partner-A came in to work yesterday and logged into his computer
>> with his normal login, a new user profile "/documents and
>> settings/TEMP" was created with basically nothing in it.
>>
>> I still see "/documents and settings/UserA" but when I login as UserA,
>> I am presented the desktop from .../TEMP/Desktop.
>>
>> It feels like a practical joke to me, but I don't know how to make it
>> happen in the first place, and I don't know how to undo it so that
>> UserA sees the Desktop for "/documents and settings/UserA/desktop".
>>
>> Alternatively, it might have been some malware screwing with things.
>>
>> At this point, I don't think its worth spending a lot of time on, but
>> I would like to undo the damage.
>>
>> Thanks
>> Greg
>> --
>> Greg Freemyer
>> Head of EDD Tape Extraction and Processing team
>> Litigation Triage Solutions Specialist
>> http://www.linkedin.com/in/gregfreemyer
>> CNN/TruTV Aired Forensic Imaging Demo -
>>
>> http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retrieved/
>>
>> The Norcross Group
>> The Intersection of Evidence & Technology
>> http://www.norcrossgroup.com
>>
>> _______________________________________________
>> Ale mailing list
>> Ale at ale.org
>> http://mail.ale.org/mailman/listinfo/ale
>> See JOBS, ANNOUNCE and SCHOOLS lists at
>> http://mail.ale.org/mailman/listinfo
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>
>



-- 
Greg Freemyer
Head of EDD Tape Extraction and Processing team
Litigation Triage Solutions Specialist
http://www.linkedin.com/in/gregfreemyer
CNN/TruTV Aired Forensic Imaging Demo -
   http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retrieved/

The Norcross Group
The Intersection of Evidence & Technology
http://www.norcrossgroup.com



More information about the Ale mailing list