Service Request Ticket - # 80536

Service Request Information

CONTACT Name Mars, Wendi   View open tasks   View tasks from last 30 days   Schedule Change Contact Date Apr 07, 2023 09:28 AM
Department Human Resources Phone 88087
Location Email marsw@wou.edu Request for more information Send 'Keeping in touch' email Send 'I'm thinking of you' email

SR INFO Type WOU #
Priority Equipment Type
Status Flagged
Description

Computer Edit WOU # 20171060[Edit Inv] (opens in a new window) Bldg/Room SSC 110
Service Tag CSCCRP2 Description Dell OptiPlex 7050 SFF desktop, i7-6700 (3.4GHz)
Serial No. CSCCRP2 Location Resource Area PC

CPU Intel Core i7-6700 (Quad Core, 8MB, 8T, 3.4GHz, 65W)


OS Windows 7 Pro, 64 bit Software MS office Pro Plus 201* from XXXX2017006552;

Wired NIC D8:9E:F3:4B:A8:A1


TECHS Submitted by Monica Valencia Contact valenciam@wou.edu
Primary Technician Contact jcope20@wou.edu 88412

Tracking

Entered by Date Memo
Justin Cope
Email

Public

Entered by Date Memo
Justin Cope Apr 24, 2023 12:49 PM
Status changed from (1) Pending to (5) Completed
Add Attachment
Justin Cope Apr 24, 2023 12:49 PM
Task reassigned to Justin Cope.
Add Attachment
Justin Cope Apr 24, 2023 12:49 PM
she is all set up
Add Attachment
Tony Benedetti White Apr 24, 2023 10:53 AM
Delivered, John is helping her get fully set-up
Add Attachment
Tony Benedetti White Apr 24, 2023 09:52 AM
called, only special software needed was duo, and 
duo has been installed. Ready to go back to Wendi.
Add Attachment
Jacob Limas Apr 21, 2023 04:22 PM
Finished reimaging it and giving admin rights. May 
need specific software installed.
Add Attachment
Jacob Limas Apr 21, 2023 02:14 PM
Started reimaging it
Add Attachment
Monica Valencia Apr 21, 2023 02:04 PM
Priority changed from (3) Priority to (1) Highest Priority.
Add Attachment
Monica Valencia Apr 21, 2023 02:04 PM
Priority changed from (3) Priority to (1) Highest Priority.
Add Attachment
Monica Valencia Apr 21, 2023 02:04 PM
On the counter imaging
Add Attachment
Justin Cope Apr 07, 2023 01:07 PM
Status changed from (1) Pending to (4) On Hold
Add Attachment
Justin Cope Apr 07, 2023 01:06 PM
****This is an email****
Thanks!
And the restart fixed whatever was going on with 
my H Drive.
I appreciate all you guys do!
I am so sorry for all the extra work on the 
security stuff. 
-Wendi
Add Attachment
Justin Cope Apr 07, 2023 01:06 PM
Status changed from (4) On Hold to (1) Pending
Add Attachment
Justin Cope Apr 07, 2023 01:06 PM
****This is an email****
Hi Wendi,

Tony just got back to me and changing your portal 
password should also change your doctor password.

Thanks,
Justin
Add Attachment
Monica Valencia Apr 07, 2023 11:58 AM
Status changed from (1) Pending to (4) On Hold
Add Attachment
Monica Valencia Apr 07, 2023 11:57 AM
Desktop is on Ellis desk
Add Attachment
Monica Valencia Apr 07, 2023 11:57 AM
So, it looks like Malwarebytes found a Trojan 
virus on Wendi's machine.  Malwarebytes has 
removed the threats and I want to know if we 
should ask Wendi if she's saved everything to a 
network drive, and if so, go ahead and wipe her 
computer?  To be safe?
Add Attachment
Justin Cope Apr 07, 2023 11:51 AM
****This is an email****
Hi Wendi,

I'm not sure about docstar and if changing your 
portal password will change the password for 
docstar but I emailed Tony who is in charge of 
that to get an answer for you. Your computer login 
password should now be whatever you changed your 
portal password to be. And based on the photo you 
sent it looks like your h drive is already 
connected. If it isn't showing up you might have 
to restart the laptop and log back in since you 
updated your password. If that doesn't work is 
there a time that works for you that one of us 
could come over and take a look to get you 
connected to your h drive?

Thanks,
Justin
Add Attachment
Justin Cope Apr 07, 2023 11:40 AM
****This is an email****
Thanks Justin.
I am not sure how many of my passwords I need to 
change and what it is linked to. I went ahead and 
changed my password on my portal. When I get the 
harddrive back, will I be able to change my 
password on the computer itself? I know that my 
Zoom, Banner and Google are all through the 
portal, so that should all still work when I log 
in, but what about DocStar? Normally I don't log 
into DocStar once I am in the portal, but on the 
laptop, I have to sign in separately, so will the 
password be changed, do I need to do that, or is 
that something you have to push out from the back?
Is my HDrive not connected because you guys are 
working on it and I need to stay out of it? Or is 
there something wrong with that now too? I can't 
seem to map it on my laptop. I have to remap it 
each time I log in, but this time I am getting a 
different message. See the image below:

I am so sorry about this! Is there anything else I 
need to do?
Add Attachment
image.png
Justin Cope Apr 07, 2023 11:22 AM
****This is an outgoing email****
Hi Wendi,

We were just following up with you regarding a 
service request that we have for you.  (#80536)

Description: Possible security breech

We did find some trojan's on the computer and are 
taking care of it. I do want to make sure that you 
change your passwords, so please do that as soon as 
possible.

Thanks,
Justin Cope
Add Attachment
Public
Laurie McCoy Apr 07, 2023 10:10 AM
Computer is on the bench in the back, waiting for 
malware scan
Add Attachment
Monica Valencia Apr 07, 2023 09:29 AM
****This is an email****
Email From jenna

Would we be able to send a student tech to go get 
Wendi's computer and bring it back to take a look 
at it?  Looks like she could have something 
suspicious going on...
Add Attachment
Monica Valencia Apr 07, 2023 09:28 AM
****This is an email****
I am at the office working late, after being 
logged in at the library conference room all day. 
Windows were closing on my computer that I did not 
close. I was logged into my portal, but the window 
closed so I logged in again. No weird duo 
activity. But I thought it was fishy. I 
immediately closed everything and logged off of 
the computer. I know I need to reset all my 
passwords. I don't know if I should log into 
anything at all, so I am sending this message from 
my personal account on my phone. Do you guys check 
everything before I rest or do I need to do it 
immediately? 
If this is urgent and can't wait, you can call me 
on my cell at 503/580-5608.
Wendi Mars 
HR
308e in admin
Add Attachment