Which of the following is the LEAST ACCURATE statement about seizing a computer for examination?

When taking a computer for examination, if the computer is off. it should remain off when it is removed.

When seizing a computer that is running, it is acceptable for a fraud examiner to review the files contained on the machine prior to seizing it.

Before removing a computer system from a scene for further analysis, it is important to document the system ' s setup with photographs or diagrams.

When seizing a computer for examination, the seizing party should took around the area for passwords because many people leave passwords near their computers