window 2003 server security

Posted on 2006-04-25
Medium Priority
Last Modified: 2013-12-04

User automatic create in the webserver+ mail server daily

user name : support
administrator group user

On our server this user automatic create daily. We delete this user daily so please tell me the reason.

third party tools: which is installed (may be cause but how to prevent)
crystal report
Question by:Sam Panwar
LVL 16

Accepted Solution

JammyPak earned 1500 total points
ID: 16540060
It's been a while since I've used Crystal Reports, but I'd be pretty shocked if it was automatically creating administrator accounts!

Sounds to me like you have picked up a rootkit somehow - this is not a good thing...you may want to backup the data on these systems and rebuild them from scratch just to be on the safe side.

Before doing that, I would run 'HiJack this' and 'rootkit revealer' just to see if they can find what you're dealing with. The problem is as long as these systems are left running, someone can presumably be creating and logging in with accounts, and pretty much having their way with your systems.

I would also recommend putting the systems behind a firewall (HW or SW) and only allowing access in for the ports that the applications require (80, 25, etc). Also, don't ever surf the web from your servers, that's likely the source of the infection (assuming there is one)

LVL 32

Expert Comment

ID: 16541012
Does the event log show anything?

You can see what time the user is created by looking within the "documents and settings" folder on the C: drive.

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
This Micro Tutorial will teach you how to add a cinematic look to any film or video out there. There are very few simple steps that you will follow to do so. This will be demonstrated using Adobe Premiere Pro CS6.
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
Suggested Courses
Course of the Month16 days, 23 hours left to enroll

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question