Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
It seems that every time I am coming out of standby in Win XP Home, these new random computer administrator user accounts pop up out of nowhere. They typically have garbled names, almost always involving a 't' or '$'. I just cleared a bunch of trojans off my machine...how can I stop this?
There are a bunch of logon failure audits, with some of the names being jack$, ts$, t. I believe those times I tried to log onto to those user names, just to see if they somehow used my normal administrator password. Also some userenv errors in the applications category.
I would suggest a quick audit, http://www.pxserver.com/WinAudit.htm to do this run win audit and wait for the results page. on the left hand side there is a list, expand 'groups and users' and then open 'user accounts'. this will list all the user accounts that are on the system. Are there any in that list that you have not created?