Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Server Win 2003 : Autocreation of Admin Account - Virus?


  • Please log in to reply
4 replies to this topic

#1 mongooseba

mongooseba

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:11:16 AM

Posted 20 September 2013 - 05:14 PM

Hi All,

 

I am in need of any help. My server creates a number of automatic administrative user accounts for no reason in the evenings. They reappear even when they are deleted or disabled. I am not able to run the DDS program and cannot upload my logs to you. I'm lost and am definitely a newbie. I do not have problems moving around the server environment if given specific instructions. I look forward to your expertise. Any help is much appreciated.

 

Sincerely,

Mongooseba :killcomp:


Edited by hamluis, 21 September 2013 - 06:47 AM.
Moved from MRL to NT - Hamluis.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,406 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:02:16 PM

Posted 21 September 2013 - 06:46 AM

I've moved your topic from a malware forum to what may be the more appropriate forum.

 

Please review http://docs.oracle.com/cd/E17781_01/server.112/e18804/users_secure.htm and provide more details re your situation so that we may better try to assist.

 

Thanks :).

 

Louis



#3 mongooseba

mongooseba
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:11:16 AM

Posted 22 September 2013 - 05:21 PM

Hi Louis,

 

Thank you for your reply.

This is what I know is happening under

 

Start/Administrative Tools/Active Directory Users and Computers/

 

There would be an automatic creation of a user  - "user133" for no reason. When I delete or disable this account, a new one under "user134" would be created the next day. Initially, I could no even access my server because the administrative account password was changed. My IT guy was able to fix it.

 

What should I do and what information do you need. Any help would be much appreciated especially if I could be directed as to the particular steps that needs to be done.

I have full administrative rights.

 

Thanks.

 

Mongooseba



#4 mongooseba

mongooseba
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:11:16 AM

Posted 26 September 2013 - 04:09 PM

Hi Louis,

 

I've changed the security privilages on one of these rogue users and am not able to delete the account. Should I restart the server to delete this?

Thanks.

 

Mongooseba



#5 mongooseba

mongooseba
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:11:16 AM

Posted 19 October 2013 - 05:15 PM

Hi All,

 

I should be most grateful if you could help me resolve my issue of autocreation of administrator accounts on my server 2003. Desperate help is needed.

Thank you all.

 

Sincerely,

Mongooseba






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users