944,035 Members | Top Members by Rank

Ad:
Jun 15th, 2006
0

Has my computer been compromised?

Expand Post »
When I check the "Users and Passwords" in the Control Panel, I see two new strange user accounts. They are "IUSR_STATION-2" and "IWAM_STATION-2". Station-2 is the name of my computer. When I click the Properties button, they are described as "Built-in account for anonymous access to Internet Information Services out of process applications", they belong to the guests group. I never created those acounts. I deleted them, but every time I reboot, they show up again.

My guess is, some spyware has found its way to my computer and created those accounts for hackers for later malicious acts. I don't know how to deal with it. I'm running Windows 2000 Pro, SP4. I have Zone Alarm firewall, Norton Antivirus, and Windows Defender Beta 2 running as well. This computer is networked with two other ones, and the other ones don't have this problem.

Can someone give me some advise? Thanks.
Similar Threads
Reputation Points: 10
Solved Threads: 0
Newbie Poster
henryvuong is offline Offline
2 posts
since Jun 2006
Jun 15th, 2006
0

Re: Has my computer been compromised?

not sure what they are ,but you should disable the guest acct if you haven't allready done so .
download and install and update ewido spyware removal tool 14 day fully working trial version here ,.
http://www.ewido.net/en/
Last edited by caperjack; Jun 15th, 2006 at 9:22 pm.
Team Colleague
Reputation Points: 1056
Solved Threads: 792
I hate 20 Questions
caperjack is offline Offline
12,730 posts
since Aug 2003
Jun 16th, 2006
0

Re: Has my computer been compromised?

Actually, these accountsare automatically created by IIS, the Web Server which ships with Windows. If you don't use a web server on your machine, you can uninstall IIS from Add/Remove Programs>Add/Remove Windows Components. Once you've removed IIS, the accounts will be deleted.
Team Colleague
Reputation Points: 67
Solved Threads: 45
Finkus Stinkalotus
goldeagle2005 is offline Offline
1,423 posts
since Jun 2005
Jun 16th, 2006
0

Re: Has my computer been compromised?

That answers my question. Thanks.
Reputation Points: 10
Solved Threads: 0
Newbie Poster
henryvuong is offline Offline
2 posts
since Jun 2006

This thread is solved

Either the thread starter or a moderator has marked this thread as solved. You can most likely trust the responses and answers given. There is most likely no reason for any further responses to be posted here. If you have a related question, please start a new thread in this forum instead.

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in Windows NT / 2000 / XP Forum Timeline: windows\system32\config\system
Next Thread in Windows NT / 2000 / XP Forum Timeline: Windows XP - Slow Booting





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC