Has my computer been compromised?

[henryvuong]

When I check the "Users and Passwords" in the Control Panel, I see two new strange user accounts. They are "IUSR_STATION-2" and "IWAM_STATION-2". Station-2 is the name of my computer. When I click the Properties button, they are described as "Built-in account for anonymous access to Internet Information Services out of process applications", they belong to the guests group. I never created those acounts. I deleted them, but every time I reboot, they show up again.

My guess is, some spyware has found its way to my computer and created those accounts for hackers for later malicious acts. I don't know how to deal with it. I'm running Windows 2000 Pro, SP4. I have Zone Alarm firewall, Norton Antivirus, and Windows Defender Beta 2 running as well. This computer is networked with two other ones, and the other ones don't have this problem.

Can someone give me some advise? Thanks.

[caperjack]

not sure what they are ,but you should disable the guest acct if you haven't allready done so .
download and install and update ewido spyware removal tool 14 day fully working trial version here ,.
http://www.ewido.net/en/

[goldeagle2005]

Actually, these accountsare automatically created by IIS, the Web Server which ships with Windows. If you don't use a web server on your machine, you can uninstall IIS from Add/Remove Programs>Add/Remove Windows Components. Once you've removed IIS, the accounts will be deleted.

[henryvuong]

That answers my question. Thanks.