Windows Server Unwanted User Log Ons

Microsoft Windows server 2003 enterprise
May 30, 2010 at 23:57:57
Specs: Windows XP
I have in my bussines windows server 2003 and i have recently noticed that new user accounts log on to my server and install new programs. I have disabled those accounts but today agin i saw those accounts abled and also two new accounts with the name OK and DE. Any ideas if its a virus and if yes which one? Can i remove it?

See More: Windows Server Unwanted User Log Ons

Report •

#1
May 31, 2010 at 11:03:13
Did you also physically disconnect the pc from the internet?
Install new programs? What programs?
Last time you updated and ran a virus/malware scan?
Keyboard logger/rootkit scan?

That doesn't sound like a virus to me but more of a hackers behavior.


Report •

#2
June 2, 2010 at 06:50:34
Actualy i also think its a hacker. how can i prevent access? i already disabled his account but again same thing. A new program its being intalled. Party poker online casino.

Report •

#3
June 3, 2010 at 07:31:32
You cut the internet to the server physically for starts
You review the event viewer logs especially the security log
You reinstall the server from scratch [you have to have a clean slate to know you removed all backdoors]

You practice safe computing;
#all patches in place
#behind a router/firewall
#antivirus/antimalware software installed
#complex passwords for user accounts- change the admin passwords once a month minimally


Report •
Related Solutions


Ask Question