MBSA results

[Scott]

Anyone seen/heard of this:

When I run Microsoft Baseline Security Analyzer (MBSA) on an XP PC, it
reports back several Administrator accounts. But, if I go to User Accounts,
I don't see all the accounts that MBSA says exist. Several accounts are
reported by MBSA but not visible in the local PC's account management.

I have this symptom on several machines. They are all XP .

 

[Leonard Grey]

If, in fact, there are user accounts with Administrator permissions on
your computer (beyond the built-in Administrator, which is a system
account, not a user account), and you did not create those accounts,
then your computer has been hacked.

What's more likely is that you are not familiar with the accounts that
MBSA is reporting. A web search will explain what they are used for.

 

[Scott]

My fear is they've been hacked. How can they not appear in User Accounts but
appear in MBSA results?

They are different on every PC (that has them), account names look like some
random keys.

Any idea how I can track down the culprit?

 

[Leonard Grey]

Have you done any research with the information from MBSA?