strange administrator

G

Guest

I am having a problem I don't understand with my XP SP2. Occasionally, a
window will pop up telling me that Administrator is requesting to log on and
will I allow or not.
Then sometimes when I go to my log in screen, it shows "Administrator"
logged on, and it isn't my log on icon!
What is happening here?
Does this mean someone is hacking into my system?
I did go back and change my passwork for log-in and my 'guest account is
turned off. The other accounts in my user accounts are my son (who set up
my computer - but it isn't him) and an account that is ASP.NET Machine A...

Any ideas?
 
G

Guest

SCI said:
I am having a problem I don't understand with my XP SP2. Occasionally, a
window will pop up telling me that Administrator is requesting to log on and
will I allow or not.
Then sometimes when I go to my log in screen, it shows "Administrator"
logged on, and it isn't my log on icon!
What is happening here?
Does this mean someone is hacking into my system?
I did go back and change my passwork for log-in and my 'guest account is
turned off. The other accounts in my user accounts are my son (who set up
my computer - but it isn't him) and an account that is ASP.NET Machine A...

Any ideas?


It could be the default Administrator that came with the Compy, try this:
When the computer start up and when you get the welcome screen Press
ALT+DEL+ CRTL, you will get a window with option 0ne of them will be the
admin, try this, it will be blank password, if it is passworded then you been
snuffed !!! and you need to disinfect this machine?.
HTH.
nass
 
G

Guest

SCI said:
I am having a problem I don't understand with my XP SP2. Occasionally, a
window will pop up telling me that Administrator is requesting to log on and
will I allow or not.
Then sometimes when I go to my log in screen, it shows "Administrator"
logged on, and it isn't my log on icon!
What is happening here?
Does this mean someone is hacking into my system?
I did go back and change my passwork for log-in and my 'guest account is
turned off. The other accounts in my user accounts are my son (who set up
my computer - but it isn't him) and an account that is ASP.NET Machine A...

Any ideas?

BTW, if you logged with admin try to shut down from this account, please
don't delete it this account, it may be once you logged ON then you logged
OFF and left the Admin logged all the time.
 
G

Guest

Thank you so much. This administrator account IS password protected, and
when I try to change the password, it just goes back to the choice screen, so
that didn't work.
What do you mean by "disenfect" the machine? How, pray tell, do I go about
that?
Wipe out and reload XP, or is there something simpler?
 
G

Guest

SCI said:
Thank you so much. This administrator account IS password protected, and
when I try to change the password, it just goes back to the choice screen, so
that didn't work.
What do you mean by "disenfect" the machine? How, pray tell, do I go about
that?
Wipe out and reload XP, or is there something simpler?

Hi Confused,
By Disinfect, I mean scan for malware and viruses on your machine, if you
have a keyloggers or a malicious code that controlling some parts of your
system it will be discovered by the scan!.
Go through these cleaning steps and see if it will help, and also send the
HijachThis log to a forum that can analysis the log and give you advice on
how to clean the machine:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Taps:
General | Security | Privacy | Content | Connections | Programs |
Advanced.
Under General Tab clear your History, Internet Files and Cookies.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit or you can send them here in your next
post) and click [OK] to confirm your Changes.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

Click on Advanced Tab and scroll down under the browsing option and uncheck
this box:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) and click Apply
then OK to close your IE Properties.

2.... And also for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
http://www.lavasoft.com/products/ad-aware_se_personal.php
http://www.safer-networking.org ; for Spybot S&D

Run a scan from here on-line:
http://www.sophos.com
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5
=How to perform a clean boot procedure to prevent background programs from
interfering with a game or a program that you currently use
http://support.microsoft.com/kb/331796

Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.

You may experiencing a profile corruption, try to create a new profile (as
Admin) and copy the data from one of these profile to the new and test to see
if it will work.
If it did work then you know it is a profile corruption, after making sure
you copied all the Data from the Old Profile to the new one, you can safely
delete the old corrupted one, the same with other account.
How to Identify a Damaged User Profile and Create a New Profile
http://support.microsoft.com/kb/811151
How to copy data from a corrupted user profile to a new profile
http://support.microsoft.com/kb/811151
HTH.
nass
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top