Hacked or not??

[Frosty]

Had no real probs with compy but when Beanfro was fiddly around my compy he opened up user acounts and he noticed an extra 1:

Bean -"Hey Adam whats this extra Asp.net Machine user account on your compy?"

Adam-"what you talk'in bout i only got 1 account, my admin and all guest accounts are disabled"

Bean-"Nu uh there another...look! look!!! awww u been hacked !!!! ohhh nooo!!!! don't ave it!"

Adam-"Shop foo....its prob not that...lets mosy on over to Event Viewer in Admin Tools"

I checked the logs and no obvious attempts at getting access, no multiple failures under login attempts under Root etc as ive seen b4

Im surprised because i always have Zone Alarm up and a proxy on Opera (never use Internet Explorer) i have Adaware SpyBot but nout, im reluctant to install Norton Anti-Virus 2k3...

what you think it is...this mysterious ASP.net Machine account is (i have deleted it since lol) Also i went to www.ASP.net and its seems a Microsoft Security Site.....

As always any any advice real appreciated

Adam.R

[Craig]

Dont worry, that account gets installed with the .NET Framework patch if i remember correctly

[Jonny M]

The ASP account is where ASP type stuff runs (I think). Probably only used if you are coding?

[directhex]

that account is a limited privileges account under which the Microsoft .NET Framework installs & runs itself, to ensure that (under NTFS, at least), .NET applications have no system or file privileges without your sayso. It's created during the .NET framework installation, which would occur if you windowsupdate everything, use Visual Studio.NET, or a few games such as Warhammer Fire Warrior

[Frosty]

aha! FireWarrior would be that puppy, thx gents *phew* relieved!

[Frosty]

wait....why would it be password protected....? and why would it be logged in as Anonymous under Event Viewer multiple times with complete success every time?....?

[directhex]

it would be passworded so you don't accidentally try to log in with it, and it'd be logged in under event viewer every time it was asked to run something (i.e. whenever Fire Warrior is run)

[Ethos]

Zone Alarm... lol!