HelpAssisstant_XXXXXX user created and delete events

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Ron Williams (ron_at_email.com)
Date: 05/24/04


Date: Mon, 24 May 2004 11:10:49 +0300

Hi I have a windows 2003 server with all the security
patches installed,
however i am receiving events in the security log of the
event viewer where a user is created and then deleted.
The new accountname is HelpAssistant_634c49
and the caller username is machinename$
Could this server be compromised or is this a normal
behavior caused by some service in windows 2003?

Regards



Relevant Pages