Computer reboots and new user name appears

[robsuttonjr]

My bosses Windows 2000 computer rebooted sometime within the last 24 hours and a new user id appeared when he went to login. The user id was "IQ_System" I looked online to see if this was some known user id but found nothing. He did have a public address open on this computer. Is it possible that a hacker was able to gain control of his machine and setup a user id? I noticed a bunch of errors having to do with 'rasman' in the event log. Any ideas or thoughts?

 

[MattWray]

Have you checked the Docs and Settings folder for any new profiles? You can also check his Users and Groups snap-in in MMC, make sure the guest and any unused local accounts are disabled...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com