Re: which virus I've got:Everyone is allowed to change administrator's password!

From: NoSpam (Nospam@forme.com)
Date: 01/13/03


From: "NoSpam" <Nospam@forme.com>
Date: Mon, 13 Jan 2003 15:41:46 -0500


You don't want to delete the Everyone account, you just want to remove it
from your Administrators Group.

I am not aware of any virus that puts the Everyone Group in the
Administrators Group.

"Benson" <TellMeIfUWant2ContactMe@AvoidEmailGarbage.com> wrote in message
news:MPG.188d4efe97739f0d989682@news.cn99.com...
> My OS is win2000 advanced server with sp3 integrated.
>
>
> Today when I opened ACTIVE DIRECTORY USER AND COMPUTER,
> I suddenly found that there is a user named Everyone
> in SECURITY option of my administrator account, and it's
> allowed to change password! This means that everyone can
> change the password of my administrator account!
>
>
> After disconnected my internet connection immediately, I
> deleted the Everyone account. But several minutes later,
> the Everyone account appeared in the same place again. No
> matter how many times I deleted it, it always recovered
> very soon.
>
>
> I ran Norton AntiVirus, but found nothing.
>
>
> And I found that all users in Administrators group have the
> same problem!
>
>
> Am I hacked by Trojan horse? Or am I infected by virus?
>
>
> Any comment is appreciated.



Relevant Pages

  • Re: Rid AD of Circular Group Membership
    ... and have use on members if it is used there. ... Administrators group is still intact), nor do they have empowerments over ... Admins is being used for by the 30+ can be delegated I(ex. ... The quess is each has an account and uses it, ...
    (microsoft.public.windows.group_policy)
  • Re: Question on XP network security
    ... I'm not sure whether you meant adding each and every user account to ... that it gives every user full access to all other machines ACROSS the ... network security. ... > Add each user's domain account to the local administrators group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: cannot add local user to local group
    ... You can control the Local Administrators group with the Restricted Groups Policy. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... One local user account "test" and one domain user ... "Member of" tab is empty. ...
    (microsoft.public.win2000.active_directory)
  • Re: Log on as a batch job
    ... Depending on the task you are trying to run, the account you use may need ... be a member of the local Administrators group on the PC. ... And the entire point of Logon as a Batch Job privilege is to ... My brief experiments suggest that running a scheduled task requires the user ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Membership...
    ... Administrators group in some computers contrain members with deleted domain ... account such as this: ... >> REMOTELY using vb script. ... >> following script can remove the member of the Administrators group if the ...
    (microsoft.public.scripting.vbscript)