SS.exe

From: AJB (AJB_at_discussions.microsoft.com)
Date: 04/29/05

  • Next message: Orvs: "Event Error Logs with Event ID 538 and 540" 
    Date: Fri, 29 Apr 2005 08:12:08 -0700

    I am running server 2000. Every now and then, a user account called support
    is created. I look on the desktop and see a file called "ss.exe" and a folder
    called "AMS".

    How are they getting into my server to create a user account called support?
    and how are they installing these files?

    Can someone help me in blocking this small operation someone is trying to
    run on my system?

    Help would greatly be appreciated.

    Thanks

  • Next message: Orvs: "Event Error Logs with Event ID 538 and 540"

    Relevant Pages

    • Re: SS.exe
      ... AJB wrote: ... > I am running server 2000. ... a user account called support ...
      (microsoft.public.win2000.security)
    • Re: Auto-update of an application, permission problem in "Program Files"
      ... is a filted normal user account token by default. ... normal user write permission to the "Program Files" directory. ... Microsoft Online Community Support ...
      (microsoft.public.win32.programmer.kernel)
    • Re: Office 2007 Setup Successful - but Office wont run
      ... I recommend Ian to recreate the user account. ... If you would like to get the Technet newsgroup online support, ... Office 2007 Setup Successful - but Office won't run ...
      (microsoft.public.office.setup)
    • RE: SQL 2000 Agent jobs in a non-domain environment
      ... Since you have an non-domain machine, ... local user account to access remote machines in your network? ... 818742.KB.EN-US Overview of the Microsoft Configuration Capture Utility ... Microsoft Online Community Support ...
      (microsoft.public.sqlserver.setup)
    • RE: How to remove home folder when I remove user from the account?
      ... The home folder for this user account could not be removed. ... that you contact Microsoft Product Support Services via telephone so that ... Please check http://support.microsoft.com for regional support phone ...
      (microsoft.public.windows.server.sbs)