full-disclosure - Undeletable user account.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200601031529.00787.requiem@praetor.org>
Date: Tue Jan  3 23:29:22 2006
From: requiem at praetor.org (Jeremy Bishop)
Subject: Undeletable user account.

On Tuesday 03 January 2006 13:54, James Bower wrote:
> Hi all, one of my servers has recently been compromised.  No suprise
> but the hacker created himself a user account.  The problem is that I
> can't seem to delete the account.  The account is not part of any

To be entirely snippy, the problem isn't the undeletable account.  That 
falls into the "amusing puzzle" category.  The problem is that you are 
attempting to clean up the machine instead of rebuilding from 
known-good media.

I'm sure you have a very good reason for doing this, and I'm just making 
the assumption that the Windows culture has less awareness that this is 
generally a Bad Idea.

As for the user account, I suspect that it can be deleted in much the 
same way one would go about deleting the local administrator account.  
Have a link: http://www.kuro5hin.org/story/2004/7/4/7570/05276

Jeremy

-- 
The Write Many, Read Never drive.  For those people that don't know
their system has a /dev/null already.
              -- Rik Steenwinkel, singing the praises of 8mm Exabytes