Greetings:
Here are a few options to deal with that problem:
Enable the firewall if you have not done so allready.
http://www.microsoft.com/windowsxp/home/using/productdoc/en/hnw_enable_firewall.asp
Apply all Critical Security Updates.
http://v4.windowsupdate.microsoft.com/en/default.asp
Download HijackThis, Ad-aware6 and Spybot S&D
and update them before scanning. Get help if you are
uncertain on what to delete from the HijackThis scan result.
http://www.fixyourwindows.com/downloads.htm
Do all of the previous and if necessary do also the following;
After you have enabled the firewall, updated your system, and
you have found a posible parasite that's creating the account,
and you have deleted it, also deleted the "lee" account..
it shouldn't regenerate again... but just by a remote chance it
should return, do the following;
The account could have Ownership of your computer,
retake ownership as follows; Do this in the C:\Properties
http://support.microsoft.com/default.aspx?scid=kb;en-us;308421&Product=winxp
Change the account to limited user;
Start\Run\control userpasswords2\select "lee"\properties\belongs
to group\change to limited user.
Disable the account;
Start\Run\lusrmgr.msc\users and groups select users\
right click on the account\properties\check "disabled account"
Change the administrator password.
Start\Run\control userpasswords2\select administrator\click on
Restore Password (just in case he's using the administrator account)
Go to C:\Properties\Security\ add "lee" and select all
privileges on the right side to deny those privileges which
include access.
Start\Control Panel\System\Remote Access\ uncheck
Remote Assistance and Remote Desktop.
Run frequent scans with Ad-aware, Spybot and HijackThis.
(It's important to Update them before every scan)
--------------Original Message---------------
George said:
dear all, i've met a strange problem, that is a user called lee can be
automatically generated from my ibm laptop with newly installed windows xp
professional, and lee has administrator right. I'v already re-installed my
laptop, partition, format; all sp for xp installed, norton internet security
2004 has the latest update. But they all couldn't find the problem. Can
anyone tell me how to solve? Thanks!
