Shoutbox

New user = new virus? - Printable Version

-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Skype & Technology (/forumdisplay.php?fid=9)
+---- Forum: Tech Talk (/forumdisplay.php?fid=17)
+----- Thread: New user = new virus? (/showthread.php?tid=41487)
New user = new virus? by mwe99 on 03-29-2005 at 10:13 PM

I recently went to change my password and a new user appeared in my list that no one added... Is this safe to delete?

[Image: sql0ke.gif]

RE: New user = new virus? by lopardo on 03-29-2005 at 10:19 PM

It looks like it has been created by some program...

Yes, check this out.


quote:
Originally posted by steven5678
sql is a is a type of injection
wtf? Don't post if you don't know what you're talking about.
RE: New user = new virus? by mwe99 on 03-29-2005 at 10:19 PM

So it's okay to delete then? I only just noticed it before and was like :O

RE: New user = new virus? by Supersonicdarky on 03-29-2005 at 10:20 PM

quote:
Originally posted by http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2003-04/0016.html
An archive search did not bring up this topic as having been covered so
here goes.

Under the theory that any local NT/Windows 2000 user account which is
created by default as part of an application install is a potential
threat, I would like to warn administrators about SQL Server 2000 SP3.
Installing SQL Server 2000 SP3 creates a local account, SQLDebugger.
The account, while only a member of the Users group, has "Password never
expires" and "User cannot change password" checked by default. This is
not documented in the Readme(s) nor the Fixlist. If its there it is
buried so deep that I never found it. I opened a case with Microsoft
to find out what was going on and was told that SQLDebugger is created
as part of sqldbreg2.exe. The account is used by Visual Studio and
Query Analyzer. More information (though not much) can be found in
Q318632.

What I don't understand is why this is not documented better or even
mentioned. Administrators should certainly be told of any local
account so that they can either delete it or secure it.


Hope this helps (i hardly read it :P)
RE: New user = new virus? by mwe99 on 03-29-2005 at 10:21 PM

Lol thanks, ah i'll just delete it :P

edit: i deleted it but kept the files just incase it needs them to run

Thanks for the info guys (Y)

RE: New user = new virus? by lopardo on 03-29-2005 at 10:28 PM

quote:
Originally posted by mwe99
So it's okay to delete then? I only just noticed it before and was like :O
I don't really know, are you using SQL Server?

You could disable it, and if some program complains, you can enable it again:
  • Go to Start > Run, type "compmgmt.msc" and click OK.
  • Open "Local users and groups", and select "Users".
  • Double click the "SQLDebugger" account.
  • Check "Disable account", click OK and you shouldn't see it anymore.


BTW, those names could be different, I'm using Windows in Spanish :)
RE: New user = new virus? by segosa on 03-30-2005 at 05:41 AM

I just leave them, they cause no harm.