RE: [Full-disclosure] Support_388945a0 account in Win XP/2003

2005-11-30 Thread Geoff.Shatz
A simple google search yields the following... Support_388945a0 The Support_388945a0 account is primarily used to control access to signed scripts that are accessible from within Help and Support Services. Administrators can use this account to delegate the ability for an ordinary user, who do

Re: [Full-disclosure] Support_388945a0 account in Win XP/2003

2005-11-30 Thread Raoul Nakhmanson-Kulish (en)
Hello, Adi Pircalabu! On 30.11.2005 18:39 you wrote: http://www.toggit.com/290/290kguide6.asp Thanks, yes, Google was the first place where I had looked for :) I am interested mainly in security treats connected with %subj. -- Regards, Raoul Nakhmanson-Kulish, Elfor Soft Ltd., IT Department

Re: [Full-disclosure] Support_388945a0 account in Win XP/2003

2005-11-30 Thread Yong-hak Lee
abu" <[EMAIL PROTECTED]>; Sent: Thursday, December 01, 2005 12:48 AM Subject: Re: [Full-disclosure] Support_388945a0 account in Win XP/2003 > Hello, Adi Pircalabu! > > On 30.11.2005 18:39 you wrote: > >> http://www.toggit.com/290/290kguide6.asp > Thanks, yes,

RE: [Full-disclosure] Support_388945a0 account in Win XP/2003

2005-11-30 Thread Aditya Deshmukh
> Hello full-disclosurers, > > Does anyone know anything interesting about Support_388945a0 account > which is created by default during Windows XP/2003 installation? > > I have seen MS technet links, maybe someone knows more about? That is a "help and support account" that you should disable.

RE: [Full-disclosure] Support_388945a0 account in Win XP/2003

2005-11-30 Thread Aditya Deshmukh
> I has wondered the meaning of "support_388945a0" too, > but not the meaning of the account, but the meaning of "388945a0". > > As you may know, it can be interpreted as 4 Bytes hexadecimal > number... It's a randomly generated number that generated for this account name ___

Re: [Full-disclosure] Support_388945a0 account in Win XP/2003

2005-11-30 Thread Raoul Nakhmanson-Kulish
Hello, Aditya Deshmukh! On 01.12.2005 8:14 you wrote: That is a "help and support account" that you should disable. Also set very long random password and forget it. I prefer simply delete it. Good choice? But I heard a rumours that this account can be activated remotely without user's aware

Re: [Full-disclosure] Support_388945a0 account in Win XP/2003

2005-12-01 Thread Raoul Nakhmanson-Kulish (en)
Hello, James Tucker! On 01.12.2005 11:27 you wrote: Someone is actually spreading rumors of a service being abused that isn't even listening at the time? RA requires the RA server to be launched. Don't leave un-closed tickets or RA support connection scripts hanging around. Of course :) bu

RE: [Full-disclosure] Support_388945a0 account in Win XP/2003

2005-12-01 Thread Aditya Deshmukh
> > > That is a "help and support account" that you should disable. > > Also set very long random password and forget it. > I prefer simply delete it. Good choice? > > But I heard a rumours that this account can be activated remotely > without user's aware decision and used for Remote Assistance

RE: [Full-disclosure] Support_388945a0 account in Win XP/2003

2005-12-02 Thread Christopher Carpenter
EMAIL PROTECTED] On Behalf Of Aditya Deshmukh Sent: Thursday, December 01, 2005 10:09 PM To: 'Raoul Nakhmanson-Kulish' Cc: full-disclosure@lists.grok.org.uk Subject: RE: [Full-disclosure] Support_388945a0 account in Win XP/2003 > > > That is a "help and support account"