So after running that PC Wizard 2004 program from the RAM post, I decided to check my user account.

I only have me set up as the admin, and no guest accounts.
What I found in there was another account asp.net

What the heck?
I never created it, and I do not remember seeing it before when I have been in there in the past several months ago.

I googled it and it is this iste.

How in the heck did it get there?
Is it some kind of spyware?
I run Spybot S&D weekly along with a paid version of Spy Sweeper.

This is puzzling to say the least.

 

Greetings,
Sometimes when you install software it creates an account to allow it to do what you ask. This is common with software utilities that probe your machine for information on the hardware and software that is installed and operating.
I've seen this with software from Microsoft such as System Management Software (SMS) and Microsoft Terminal Services to name a few. You can probably delete the account without an adverse effects on the PC.
I'm taking a guess here but I'll bet that software runs on a web page, generates its results on a web page and uses Java to run the tests. If this is true, your not hacked just delete the account.
If not, let me know and I'll install it on a test machine and see where its roots are.

MV
PS, also install Ad_aware to your spycheckers.

 

Thanks for the info.
I am looking in the Windows Explorer under Documents & Settings where it lists me and All Users, and I do not see it listed.
I wonder if I can find it listed elsewhere on the PC, then check the props of it and see what date it was created.

I wonder if that PC Wizard program installed it today?

If you get time, go ahead and install it and see what you come up with.

 

Greetings,
I would need to know what operating system you are using. In XP, 2000 you need to go to settings, control panel, user accounts to see the users, then programs, Admin tools, local security settings to see the properties. I'll install the software tomorow in a lab if I have your OS.

MV

 

Probably not, I didn't get it when I installed the app today.


This is the reasoning behind the account:

http://www.mvps.org/marksxp/WindowsXP/aspdot.php

The short form is that the account is used as a "worker bee" with reduced acceess rights on the machine. That helps to enforce rights and privileges in case something (e.e., a virus) gets onto the machine through the account and starts wreaking havoc.

Since the account is used for web services, it tends to have an open pipeline "out the door" and thus can be a security hole.

There's more information around if you google using this search.

 

MV, I am using XP Pro.

Mark, thanks for the info.
Doing some reading now.

 

Yeah the Microsoft .NET framework is installed as one of the Windows "Security Updates" it than adds the asp.net account.

 

4Hummer is right, it gets installed when you set up the .NET framework. There is no harm in having it and if you delete it you may cause .NET not to function properly. If it is any consolation all my comps have XP Pro and also have that account.

 

greetings,
You can delete the account if you like and it won't hurt anything if your not using any .NET programs on your PC such a developing SQL etc...etc.....
I hate to do this but the best way to figure this out is to read here:
http://support.microsoft.com/default...b;en-us;317012

Then you can decide to delete it or not.

MV

 

Greetings,
To save you some long reading:

Removing ASP.NET
When you remove ASP.NET, the ASPNET account is disabled and remains on the system. You can delete the ASPNET account if you do not intend to reinstall ASP.NET.

If you reinstall ASP.NET after you explicitly delete the ASPNET account, a new ASPNET account is created that has a new security identifier (SID). As a result, any ACLs that referred to the previous ASPNET account no longer apply to the new ASPNET account.


MV