In-Reply-To: <[EMAIL PROTECTED]>
I'm not sure what you mean when you say you found "hacking server" in a description "at" usermanager. I have to assume that you're saying that a user or machine account in UserManager on your NT4.0 system had the words "hacking server" (and the 'numericals' and 'junk characters' you mentioned) in the description. If this is the case, I think your root cause is pretty obvious. Someone has been adding accounts to your domain w/ this information.
