Updated on 2022-12-01 GMT+08:00

Step 4: Detecting Abnormal Users

This section describes how to detect abnormal users.

Procedure

  1. Choose Control Panel > Administrative Tools > Computer Management.

  2. In the navigation pane on the left, choose Local Users and Groups > Users to check whether abnormal users exist in the host.

  3. In the navigation pane on the left, choose Local Users and Groups > Groups to check whether abnormal groups exist in the host.

  4. Check whether abnormal files (not created by the system or service deployment) exist in the abnormal user directory.

  5. Check whether the abnormal files are used for normal services, or use antivirus software to scan the abnormal files.