Removing the account and the plug in so that admin won't see it suggests that they don't want to be seen. They come in, do the nasty and move out.. The nasty is obviously set to trigger at some point in time (possibly cron related) Check your scheduled tasks for unrecognizable cron jobs.. Snapshot the cron folder or count the number of files within and keep for future reference.
Not pruning the logs could mean that they are not aware of this functionality. Otherwise they would have done it.
Not pruning the logs could mean that they are not aware of this functionality. Otherwise they would have done it.
Comment