Hi again,

The user is the admin account for the MOSS. The username/password have not been changed.

So, I do not understand why this event even occurred.