mmmh. That would mean that the tempAdministrator was already in my system, having been created by some script I used in the past. Or still being run regularly. I didn't do any such thing. Nor I can think of anything I ever used on my sever that could do it.

Worth looking into, though. I should be able to find out when the account was created (that should also be in the logs and I was in fact planning search for that).