A couple of days ago I found that on several of my systems. I've been scares trying to see if I could find any backdoors. (so far no). Though the extra account had the same crypted password.
But I need to bring the systems up... I had a neat system for doing installations, but it fell victum to version rot.
*grumble* I wanted a weekend and I got script kiddie droppings. Teach me to be lazy about rotating the root password.