Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Strange Virus: Constantly creating new user accounts

29 Mar 2013   #41
Golden
Microsoft MVP

Windows 7 Ult. x64
 
 

Quote   Quote: Originally Posted by drockmd View Post
I had the same problem, contacted Eset and it turns out, the version of smart security 6 is creating the phantom user.
Yours is a different problem entirely - ESET Smart Security 6 was released after the data of the original problem discussed above, and is a known issue discussed elsewhere on the forum


My System SpecsSystem Spec
.
29 Mar 2013   #42
drockmd

win 7 x64
 
 

Would you be kind enough to point me to the thread where it shows how to handle the issue in case I still have a virus?
My System SpecsSystem Spec
30 Mar 2013   #43
Golden
Microsoft MVP

Windows 7 Ult. x64
 
 

Quote   Quote: Originally Posted by drockmd View Post
Would you be kind enough to point me to the thread where it shows how to handle the issue in case I still have a virus?
Start your own thread describing your issue - that way its easier for everyone to stay focused on the issue.
My System SpecsSystem Spec
.

10 Jun 2013   #44
michaelward

Windows 7 Home Premium
 
 

I have exactly the same problem as the original post. Phantom user accounts appearing. The names of the current ones are:
atiibxtgx
jqrycozk
Im not sure but they seem to appear when i reboot windows after i have previously booted in mac OS. This might just be a coincidence of rebooting.
I have logged a support request with Eset. Will wait and see if they come back with anything useful.
My System SpecsSystem Spec
13 Jun 2014   #45
NimrodYanai

Windows 7 home premium 64bit Alienware
 
 

Sorry to bump this post. Here's the situation: I am having a phantom user created once in a while. It happened a few monthes ago, I changed all my passwords on another computer (though there seem to have been no unusual activity in any account anywhere...), did complete scans with ESET and Malwarebytes, and when that didn't work - did a full formatting and reinstall of my Windows 7.
The user account name is cfspwpsd, normal account (no admin).
After the format everything was fine for a couple of months... Now it suddenly returned! It's the same user name as a few months back.
I redid all the checks, an online ports check, used Kaparsky TDSkiller for rootkits, and now found this thread and followed the instructions, eventually using combofix to see if it works. Here is the log files for the TDSkiller and Combofix.
Now here's the thing: I used to already have a phantom user for ESET theft protection. This new account is ON TOP of that account.

Anyone have any idea what's going on?

Thanx a lot for the help!


Attached Files
File Type: txt ComboFix.txt (28.5 KB, 0 views)
File Type: txt TDSSKiller.3.0.0.39_09.06.2014_23.31.34_log.txt (213.2 KB, 0 views)
My System SpecsSystem Spec
13 Jun 2014   #46
NimrodYanai

Windows 7 home premium 64bit Alienware
 
 

OK guys, never mind.
It seems that ESET changed their anti-theft settings online. Once I was asked to create a phantom user and I did, and now they changed the settings to create a phantom user automatically every X minutes if it doesn't exist yet... I stumbled on to it randomly online. I was able to change the automatic name to a different, less random one. Doesn't seem to be a virus after all, and all is well. Sorry to have bothered you.
My System SpecsSystem Spec
30 Jul 2015   #47
SCs47

Windows 7 Ultimate x64
 
 

Although this post started 3 years ago, but maybe the problem is not completely cleared up even today. I had the same problem now in July 2015, and searched the Internet for solutions, but have not found any really satisfying result. Then I called the ESET Antivirus Technical Helpdesk, since I also have this antivirus software. It turned out that the additional user account was created by the ESET AntiVirus software's Antitheft module under certain circumstances. If someone still has the same problem, please contact the technical helpdesk of ESET. The solution is quite easy, if one follows their advice.
My System SpecsSystem Spec
Reply

 Strange Virus: Constantly creating new user accounts




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Virus constantly creating new user accounts
i know my problem is similar with this http://www.sevenforums.com/system-security/242161-strange-virus-constantly-creating-new-user-accounts.html since its banned to use combofix without trained supervision, so i start new thread P.S : Downloading Malwarebytes, ill update if they found something
System Security
Creating new user account adds TWO accounts
On my laptop I created a new user account called "Colin". When I looked (in Windows Explorer) under "users" there were two new accounts listed, one called "Colin" and one called "Colin.laptop". Of these, only "Colin" appears at Login or if accounts are viewed under "User Accounts" in Control Panel....
General Discussion
Need Help in creating extremely limited User Accounts
I do not know much about these things so I'm gonna make it direct. I want the only functionality it can do is 1. open a folder containing shortcuts to files in a certain folder. 2. be able to run those shortcuts. **The files run on flash, and apparently my PC chose Internet Explorer as its...
General Discussion
Strange Unknown Accounts In User list
Hi there, Wonder if you can help me. Noticed something strange today and trying to work out whether anything sinister is going on with my machine. Ran virus scans and such, all came back clear. I basically have a series of "Unknown Accounts" listed in advanced system properties. This...
General Discussion
Affected by virus, user accounts dont display
by mistake i double clicked a file in mail attached i am sureits some form of virus it affected my pc i removed it by antimalware,mse and kaspersky but still i cant see user accounts check attached pics,do help me i need to take files from desktop and downloads which is hided now else i will...
System Security
Strange user accounts i dont reconize?
Hi i am running windows 7 and i setting up my mini home network and when i right click on the file i would like to share to change some of the permissions there are 3 user account that appear. There is my account Liam-laptop\Liam, administrators Liam-laptop\administrators and there is one with a...
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 17:20.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App