Virus constantly creating new user accounts

[agrias7]

i know my problem is similar with this
http://www.sevenforums.com/system-s...us-constantly-creating-new-user-accounts.html
since its banned to use combofix without trained supervision, so i start new thread
P.S : Downloading Malwarebytes, ill update if they found something

 

[VistaKing]

agrias7

Run a DDS

Click here DDS

:ar: Click on Download Now button

:ar: When the download is complete . Drag the DDS program from the Downloads folder to your Desktop

:ar: Right-click the DDS icon on the Desktop choose Run as administrator to run the tool.

:ar: Place a check next to attact.txt and click Start . When done, DDS will open two logs
DDS.txt
Attach.txt

:ar: Save two logs onto your desktop and upload them with your reply

 

[agrias7]

here, still scanning with malwarebytes

 

[VistaKing]

I'm not seeing any suspicious things except for the proxy stuff .

I do see this " ???????? ???? " inside the attach.txt

Open Programs and Features by clicking the rb: button , click on Control Panel, click Programs, and then clicking Programs and Features.

Do you see any software with the question marks in the list ?

 

[cottonball]

Eset Smart Security 6 Anti-Theft feature creates a Phantom Account.

How do I resolve an Anti-Theft audit warning notification in ESET Smart Security? (6.x) - ESET Knowledgebase

DDS shows you already ran ComboFix...

 

[agrias7]

I'm not seeing any suspicious things except for the proxy stuff .

I do see this " ???????? ???? " inside the attach.txt

Open Programs and Features by clicking the rb: button , click on Control Panel, click Programs, and then clicking Programs and Features.

Do you see any software with the question marks in the list ?

elite proxy switch? i dont think thats the problem, already install it long time ago
for "?????" its a japanese game need change locale to japan to play it

 

[cottonball]

The "???????? ????" inside the attach.txt are created because the program cannot read the language.

 

[VistaKing]

@ cottonball

I was just curious .

 

[agrias7]

okay i change system locale to japan now its readable, its just a game not virus
if curious what is it google it LOL

i check eset account and only had account password problem (fixed)

 

[VistaKing]

Google it ? I will pass . Thanks though .

 

[agrias7]

this thing hidding so well
i try CKScanner
edit : finaly done full scan malwarebytes = cant detect it
i use combofix earlier, coz i contact eset support and they told me to do that