New unknown users have appeared in my Users folder.

Page 2 of 3 FirstFirst 123 LastLast

  1. Posts : 283
    Version 1803 (OS Build 17134.885)
    Thread Starter
       #11

    Ken. Bree, Kari,

    Thank you all for your interest.

    I looked at Task Manager and saw nothing I can associate with Eset in either Start-up or Services.

    If what your say is correct Kari, I wonder why I didn't see these extra users when I opened up the Users folder to install new filters in Mailwasher, i.e. with "Show hidden files and folders" enabled?
      My Computer


  2. Posts : 283
    Version 1803 (OS Build 17134.885)
    Thread Starter
       #12

    Out of curiosity I rebooted and looked again at the Users folder. There are extra ones again but they now have different names.
      My Computer

  3. Caledon Ken's Avatar
    Posts : 20,109
    Windows 10 Pro x64 Version 1909
       #13

    Since you didn't see Eset in services or Start-Up might I suggest you look at Autoruns,(download) part of Sysinternals and see if you can find something Eset may have installed. Actually this will give a view into all sorts of things. I wouldn't change anything with proper backups in place.

    I guess you could also search your registry looking for the word Eset. No real need to say it but when in the registry caution is always recommended.
      My Computer


  4. Posts : 283
    Version 1803 (OS Build 17134.885)
    Thread Starter
       #14

    I have Autoruns downloaded. Which of the exe files should I use? My Windows 10 is version 1703 (OS Build 15063.296)

    New unknown users have appeared in my Users folder.-autoruns.jpg
    Last edited by Syncopator; 11 Jun 2017 at 13:49.
      My Computer

  5. Caledon Ken's Avatar
    Posts : 20,109
    Windows 10 Pro x64 Version 1909
       #15

    Autoruns64.exe
      My Computer


  6. Posts : 283
    Version 1803 (OS Build 17134.885)
    Thread Starter
       #16

    Ran that, thank you.

    Can't see Eset anywhere.

    I did, though, find something left over from BitDefender, which I uninstalled a few weeks ago.
    It's in the HKLM\System\CurrentControlSet\Services section, and is called Trufos Mini-Filter-Driver, BitDefender S.R.L

    I presume I can get rid of it?
      My Computer



  7. Posts : 8
    Arch Linux
       #17

    Its strange that ESET has done this, news to me. Have you tried any attempts to delete/erase the said usernames on your computer via administrator's tools if you've got it?
      My Computer

  8. Caledon Ken's Avatar
    Posts : 20,109
    Windows 10 Pro x64 Version 1909
       #18

    I can't say that deleting a key in registry is good or bad. If the software has been uninstalled I think risks are reduced.

    That said I would make a backup of my registry and understand how to restore.

    Very strange that there is nothing in services, startup or Autoruns.

    Did you do a word / string search for eset in Registry?

    It might be worth running Hitman Pro as just one more set of eyes.

    When you were reviewing Autoruns did you see any security software that you were unaware of, McAffee, Bitdefender etc.

    If you go to folders in File Manager and look at security who is it assigning permissions too?

    Ken
      My Computer


  9. Posts : 283
    Version 1803 (OS Build 17134.885)
    Thread Starter
       #19

    Problem solved. I should have thought of this earlier, but I had very recently installed an anti-ranwomeware program - forget what it was called. Anyway, I uninstalled it and the extra user names disappeared.As I mentioned before, Bitdefender was on the machine but I uninstalled it a few weeks ago. There was an entry in Autoruns which was associated with Bitdefender. I uninstalled it, but it's still there in Autoruns with a "File not found" there too.
      My Computer

  10. Caledon Ken's Avatar
    Posts : 20,109
    Windows 10 Pro x64 Version 1909
       #20

    Excellent. If you could look into that ransomware name and post we can add it to our list of things that add users. Take care.
      My Computer


 
Page 2 of 3 FirstFirst 123 LastLast

Related Threads
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 10:20.
Find Us




Windows 10 Forums