Ken. Bree, Kari,
Thank you all for your interest.
I looked at Task Manager and saw nothing I can associate with Eset in either Start-up or Services.
If what your say is correct Kari, I wonder why I didn't see these extra users when I opened up the Users folder to install new filters in Mailwasher, i.e. with "Show hidden files and folders" enabled?
Out of curiosity I rebooted and looked again at the Users folder. There are extra ones again but they now have different names.
Since you didn't see Eset in services or Start-Up might I suggest you look at Autoruns,(download) part of Sysinternals and see if you can find something Eset may have installed. Actually this will give a view into all sorts of things. I wouldn't change anything with proper backups in place.
I guess you could also search your registry looking for the word Eset. No real need to say it but when in the registry caution is always recommended.
I have Autoruns downloaded. Which of the exe files should I use? My Windows 10 is version 1703 (OS Build 15063.296)
Last edited by Syncopator; 11 Jun 2017 at 13:49.
Ran that, thank you.
Can't see Eset anywhere.
I did, though, find something left over from BitDefender, which I uninstalled a few weeks ago.
It's in the HKLM\System\CurrentControlSet\Services section, and is called Trufos Mini-Filter-Driver, BitDefender S.R.L
I presume I can get rid of it?
Its strange that ESET has done this, news to me. Have you tried any attempts to delete/erase the said usernames on your computer via administrator's tools if you've got it?
I can't say that deleting a key in registry is good or bad. If the software has been uninstalled I think risks are reduced.
That said I would make a backup of my registry and understand how to restore.
Very strange that there is nothing in services, startup or Autoruns.
Did you do a word / string search for eset in Registry?
It might be worth running Hitman Pro as just one more set of eyes.
When you were reviewing Autoruns did you see any security software that you were unaware of, McAffee, Bitdefender etc.
If you go to folders in File Manager and look at security who is it assigning permissions too?
Ken
Problem solved. I should have thought of this earlier, but I had very recently installed an anti-ranwomeware program - forget what it was called. Anyway, I uninstalled it and the extra user names disappeared.As I mentioned before, Bitdefender was on the machine but I uninstalled it a few weeks ago. There was an entry in Autoruns which was associated with Bitdefender. I uninstalled it, but it's still there in Autoruns with a "File not found" there too.
Excellent. If you could look into that ransomware name and post we can add it to our list of things that add users. Take care.
Quote