I have a standalone W7 PC that recently create an additionla user account when the regular user logs in. If I remove the additional user (using cpanel-users) it disappears until the next time the main user logs in.
If I remove the errant user and boot into safe mode it is not created. If I then boot into normal mode it is recreated.
The machne is running eset which has detected nothing untoward, I'm just running a Sophos independent Boot AV (BAV) scan but it has not completed yet.
Has anyone else seen this type of behaviour before and can someone give me a good steer please.