W7 user account being created at logon - how to fix
Hi Guys,
I have a standalone W7 PC that recently create an additionla user account when the regular user logs in. If I remove the additional user (using cpanel-users) it disappears until the next time the main user logs in.
If I remove the errant user and boot into safe mode it is not created. If I then boot into normal mode it is recreated.
The machne is running eset which has detected nothing untoward, I'm just running a Sophos independent Boot AV (BAV) scan but it has not completed yet.
Has anyone else seen this type of behaviour before and can someone give me a good steer please.
Thanks
I have a standalone W7 PC that recently create an additionla user account when the regular user logs in. If I remove the additional user (using cpanel-users) it disappears until the next time the main user logs in.
If I remove the errant user and boot into safe mode it is not created. If I then boot into normal mode it is recreated.
The machne is running eset which has detected nothing untoward, I'm just running a Sophos independent Boot AV (BAV) scan but it has not completed yet.
Has anyone else seen this type of behaviour before and can someone give me a good steer please.
Thanks
ASKER
Does a temporary profile create a different username ???
This is creating a consistent 'random' user name like mcoqipg (the same spelling) for each incarnation. I thought temp profiles used the same user name but the profile was obtained from a set of defaults when the OS couldn't load the current one.
The scan is flagging up a lot of Mal/phish-A infections (Sophos parlance!) I'm waiting for this to finish and then will look again.
Will read your link above in the meantime.
Thanks for your time.
REgards
Trevor
This is creating a consistent 'random' user name like mcoqipg (the same spelling) for each incarnation. I thought temp profiles used the same user name but the profile was obtained from a set of defaults when the OS couldn't load the current one.
The scan is flagging up a lot of Mal/phish-A infections (Sophos parlance!) I'm waiting for this to finish and then will look again.
Will read your link above in the meantime.
Thanks for your time.
REgards
Trevor
ASKER
Hi Adrienne,
The answers.Microsoft artical refers to a situation where the user is prompted that he is neing logged in with a temporary profile. This is not my situation . . .
A new account (icon at least) is created when the main user logs in - there is no system or other warning.
Thanks for your time though - anyone else have any clues about this ???
REgards
Trevor
The answers.Microsoft artical refers to a situation where the user is prompted that he is neing logged in with a temporary profile. This is not my situation . . .
A new account (icon at least) is created when the main user logs in - there is no system or other warning.
Thanks for your time though - anyone else have any clues about this ???
REgards
Trevor
You have to scan your pc as it is infected with virus.
Once full system scan completed please add remove program and startup list (for startup list open msconfig and navigate to the startup tab).
All unwanted application should be removed and also startup items.
Also i recommend windows security essential to be installed on the machine (its lite and reliable)
Once full system scan completed please add remove program and startup list (for startup list open msconfig and navigate to the startup tab).
All unwanted application should be removed and also startup items.
Also i recommend windows security essential to be installed on the machine (its lite and reliable)
ASKER
Thanks Pradeep
As mentioned I am running the Sophos AV which has already deteceted 35 instances of Mal/Phish-A which have now been removed.
I'll report back if this has fixed the issue - likely I'll need to do some more fix up too. I'll record here if so.
REgards
As mentioned I am running the Sophos AV which has already deteceted 35 instances of Mal/Phish-A which have now been removed.
I'll report back if this has fixed the issue - likely I'll need to do some more fix up too. I'll record here if so.
REgards
ASKER
Well I seem to have the same problem.
I have performed my normal cleanup operations using ccleaner and spybot after running the Sophos independent boot scanner with virus remove turned on - found 35 instances of Mal/Phish-A.
Anyone have any ideas here either had experience or can suggest a way forward ????
REgards
I have performed my normal cleanup operations using ccleaner and spybot after running the Sophos independent boot scanner with virus remove turned on - found 35 instances of Mal/Phish-A.
Anyone have any ideas here either had experience or can suggest a way forward ????
REgards
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi Gentle0000,
Thanks indeed for your post, and I can indeed confirm this was the case. I discovered this a short while after my last post but haven't been able to conclude here.
For your trouble to post here please accept the points.
REgards
Trevor
Thanks indeed for your post, and I can indeed confirm this was the case. I discovered this a short while after my last post but haven't been able to conclude here.
For your trouble to post here please accept the points.
REgards
Trevor
ASKER
A little late for me as I had found this out already but had not reported back.
But the answer was 100% accurate. Unfair not to award points.
But the answer was 100% accurate. Unfair not to award points.
http://answers.microsoft.com/en-us/windows/forum/windows_7-security/being-logged-in-to-windows-7-with-a-temporary/95a4689d-e5b8-43b7-8fee-e87a01ae7acb