SOLVED Unauthorized account appears

[Sakej99]

Hello
So I recently bought a new laptop and upgraded to Windows ten. After a couple of weeks a account named Jon appeared. I deleted the account, but every time I get on my computer it reappears! And when the account appears my computer gets really slow. Does anyone know if this is a Windows ten glitch? Or any suggestions on how to fix this?
Thanks

 

[Trouble]

I deleted the account, but every time I get on my computer it reappears!

Reappears where?
Are you seeing it here
Control Panel\All Control Panel Items\User Accounts\Manage Accounts
Are you logging in with a Microsoft Live ID?
Do you have a local account and has it been affiliated with a Microsoft Live ID?
I haven't seen or even heard of this type of thing happening. Have you scanned the system for malicious software?

 

[Sakej99]

It is under the manage accounts. I have also scanned my computer with eset antivirus. And I do not know if I have Microsoft ID. I just made my account on my computer when I got it.

I found someone else with the same problem.

http://answers.microsoft.com/en-us/...g/72f62b71-e2eb-4de7-ab2c-010dad031c27?auth=1

 

[Trouble]

Is your laptop also a Lenovo as described in the article that you linked to?

 

[Sakej99]

No, it's a Asus ROG

 

[Trouble]

Do you have any remote management software installed..... LogMeIn, GoToAssist, TeamViewer, etc.?
Have you considered changing your account password before deleting the rogue account?
Give it a thorough scan.....

These are the programs I use to generally delouse a computer with virus and or malware issues.
ADWcleaner from here http://www.bleepingcomputer.com/download/adwcleaner/dl/125/
JRT (Junkware Removal Tool) from here http://www.bleepingcomputer.com/download/junkware-removal-tool/dl/131/
Norton Power Eraser from here https://security.symantec.com/nbrt/npe.aspx
Malwarebytes from here http://www.malwarebytes.org/mwb-download/confirm/
SuperAntiSpyware from here http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE
Ccleaner from here http://www.piriform.com/ccleaner/download/standard
TFC.exe (Temporary Files Cleaner) from here http://www.geekstogo.com/forum/files/file/187-tfc-temp-file-cleaner-by-oldtimer/
ESET Online Scanner from here http://www.eset.com/us/online-scanner/

Eset online scanner is a bit different than the others in that you need to either use
IE or download and run their smart installer if you're using another browser. Then tick
the radio button that says "Enable detection of potentiall unwanted application"
Then click the link that says "Advanced settings", then check all the boxes except the
one that mentions "Use custom proxy settings", unless of course you're using a Proxy
Server. Then just click "Start", it will do a thorough system scan so it takes a long
time.

I don't check the links above everyday, so if you have any problem with any one of them then just Google for the program name but use the site names that I have recommended since I'm relatively certain they are free of extraneous garbage.

 

[Sakej99]

I scanned with eset, before and after I deleted the Jon account, nothing came up. I also changed my password before I deleted the account. When I was doing the eset scan after I deleted the account I realized that the tab to scan users still had Jon listed. I also found the account in (This PC/OS/users) after I had deleted it. So I deleted that file and am waiting to see what happens.

 

[Sakej99]

The account is back. I have checked for viruses and changed my password. And the account isn't under (This Pc/OS/users)

 

[Trouble]

OK.
I must admit, I'm completely stumped on this one.
I asked in an earlier post if....

Do you have any remote management software installed..... LogMeIn, GoToAssist, TeamViewer, etc.?

I never saw a reply from you regarding that information but, if you've used or have used such software there may still be remnants of that on your system permitting some back-door access to your computer.

 

[Sakej99]

Pretty sure I don't have any remote management software.

 

[Trouble]

Use an elevated command prompt and disable the account if you are absolutely certain it is un-needed and rogue in nature.
Right click the start button and choose Command Prompt (Admin) In the command prompt window type
net user jon /active:no (where jon is the user account you wish to disable).
hit enter
type
exit
hit enter
See what comes next.

 

[Sakej99]

Didn't work

 

[Trouble]

How do you mean..... it didn't work?
The account is not disabled?
That is very strange..... did you get an error
Try this
Right click the start button and choose Command Prompt (Admin) in the command prompt window type
net user jon (where jon is the user you wish to check)
hit enter
That should provide information regarding the user account, including if it is active, when it was last used (Last logon)

 

[Sakej99]

I figured it out, it was ESET anti theft creating a phantom account.

 

[Trouble]

Interesting.....
Thanks for letting us know.