Unknown Hidden User Account - Is It Dangerous?

Status
Not open for further replies.

JamieK

Distinguished
Mar 28, 2012
17
0
18,520
Hi,
I've just noticed a hidden user account on my PC that I know nothing about.
My PC only has one user account that is not password protected (doesn't need one, i'm the only person that uses it).

This hidden account doesn't show up when I go to the 'Add or remove user accounts' page, or the normal user accounts page - it only shows up when I go to the 'Parental Controls' page.

http://i24.photobucket.com/albums/c3/scuddmuppet/parentalcontrols_zps36b00038.png

http://i24.photobucket.com/albums/c3/scuddmuppet/useraccounts_zps816dc6aa.png

When I saw it I turned on all the parental controls and blocked access to everything.

I searched around for a reason for it being on my PC and couldn't find one. I thought maybe it had to do with some software I have installed, and it maybe nothing to worry about, but having no idea how it got on my PC, i'm not taking any chances.

I have no way of deleting it as I can't access it on the 'Add or remove user accounts' page.

So, does anyone have any idea what the hell this account is? Any way to remove it? Or is it nothing to worry about?


Thanks in advance,

Jamie
 

Guanhao

Honorable
Apr 15, 2013
76
0
10,640
to my thinking i think that name looks like a kinda virus name... might delete it if you don't see any important files by accessing this path:
C:\Users\65DA677AF7CA4A949399\desktop
C:\Users\65DA677AF7CA4A949399\documents
C:\Users\65DA677AF7CA4A949399\pictures
C:\Users\65DA677AF7CA4A949399\music
C:\Users\65DA677AF7CA4A949399\videos
C:\Users\65DA677AF7CA4A949399\downloads
 

Joe67

Honorable
Nov 29, 2012
29
0
10,540
That account is made when you turn on parental controls to make it secure it automatically makes it password protected, just turn off parental controls and it will be deleted. You must of by some way turned on parental controls or maybe a program may have did it for you if not,or Like a firewall or antivirus program did it ...and yes a password should be in place even if its only you using it. You open the door for all types of viruses n hackers, snoops..ect if not. hope this helps you..
 

Apanzee

Honorable
Dec 17, 2012
850
2
11,010
What Joe said.

You could simply disable it doing the following:

Start > type "cmd" > right click, run as administrator

In the black box, type the following then hit enter: net user 65DA677AF7CA4A949399 /active:no

After rebooting, it shouldn't be visible anymore.

I made an account called "example" to show you what it should look like.

84415092.png
 

JamieK

Distinguished
Mar 28, 2012
17
0
18,520


Well as sensible as this seems, when I tried it, all hell broke lose.

First off it wouldn't log on at all, it just kept getting stuck at the windows welcome screen. I had to do a system restore from my win7 disc to get it working again.
Then (although this may be an unrelated problem), my internet wouldn't work at all. I was unable to access any websites, even though other computers on my network still could. My computer couldn't find anything after I tried troubleshooting. The strange thing here is that I booted up in safe mode to see if I could delete this mystery account from there, and the internet was working again!
So I managed to uninstall my firewall and virus protection in safe mode (a solution I found for this problem), and this sorted out my internet problem. After re-installing everything again and having to reboot my computer about 20 times today, I'm back to where I was at the start of all this, after around 7 hours of problem solving.
Still have the uknown mystery account, nothing has changed with that.

@Guanhao - I tried looking there but there was only a default, local and my normal user name folder. Nothing else there (I checked hidden files and folders too.)

@Joe67 - This couldn't have been created when I turned on parental controls because I have never turned them on before. I only turned them on when I found this hidden account.

@Hawkeye22 - This is what I originally thought, but how would I know what program caused it (even if it is something i've installed)?
p.s I know I'm not supposed to bump, but it wasn't getting answered. Sometimes you need a cheeky bump to get it noticed (worked, didn't it?).

Thanks for the initial advice guys. Got any more ideas? (hopefully ones that don't cause another 7 hours of problem solving ;) )
 

Apanzee

Honorable
Dec 17, 2012
850
2
11,010
Oh boy. I'm sorry. I'm having trouble figuring out what went wrong there though, since disabling the account and removing it are two entirely different things. Disabling it shouldn't have caused any problems..

Have you tried doing a system restore to a point before the account was present?
 

JamieK

Distinguished
Mar 28, 2012
17
0
18,520
No problem dude, it wasn't your intention :) I've tried a system restore to the furthest point I can, but the account is still there. The thing is that it was just by chance that I noticed the account, I've never used the parental controls before, so I have no idea how long it's been there :??: (can't even remember why I was on the parental control page in the first place).
 
It may be time to run a full malware/virus scan. Disabling the account definately shouldn't have crippled the OS that bad.

Normally when an account is created to run a service it has a more meaninful name. I'm not sure which program or service would create an account name like that.
 

alantern

Honorable
Oct 10, 2013
1
0
10,510
I'm having the same problem. Problem is, when I enter the command you told me, it leads me to believe I need to enter that command with the password attached. I do not know the password.. It says:

"The syntax of this command is:
NET USER
[username [password : *] [options]] [/domain]"

and then shows a list of various options.

I believe it is an authority with legal jurisdiction monitoring my internet activities, or possibly a corrupt fraternal entity that is simply manipulating legal jurisdiction to harass me with no legal intentions.

please help on how i can bypass the password??
 
Status
Not open for further replies.