new weird accounts created and named fbwuser !

new users on my windows 7 was created named fbwuser and I did not make it
accounts names is :
1-fbwuserF45B
2- fbwuserF45B
3-fbwuserF45B
4-HomeGroupUser$

i have heard that may caused by hotspot or any VPNs program
any idea !!!

see instructions here https://forum.avast.com/index.php?topic=53253.0
scoll down to second picture … Farbar Recovery Scan Tool … run as instucted and attach the two diagnostic logs

see below the box you write in … Attachments and other options

Logs will be checked by an expert tomorrow

Sounds like it is something (vpn) from anchorfree

here is scan logs and seems fine

Those users are disabled… Did you set this proxy

ProxyServer: [S-1-5-21-2427239002-3345539292-2558161799-1006] => http=127.0.0.1:8555;https=127.0.0.1:8555
AutoConfigURL: [S-1-5-21-2427239002-3345539292-2558161799-1006] => http=127.0.0.1:8555;https=127.0.0.1:8555
ProxyServer: [S-1-5-21-2427239002-3345539292-2558161799-1007] => http=127.0.0.1:8555;https=127.0.0.1:8555
AutoConfigURL: [S-1-5-21-2427239002-3345539292-2558161799-1007] => http=127.0.0.1:8555;https=127.0.0.1:8555

NO I DIDN’T SET ANY PROXY MANUALLY
but i use vpn add-in with Firefox called ““browsec””

add-in website : https://browsec.com/en/

It may be related to that, you can test it out by uninstalling the VPN and see if the proxy disappears

uninstalled , restart , scan and u r correct :wink:

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip..\Interfaces{AB336FEB-C23D-422F-876D-9CF2F61AE184}: [DhcpNameServer] 192.168.1.1

Hit the nail on the head in reply #2 :smiley:

sorry i didn’t understand which nail in reply 2 !!!

lol :slight_smile:
now i understood that