Izanai

Ok you can close the topic. @AdvancedSetup Looks like ESET Anti-Theft was doing some weird stuff and created everytime a ghost account. Anyway thanks for all the tips, tools and your time.

I've been trying to run it, but its appearing "Error" now on each entry. Also, yes, I deleted the account multiple times, but appear after each reboot.

About this .zip: asset-v1_CyberWarrior+ESPA113+2022_T2+type@asset+block@Cases.zip I know what is, are some virus cases, cuz I'm practicing for SOC lvl1, so there is no problem with the file, I mean, the zip content some virus, but is not related with the main problem because I download it today, and the account "Alex" appeared long time ago. Autorun scan.zip

Even ESET didn't detected anything. About the report, for any reason is not allowing me to upload the .txt, so just copy&paste everything here. About the Event2, Im 100% sure what is that, I donwload it today. About the first one, I don't know. I've been getting multiple notifications from malwarebytes when I open Opera GX.

Hi, I'm removing the account, but after reboot the Windows, the account appear again. I've been running Malwarebytes but is not detecting any threat. Looking in the Addition.txt, the account named "Alex" is the one that is appearing. Addition.txt FRST.txt Scan Report MB.txt