user account

Question

Hello,

I recently ran Spyhunter and it came up with the following, "C:\Users\Marcos Cavendish\AppDate\Roaming\ptxoh.exe."

That is not my name.  I have no idea who that is and when I go to the directory, even after enabling hidden folders, there is nothing.

I am at a complete loss.  

Will you please point me in the right direction as to what this is/potentially how to get rid of it. (the directory and potentially an unwanted user, not the file i referenced.)

Thank you,

Tyler

Answer 1

c:\Users>dir

Volume in drive C has no label.

Volume Serial Number is C223-B390

here is both command line and file explorer as comparison

Directory of c:\Users

10/05/2020  11:01 PM    <DIR>          .

10/05/2020  11:01 PM    <DIR>          ..

10/05/2020  10:56 PM    <DIR>          Public

11/08/2020  11:45 AM    <DIR>          wmt99

0 File(s)              0 bytes

4 Dir(s)  415,516,180,480 bytes free

c:\Users>

Answer 2

Ok, if Spyhunter has already detected this, it is possible it automatically removed it, hence why it isn’t appearing in that location.

Is there logs or anything you can check in SpyHunter to check if this is the case?

Kind Regards,

Elise

Answer 3

spyhunter would have removed the file in the directory, (ptxoh.exe) the file is what triggers the response from spyhunter, not the directory.  In addition, i tried to find the directory before the scan finished and couldn't.  spyhunter needs me to proceed with the removal of its findings. it doesn't automatically remove suspected files.  I have looked all throughout my laptop wherever there could be possibly be another user and can't find anything.  everything has my user name and/or my email address.  Also, remote desktop is completely disabled.

I truly do not know what i should do.  

Thanks,

Tyler

Answer 4

I ran Malwarebytes prior to running SpyHunter.  It didn't come back with anything.

Answer 5

Hi, I'm Elise, an independent advisor and I'd be happy to help with your issue.

That is quite odd and does suggest possible malware, I’d suggest download and using malware bytes to remove any possible issues:

https://www.malwarebytes.com/

Please let me know if you need any further assistance.

Kind Regards,

Elise

Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.