Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Mysterious random user account created after power failure.

31 Oct 2013   #1
WaterKiwi

Windows 7 Home Premium
 
 
Mysterious random user account created after power failure.

After a power outage (Computer lost all power as well as the circuit for the room) I restarted my Windows 7 desktop to find a new user account there that I did not create. It has a random name "ohlascdrxvzd".

It does not list in the C:/Users folder, but is listed in the Control Panel: User Accounts - Manage Accounts, and on startup it is listed in the Account selection buttons.

I will delete the account from the control panel and restart the computer... I am not expecting it to go away as I have this exact problem (with a different random named user account) on another PC that lost power instead of shutting down correctly as well.

More after restart...


After the restart the Account no longer lists in the buttons to select User account on startup, but it is still listing in the Control Panel: User Accounts - Manage Accounts.


Arrrrrgh! ^ _ ^

Now I am ready to receive help.


Update info:

It is a "Standard user" permissioned account

I have not logged into the account.

The Guest account is turned off.


My System SpecsSystem Spec
.
31 Oct 2013   #2
gregrocker

 

Could be created by a bloatware security suite or Updates to access the PC for auto updating.

I would uninstall any bloatware AV to install and run a full scan with free recommended Microsoft Security Essentials.

In addition I'd install free scanner, decline trial, update and run a full scan with Malwarebytes and SUPERAntiSpyware.com - Downloads

Then check System Files with SFC /SCANNOW Command
My System SpecsSystem Spec
31 Oct 2013   #3
WaterKiwi

Windows 7 Home Premium
 
 

I have a clean install running Eset Antivirus - No infections found.

I have Malwarebytes already installed up to date and scanned (see the No malicious files report below).

I have run Vipre Rescue - VIPRE Rescue - VIPRE Computer Recovery Solution with no Infected files found.

I'm not running an Nvidia updaters as I have an AMD Radeon HD 7900 Video Card... nor is there an UpdatusUse user account on this system.

The account literally was created automatically at the restart after the power failure.

Is it possible that Windows would create a user account incase the primary account was corrupt when recovering from a hard shut down power loss?

Also note: Before the Power failure I was logged into an Administrator account - that account is not corrupt and works just fine still.




Here are the results from Malwarebytes.

Malwarebytes Anti-Malware 1.75.0.1300
Malwarebytes : Free anti-malware download

Database version: v2013.10.31.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16721
Soothe :: SOOTHE-PC [administrator]

10/31/2013 1:35:42 PM
mbam-log-2013-10-31 (13-35-42).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 234034
Time elapsed: 3 minute(s), 19 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)






I'm currently running SFC - I'll report after it's finished.


SFC reports:

"Windows Resource Protection did not find any integrity violations."



Downloading and running http://www.superantispyware.com/ now.

Report to follow...

SuperAntiSpyWare only found tracking cookies... deleted.


Finishing Scans then Deleting the user account "ohlascdrxvzd" again and shutting down and restarting Windows 7.

Report when restart finishes.
My System SpecsSystem Spec
.

31 Oct 2013   #4
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

When you power went off did you have something plugged into the computer using USB port.
Sometimes goofy things happen when card readers, external hard drives ect. are attached.
My System SpecsSystem Spec
31 Oct 2013   #5
WaterKiwi

Windows 7 Home Premium
 
 

Restarted... again..

The user account "ohlascdrxvzd" is back again.

I did have several USB devices plugged in:

Drobo

UPS

Keyboard and mouse
My System SpecsSystem Spec
31 Oct 2013   #6
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

If you are sure your computer is clean I would recommend using a Restore Point before the power went off.
Any time your computer is on and sometimes off a power surge can cause all kinds of problems.

If you don't already I recommend using a quality Surge Protector.
My System SpecsSystem Spec
31 Oct 2013   #7
WaterKiwi

Windows 7 Home Premium
 
 

Surge Protector UPS failed.

Strangest part... Restore is and was enabled for Operating system and was setup to create restore points every time Software was installed or updated... but - all restore points are gone... none exist now. <sigh>
My System SpecsSystem Spec
31 Oct 2013   #8
WaterKiwi

Windows 7 Home Premium
 
 

Is there a way to find out what software created the user account?
My System SpecsSystem Spec
31 Oct 2013   #9
gregrocker

 

Quote   Quote: Originally Posted by WaterKiwi View Post
Surge Protector UPS failed.

Strangest part... Restore is and was enabled for Operating system and was setup to create restore points every time Software was installed or updated... but - all restore points are gone... none exist now. <sigh>
There is a strange anomaly showing up lately where System Restore says no points have been saved yet in System Protection it is enabled for C. However when you click on Configure no disk space is apportioned. This is why I suggested checking first thing for infection or damage to System files.

Go to System Protection, highlight C, see if any space is apportioned for Restore Points. I'd set mine to 10% if you can afford it.

System Protection - Change Disk Space Usage

Monitor System Protection to see if this changes and if so , uninstall Eset and install MSE to compare the difference.
My System SpecsSystem Spec
31 Oct 2013   #10
WaterKiwi

Windows 7 Home Premium
 
 

Dang... it was set to 0.. hence why no system restore points were ever made.

<sadness>
My System SpecsSystem Spec
Reply

 Mysterious random user account created after power failure.




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Mystery User Account Created on Boot?
Hello, I have a brand new dell laptop with Win 7 Home Premium. I recently bought a better harddrive for it and cloned the disk from the old one to the new, and the process worked fine without any issues. I booted into the new hdd, and everything appeared to be okay. But now theres this strange...
General Discussion
Failure in reading User Profile after system power on
I have a HP PC (Pavillion G series, CoreI5) with Windows7 @64bit. Since some time, after the PC power on, at the user log-in my personal settings are no more applied and Windows creates a temporary profile. If I restart the PC, the system will correctly start and will apply the personal settings....
General Discussion
When user account was created
I see from looking at the securities tab on some file's properties I have an Account Unknown that has full control. When that account came into existence might help me track it down. Is there a command I can use to get that sort of info on a user or group?
General Discussion
BSOD - random - always Driver Power State Failure
I've got randomly occouring BSODs on my Dell XPS 9000. The BSOD is always a driver power state failure. Log files attached. My system is ~3 years old. Running a 2 year old Win 7 Ultimate x64 image. Please help. Thanks!
BSOD Help and Support
Created user account, unable to login
Hi, I created a secondary user account on my PC. When I try to login, it will look like it's logging in, but it just logs back out, returning to the main screen to choose an account to login to. If I'm logged into my main account, and I switch users and try to login to the newly created...
General Discussion
Random Driver Power State Failure BSOD
Hey guys I am new here and need some help with my random BSOD. I think it only happens when I wake the system from sleep mode. It does it while in the middle of a game or if I an just cruising the net. I haven't notice it after a fresh boot, but like I said mainly after I wake it from sleep mode....
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 16:32.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App