Mysterious random user account created after power failure.

Page 1 of 3 123 LastLast

  1. Posts : 12
    Windows 7 Home Premium
       #1

    Mysterious random user account created after power failure.


    After a power outage (Computer lost all power as well as the circuit for the room) I restarted my Windows 7 desktop to find a new user account there that I did not create. It has a random name "ohlascdrxvzd".

    It does not list in the C:/Users folder, but is listed in the Control Panel: User Accounts - Manage Accounts, and on startup it is listed in the Account selection buttons.

    I will delete the account from the control panel and restart the computer... I am not expecting it to go away as I have this exact problem (with a different random named user account) on another PC that lost power instead of shutting down correctly as well.

    More after restart...


    After the restart the Account no longer lists in the buttons to select User account on startup, but it is still listing in the Control Panel: User Accounts - Manage Accounts.


    Arrrrrgh! ^ _ ^

    Now I am ready to receive help.


    Update info:

    It is a "Standard user" permissioned account

    I have not logged into the account.

    The Guest account is turned off.
    Last edited by WaterKiwi; 31 Oct 2013 at 14:20.
      My Computer

  2.    #2

    Could be created by a bloatware security suite or Updates to access the PC for auto updating.

    I would uninstall any bloatware AV to install and run a full scan with free recommended Microsoft Security Essentials.

    In addition I'd install free scanner, decline trial, update and run a full scan with Malwarebytes and SUPERAntiSpyware.com - Downloads

    Then check System Files with SFC /SCANNOW Command
      My Computer


  3. Posts : 12
    Windows 7 Home Premium
    Thread Starter
       #3

    I have a clean install running Eset Antivirus - No infections found.

    I have Malwarebytes already installed up to date and scanned (see the No malicious files report below).

    I have run Vipre Rescue - VIPRE Rescue - VIPRE Computer Recovery Solution with no Infected files found.

    I'm not running an Nvidia updaters as I have an AMD Radeon HD 7900 Video Card... nor is there an UpdatusUse user account on this system.

    The account literally was created automatically at the restart after the power failure.

    Is it possible that Windows would create a user account incase the primary account was corrupt when recovering from a hard shut down power loss?

    Also note: Before the Power failure I was logged into an Administrator account - that account is not corrupt and works just fine still.




    Here are the results from Malwarebytes.

    Malwarebytes Anti-Malware 1.75.0.1300
    Malwarebytes : Free anti-malware download

    Database version: v2013.10.31.07

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 10.0.9200.16721
    Soothe :: SOOTHE-PC [administrator]

    10/31/2013 1:35:42 PM
    mbam-log-2013-10-31 (13-35-42).txt

    Scan type: Quick scan
    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
    Scan options disabled: P2P
    Objects scanned: 234034
    Time elapsed: 3 minute(s), 19 second(s)

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 0
    (No malicious items detected)

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 0
    (No malicious items detected)

    (end)






    I'm currently running SFC - I'll report after it's finished.


    SFC reports:

    "Windows Resource Protection did not find any integrity violations."



    Downloading and running http://www.superantispyware.com/ now.

    Report to follow...

    SuperAntiSpyWare only found tracking cookies... deleted.


    Finishing Scans then Deleting the user account "ohlascdrxvzd" again and shutting down and restarting Windows 7.

    Report when restart finishes.
    Last edited by WaterKiwi; 31 Oct 2013 at 16:47.
      My Computer


  4. Posts : 25,847
    Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
       #4

    When you power went off did you have something plugged into the computer using USB port.
    Sometimes goofy things happen when card readers, external hard drives ect. are attached.
      My Computer


  5. Posts : 12
    Windows 7 Home Premium
    Thread Starter
       #5

    Restarted... again..

    The user account "ohlascdrxvzd" is back again.

    I did have several USB devices plugged in:

    Drobo

    UPS

    Keyboard and mouse
      My Computer


  6. Posts : 25,847
    Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
       #6

    If you are sure your computer is clean I would recommend using a Restore Point before the power went off.
    Any time your computer is on and sometimes off a power surge can cause all kinds of problems.

    If you don't already I recommend using a quality Surge Protector.
      My Computer


  7. Posts : 12
    Windows 7 Home Premium
    Thread Starter
       #7

    Surge Protector UPS failed.

    Strangest part... Restore is and was enabled for Operating system and was setup to create restore points every time Software was installed or updated... but - all restore points are gone... none exist now. <sigh>
      My Computer


  8. Posts : 12
    Windows 7 Home Premium
    Thread Starter
       #8

    Is there a way to find out what software created the user account?
      My Computer

  9.    #9

    WaterKiwi said:
    Surge Protector UPS failed.

    Strangest part... Restore is and was enabled for Operating system and was setup to create restore points every time Software was installed or updated... but - all restore points are gone... none exist now. <sigh>
    There is a strange anomaly showing up lately where System Restore says no points have been saved yet in System Protection it is enabled for C. However when you click on Configure no disk space is apportioned. This is why I suggested checking first thing for infection or damage to System files.

    Go to System Protection, highlight C, see if any space is apportioned for Restore Points. I'd set mine to 10% if you can afford it.

    System Protection - Change Disk Space Usage

    Monitor System Protection to see if this changes and if so , uninstall Eset and install MSE to compare the difference.
      My Computer


  10. Posts : 12
    Windows 7 Home Premium
    Thread Starter
       #10

    Dang... it was set to 0.. hence why no system restore points were ever made.

    <sadness>
      My Computer


 
Page 1 of 3 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:18.
Find Us