Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Login name removed after ransom virus removed

08 Jul 2013   #1

Windows 7 Home Premium
Login name removed after ransom virus removed

Please help! After a ransom virus was removed from our desktop computer (originally a display model at Sam's), my administrator account is no longer visible...Only "Kiosk" and "Other User" . I have checked to see that net user administrator /active yes is successful but still do not see my user account listed. Any help would be appreciated.

BTW, I cannot login to windows AT ALL!

My System SpecsSystem Spec
08 Jul 2013   #2

Multi-Boot W7_Pro_x64 W8.1_Pro_x64 W10_Pro_x64 +Linux_VMs +Chromium_VM

I wouldn't trust a used computer without reinstalling Windows.
No telling what is on it or what has been done to it.
If the PC has a valid COA with a readable license you can do a clean install at no cost.
This tutorial has everything needed for a clean install.
Clean Reinstall - Factory OEM Windows 7
My System SpecsSystem Spec
08 Jul 2013   #3

Windows 7 Home Premium

Thank you for the info...we have used the computer for a year now and many purchased / downloaded software programs are on it; therefore, I would prefer not to lose them if possible. Any ideas on making the "old" usernames visible?
My System SpecsSystem Spec

08 Jul 2013   #4

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit

Download the tool below and save it to a USB flash Drive

warning   Warning
You will need a USB FLASH DRIVE

Tip   Tip
Download the Tool from a non infected PC

Farbar Recovery Scan Tool

Choose one that goes with your OS bit version . Save the file to a USB Flash drive

32-bit Version OS Farbar Recovery Scan Tool

64-Bit Version OS Farbar Recovery Scan Tool x64

Note   Note
Click the button and right-click Computer .Select Properties . Look for System Type: which will say 32-bit Operating System or 64-bit Operating System

Plug the flash drive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Use the arrow keys to select Repair Your Computer menu item.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account an click Next.

To enter System Recovery Options by using Windows installation disc:
Insert the installation disc.
Restart your computer.
If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
Click Repair your computer.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account and click Next.

On the System Recovery Options menu you will get the following options:
  • Startup Repair
  • System Restore
  • Windows Complete PC Restore
  • Windows Memory Diagnostic Tool
  • Command Prompt

Select Command Prompt

In the command window type X:\FRST.exe (for x64 bit version type X:\FRST64.exe) and press Enter

Note   Note
Replace letter X with the drive letter of your flash drive.

Tip   Tip
Type the commands below to see what your letter is for the USB drive and press ENTER after each command

List volume
The tool will start to run.
When the tool opens click Yes to disclaimer.
Press Scan button.
FRST will let you know when the scan is complete and has written the FRST.txt to file
Please copy and paste both logs in your reply.(FRST.txt and Addition.txt)

Note   Note
FRST.txt and Addition.txt files will be inside the root of the USB Flash Drive
My System SpecsSystem Spec
08 Jul 2013   #5
Microsoft MVP


Software you purchase is meant to be reinstalled as often as you need. If you've lost the Product Key they can all be audited off the HD.

This is all explained in Clean Reinstall - Factory OEM Windows 7

Having factory preinstalled WIn7 is the worst possible install one can have. But a Sam's display model is probably the worst install we've ever heard of here.

We will help you get a perfect reinstall just as we have for countless others if you want to work with us. Go over the tutorial to ask back any questions, and report back any software you have concerns about.
My System SpecsSystem Spec

 Login name removed after ransom virus removed

Thread Tools

Similar help and support threads
Thread Forum
Removed from Domain, now can't login
I made the mistake of switching my work PC from being on the Domain to not and now I can't login because I don't have a non-Domain account on the machine. I tried using chntpw to set the Administrator password to blank but it didn't work/help and now the only account I see as an option to...
Network & Sharing
Virus Removed but Still Issues
A virus was downloaded in to my computer which gave me real pain by launching its web page every time I launched IE or Chrome or Fire Fox and kept setting it as default url. I have somehow removed the virus and this issue is no longer there but I am still not able to manage my computer, use Admin...
System Security
After MSE removed virus have unusual log messages
A few days ago I had trouble with backup, and it was due to an infected file which quick scans and real time protection had not picked up. I ran a full scan with MSE and removed it (Exploit:Java/CVE-2012-1723.AQQ). I've noticed some unusual entries in the log and wonder if the virus has not...
System Security
Windows 7 won't boot up after Norton removed virus
Hi, Hope someone will be able to help me here. I have a laptop here which i ran Norton Power Eraser on, it found 3 things which i let it "Fix". After that it did a restart and wouldn't boot. I cannot get the machine to boot, i have tried bootrec.exe, CHKDSK, All the usual windows 7 boot repair...
General Discussion
Conficker virus already, removed but what would you do next?
Currently a bit gutted, bought a new machine (first time I've ever bought a custom build prebuilt with Win 7 pro preinstalled), added another drive myself, installed Win XP SP3, to run my old software and have the dual boot option. Connected my old harddisk (big mistake I think) to copy important...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 19:02.
Twitter Facebook