Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Think I got a virus - fake user?

03 May 2012   #1

Windows Seven Ultimate X-64
Think I got a virus - fake user?

My browser seems to have been redirected to a malicious website. NOD32 gave me a warning = blocked website. But I think it was to late. A few minutes later I got a pop up saying that my drive was no longer accessible. The another saying it could not load the drivers for the new hardware. But all seemed to work OK. After a later reboot i notices that the start bar and program list was blank, the task bar is blank and so is the desktop. One of my partitions shows 16gb of 94 free but Explorer doe snot show ANY files on it. Sytem restore seems to now be turned off. Also in c:\Users Nothing is listed. I have tried to fixMBR and RebuildBCD. No help. NOD32 shows the PC as clean.

I created a new profile and all the start menu,program menu,task bar, desktop default icons returned. I can see the lost partition OK. But the screen looks like it is in safe mode. Reduced graphics depth, no aero etc.

Any suggestion on how to recover from this?

My System SpecsSystem Spec
03 May 2012   #2

Windows 7 Ultimate 64-bit SP1

My System SpecsSystem Spec
03 May 2012   #3
Microsoft MVP

Windows 7 Ultimate 32bit SP1

See if you've picked up a Rootkit

Download TDSSKiller and save it to your Desktop.
  • Extract the file and run it.
  • Once completed it will create a log in the root directory (usually C:\).
  • Please post the contents of that log in your next reply.
My System SpecsSystem Spec

03 May 2012   #4

Windows Seven Ultimate X-64

Downloaded Malwarebytes Anti-Malware and ran it as suggested. Nothing found. Not changes made. Will now try TDSSKiller
My System SpecsSystem Spec
03 May 2012   #5

Windows Seven Ultimate X-64

no changes.
My System SpecsSystem Spec
04 May 2012   #6

Windows 7 Home Premium 64 bit at home and Windows 7 professional at school.

Hmm could be a corrupted file try the command prompt code that checks files Darn I can't remember it though. Somebody else may know however. Guys please post that code lol. If I remember I will edit this post.
My System SpecsSystem Spec
04 May 2012   #7

Windows Seven Ultimate X-64

Did you mean sfc /scannow? If so I did that also to no avail.

However, after spending more time on this I found that all the missing desktop icons, d drive and profiles had their properties changed to "HIDDEN". I found this out when I went to folder properties and choose to show hidden and protected files.

The only two issues left are 1: manually choosing what to unhide and 2; finding how to turn the task bar.
My System SpecsSystem Spec
04 May 2012   #8

Windows 7 Home Premium 64 bit at home and Windows 7 professional at school.

The task bar may have been set to go down while your mouse isn't on it. Hover your mouse down where it used to be and IF it pops up then you need to change a setting. If not then something is wrong.
My System SpecsSystem Spec
04 May 2012   #9

MS Windows 7 Ultimate SP1 64-bit

You are still infected.

Run WDO, Windows Defender Offline, use the link in my signature.
Have WDO run a full scan of all drives.

Remove any current AV, anti-anything, spy software.
Install MSE, Microsoft Security Essentials. Use the link in my signature.

Remove any torrent software.
do not "torrent".
My System SpecsSystem Spec
07 May 2012   #10
Tekno Venus

Windows 7 Home Premium 64bit (O.E.M)


If running WDO doesn't fix it, try running malwarebytes anti malware again in safe mode. Sometimes it works better there. Not always but sometimes.

However, even if you think you have got rid of it, you probably havent. The only way to be completly sure the virus is gone is a clean reinstall of windows. Clean Reinstall - Factory OEM Windows 7

My System SpecsSystem Spec

 Think I got a virus - fake user?

Thread Tools

Similar help and support threads
Thread Forum
Fake Bsod 0x00009af8 virus
I am running Win 7 64bit Home Premium on HP Pavillion p6837c with SvcPac 1 installed and have auto updates enabled. About 4 days ago started getting random BSOD '0X00009AF8 Driver_IRQL Pending Operation'. Goes away on reboot and occurs randomly during the day. Can not find this error number via...
System Security
Infection by fake AV virus
Visiting a friend who is massively infected by fake AV scan. All of his files are hidden and nothing will run. I just ran bootable Windows Defender Offline which appears to have found nothing. System Restore is infected back a few days although there are more points to go back further. Any...
System Security
Fake Windows 7 anti-virus
First off, i'm sorry if this is not in the right place. Ok, 2nd off I am very good about not getting viruses, I haven't had one in years & yes I am running a legit virus scanning program. I woke up this morning and logged onto my PC & all of a sudden it started going absolutely crazy, now I...
System Security
Fake Anti-virus cant remove
My brother accidently installed a fake antivirus. It wont let him get on the internet, run basically any program (even taskmgr) or do much anything unless he "activates the antivirus" by buying it. Iv tried running Remove Fake Antivirus 1.72, full system scans with Spy Sweeper and MSE. Nothing...
System Security
Fake virus warning (javascript)
Accidentally I clicked this thing, screenshot attached below. Dont try to go to the website anyway, I am not sure if it really contain any malware. But, this is a peculiar example of Virus warning site, possible of newer type. For the newbies, dont click anything if these appears...
General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:50.
Twitter Facebook Google+