Think I got a virus - fake user?

[selkov]

My browser seems to have been redirected to a malicious website. NOD32 gave me a warning = blocked website. But I think it was to late. A few minutes later I got a pop up saying that my drive was no longer accessible. The another saying it could not load the drivers for the new hardware. But all seemed to work OK. After a later reboot i notices that the start bar and program list was blank, the task bar is blank and so is the desktop. One of my partitions shows 16gb of 94 free but Explorer doe snot show ANY files on it. Sytem restore seems to now be turned off. Also in c:\Users Nothing is listed. I have tried to fixMBR and RebuildBCD. No help. NOD32 shows the PC as clean.

I created a new profile and all the start menu,program menu,task bar, desktop default icons returned. I can see the lost partition OK. But the screen looks like it is in safe mode. Reduced graphics depth, no aero etc.

Any suggestion on how to recover from this?

 

[NRT]

Run a scan with Malwarebytes Anti-Malware - Download.com Free

 

[Jacee]

See if you've picked up a Rootkit


Download TDSSKiller and save it to your Desktop.

• Extract the file and run it.
• Once completed it will create a log in the root directory (usually C:\).
• Please post the contents of that log in your next reply.

 

[selkov]

Downloaded Malwarebytes Anti-Malware and ran it as suggested. Nothing found. Not changes made. Will now try TDSSKiller

 

[selkov]

no changes.

 

[luke127]

Hmm could be a corrupted file try the command prompt code that checks files Darn I can't remember it though. Somebody else may know however. Guys please post that code lol. If I remember I will edit this post.

 

[selkov]

Did you mean sfc /scannow? If so I did that also to no avail.

However, after spending more time on this I found that all the missing desktop icons, d drive and profiles had their properties changed to "HIDDEN". I found this out when I went to folder properties and choose to show hidden and protected files.

The only two issues left are 1: manually choosing what to unhide and 2; finding how to turn the task bar.

 

[luke127]

The task bar may have been set to go down while your mouse isn't on it. Hover your mouse down where it used to be and IF it pops up then you need to change a setting. If not then something is wrong.

 

[karlsnooks]

selkov,
You are still infected.

Run WDO, Windows Defender Offline, use the link in my signature.
Have WDO run a full scan of all drives.

Remove any current AV, anti-anything, spy software.
Install MSE, Microsoft Security Essentials. Use the link in my signature.

Remove any torrent software.
do not "torrent".

 

[Tekno Venus]

Hi,

If running WDO doesn't fix it, try running malwarebytes anti malware again in safe mode. Sometimes it works better there. Not always but sometimes.

However, even if you think you have got rid of it, you probably havent. The only way to be completly sure the virus is gone is a clean reinstall of windows. http://www.sevenforums.com/tutorials/219487-clean-reinstall-factory-oem-windows-7-a.html

Stephen

 

[karlsnooks]

Tekno,
If WDO doesn't catch it, the MalwareBytes certainly won't.

MalwareBytes is not an offlline anti-malware program, thus can not catch several pieces of malware.

WDO is the most up-to-date anti-malware solution available.

As a first cut, malwarebytes is ok and if the problem persists then one can run WDO. But not the other way around.

 

[Tekno Venus]

Oh ok. You see, you learn something new everyday. . I trust you, you got those badges for a reason.

 

[karlsnooks]

We learn thru our mistakes and I have made many.