PDA

View Full Version : Hidden user account?



ChugNut
2011-01-12, 06:23
I didn't create it, and AVG shows the system as clean, could this be a just a normal program creating this, or is it likely some backdoor thing?

It shows in the directory under User, but not in the control panel.

http://img26.imageshack.us/img26/8579/usersfolder.jpg

http://img251.imageshack.us/img251/5347/userscontrolpanel.jpg

vict0r
2011-01-16, 19:11
Hello.

My nickname is vict0r and I will help you with the malware issues on your computer.

Please read the following information carefully.

IMPORTANT: Whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.

To make cleaning this machine easier:

Please continue to respond to this thread until I I tell you that the logs are clean!
Please DO NOT uninstall/install any programs unless asked to. It is more difficult when files/programs appear or disappear from the logs.
Please do not run any scans other than those requested and do not post any logs/reports unless specifically requested to do so.
Please follow all instructions in the order posted.
If you have any questions or do not understand instructions, please ask before continuing.
Please reply to this thread. Do not start a new topic.
Your security program(s) may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.


If you are using McAfee VirusScan perform the following steps:

Disable McAfee VirusScan ScriptStopper feature by:

1. Right-mouse click the McAfee VirusScan icon in the system tray.

The McAfee system tray icon looks like http://cssadmin.maximizer.com/Download/RightNow/050527-000000/mcafee.jpg.

2. Select VirusScan then click Options.
3. Click the Advanced button and then click the ScriptStopper tab.

Note: McAfee VirusScan 10 users, click the Exploits tab.

4. Make sure Enable ScriptStopper (recommended) option is de-selected.

5. Click OK and then click OK to complete disabling McAfee ScriptStopper feature.



Download and run DDS

Please download DDS by sUBs from one of the links below and save it to your desktop:

http://img.photobucket.com/albums/v666/sUBs/dds_scr.gif

Link1 (http://download.bleepingcomputer.com/sUBs/dds.scr)
Link2 (http://download.bleepingcomputer.com/sUBs/dds.com)
Link3 (http://www.forospyware.com/sUBs/dds) (right click -> Save link as...)


Right-Click on dds.scr(/com/pif) And select " Run as administrator "... and a command window will appear. This is normal.
Shortly after two logs will appear:

DDS.txt
Attach.txt
A window will open instructing you save & post the logs
Save the logs to a convenient place such as your desktop
Copy the contents of these logs into your next replies. Please use one reply per log and do not attach any logs.


When finished, please reenable McAfee VirusScan ScriptStopper (if installed).