Too many users to display

[greatbird451]

Hey, I logged on to my computer on Sunday, and all of a sudden I see about 100 user names from my original 1 user name... Well whats wrong with that, just log in as your account and delete it right? The really bad thing is, is that my user name is not there! Even with Vista's scroll bar, they put in a user limit on how many can be displayed. Well as you might have already guessed, not a single user has access to Administrator abilities. That means all my user access abilities have been blocked. The good news is that I looked through all my accounts have found that my user was still there (with all my documents as I have checked using Ubuntu Linux)! Oh yea, all the users are random numbers, which is why all these new accounts are at the top of the list...

Indeed I can always wipe the computer if worse does get the better of me, but why jump to conclusions when someone might have found the solution!

Things I have already tried: (I will use user 10246 as an example user to delete)

1. <ctrl>+<alt>+<del> twice [nothing happened]
2. control panel [blocked]
3. netplwiz [depending on which one, but either returned to previous settings or returned in a pop-up that is was blocked]
4. command prompt: net user 10245 /delete [blocked, system error 5], net user 10245 /active:no [same]
5. safe mode [still have to log in as one of them]
6. fixing user registry [must be hidden because the path was not there] (If anyone has more detail on how to do this, I'm all ears)
7. changing login UI [blocked]
8. repair when pressing f8 at windows start up (which for me is at the boot options) [did nothing]
9. net user administrator /active:yes [blocked, system error 5]
10. banged my head against the desk after realizing the effectiveness of this extremely simple virus (not really, but you get the point)

So, after doing all these things, consulting my friends on how they would fix it (later telling me that I got screwed) I thought it would be very beneficial if I would open up this thread to the public. As I sure hope that this gets done before Christmas without me either calling up Microsoft/Geek Squad (and paying through the nose) or wiping my computer. After 5 years of programming in C++ and Delphi, I absolutely am stumped on this.

Please, any positive posts of any kind will be greatly appreciated!!!

 

[Flavius]

Hey, I logged on to my computer on Sunday, and all of a sudden I see about 100 user names from my original 1 user name...

1. First of all eliminate these strange accounts,somethings wrongs happends with SAM hive...try to use System Restore - if you can't do that on allive system,boot DVD Vista
choose language>>repair computer>>system restore and back to any previous checkpoint
2.Scan your computer some viruses caused this - because scanning on allive system is not credible I suggest to use this liveCD with antivir Index of /devbuilds/RescueDisk/
Let know us about results - even if you'll restore system you can still have some trouble because

system error 5

This error concern permissions...and System Restore not back permissions :huh:

 

[greatbird451]

I tried that many times, but it goes through the same routine
I opened it up, went into the linux anti-virus program, it asked me to update it.
It updated (from what I know of), and I ask it to run, but it asks me to update again, I do that loop for about 20 times when I closed it up to try it again another day. I don't remember what it said, but it had two updates after my primary starting update. I'll go write down what it says.

 

[rive0108]

Are you even using UAC?

I also suggest you invest in a good antivirus/antispyware program (NOD32 3.0 & Windows Defender for example)
Run a free online scan/cleaner here: Free ESET Online Antivirus Scanner
Sounds like you may have inadvertently installed a backdoor trojan(s)/ rootkit, and your system is seriously compromised. Most systems infected with backdoors become remote spam machines (zombies) I hope you dont store unencrypted credit card numbers, do online banking, etc., on your system. There is no telling what else as been changed/altered, and I seriously suggest you reformat/reinstall Windows and change all passwords/router keys (use random alpha numeric passwords/ tkip algorithms keys for better security)

In case you werent aware, most malware writers have realized there is big money in stealing data off infected systems (i.e., credit cards/bank accounts/passwords, etc.), and/or using those systems to attack servers (denial of service attacks), or as zombies to spew spam/malware.


A backdoor is a program or a set of related programs that a hacker installs on the victim computer to allow access to the system at a later time. A backdoor’s goal is to remove the evidence of initial entry from the systems log. But a “nice” backdoor will allow a hacker to retain access to a machine it has penetrated even if the intrusion factor has in the meantime been detected by the system administrator. Resetting passwords, changing disk access permissions or fixing original security holes in the hope of remedying the problem may not help.
A trivial example of a backdoor is default BIOS, router or switch passwords set either by careless manufacturers or security administrators.
A hacker could simply add a new user account with administrator privileges and this would be a sort of backdoor, but far less sophisticated and easy detectable.