After a server reboot, we can no longer see any users listed in the Users foler of Computer Management.
This is not a domain controller.
If I go to the Groups folder, then open up the 'Users' group in the groups node, it has all the users I would expect in there.... same goes for various other groups.
As a result we can't do anything with users, i.e. rename them. Plus its not a good state to be in.
If we add a user it appears in the 'Users' group but again does not appear in the Users folder.
The events leading up to this are as follows:
1. Noticed a nasty worm infection - two exe's were in the firewall exception list etc.
2. Attempted to clean worms with various virus tools
3. Long before this (months ago) we did things such as disabled the Administrator login and created a new one with a different name.
4. Immediately before the reboot we altered two suspicious looking accounts
We renamed an account called System32$ (could not delete it).
We deleted an account called adminhibing
I can't find anything on the net about those two accounts. Has anyone had this problem or at least heard of a System32$ account?
Start Free Trial
