Ok,
So I was out of my house for 2 days, I come back go to log into my account, and it tells me the passwords incorrect.
I had originally thought nothing of it, thinking one of the other 2 users on the welcome screen had changed it (I quickly realized I had made both limited users) From there I went and logged on to the 'Administrator' account and tried to just take the password on my account off, it barked at me told me I couldn't touch the account.
So I started to get pretty pissed off because of that windows privacy feature, I couldn't access ANY of my files (music, pictures, documents....)
From that point my only idea was it was probably a virus, although I've never heard of one that does this, it was my only logical solution.
I figured if I could get my hash files I could just bruteforce it to get the current password but when I attempted to get my hash files from SAM using pwdump2, and I got the hashes but was shocked, and then really pissed off at what I found, all the of the users and thier hashes were there except mine, in place of it I found:
"SamrQueryInformationUser failed : 0xC0000034"
And that's where I'm at now, I've been googling like a madman trying to find a virus that could have this affect, had no luck so far....
I really don't know where to go with this... please help me..... please
System specs:
Windows XP Pro
Service Pack 2
Im also using the latest Mcaffe and updating my definitions every 3 days... thats why I'm so puzzled as to how I got infected (assuming this was a virus)
honestly ANY input is appreciated I don't have the foggiest idea what to do..
-travis
Start Free Trial