user files hidden after virus
Posted on 2011-10-24
I had two different users get the same virus. The virus marked all files on the C: drive as hidden. I removed the virus through malwarebytes anti-malware, but after the virus was removed, the C: drive was still hidden. I un-hid the files, but when the user who launched the virus logs in, their desktop is missing, and they cannot launch the task manager. When right-clicking on the task bar, the option is greyed out, and similarly when they press ctrl-alt-del the option is greyed out there. I logged on as myself or the domain admin, and the option is there. Seems like it only happened for the user who initially launched the virus.