I did a hitmanpro scan and had a result for a sector 0 MBR infection and had it delete it. It then had me reboot the sys.
When I rebooted there was only 2 old users. I logged into each of them neither of which had any files and most (not all) programs are gone. By "gone" I literally mean they are gone. For instance Mozilla thunderbird was installed before the virus reboot. There is no data file, it is not listed in "add/remove programs" there isn't even a directory under the Program Files(x86) and that goes for a lot of other programs that were installed. It's crazy...I don't even get a result for hitman when searching the computer nor is it in \program files or add remove programs and it was the one that asked me to reboot so I now for sure it was there before the reboot. Not sure if hitmanpro has a portable app but I did the download from bleepingcomputer and installed so I know it's not just a "missing" file it was actually installed.
I checked c:\Users\ and went through all the users desktop folders and they are all empty. It is like it did a system restore and removed personal data files as well...like a rollback. However the reboot didn't take long at all. It was like a regular reboot not like a roll back or system restore which can take a while and for all the programs that have been removed.
There isn't another windows partition or a \windows.old that it's booting from either. It's so weird.
Also windows needed to be reauthenticated - not sure if its important but thought best not to leave that out. Any ideas on what happened?