User account changed

Gigabyte / Nvdaacpi
April 20, 2010 at 09:40:37
Specs: Microsoft XP Home, 3.0 / 1gig
This is a single user standalone PC, password
protected & AFAIK only one person actually
uses it. A few weeks ago the user logged on
as normal but was faced with a basic screen
with none of his icons, & none of his
documents, email etc. available. I cured it at
the time by doing a Systen Restore I also had
a look and discovered that in Documents and
Settings, as well as the original user account
there were two others - similar to those
created when a repair reinstallation is
performed, but the user had been using the
system earlier in the day & nothing untoward
had happened. Still only the one user on the
logon screen and in 'User Accounts' so I
deleted the extra Docs & settings folders & all
was well.

Anyway, today the same thing happened but a
System Restore hasn't cure it so I'm popping
over tomorrow to see what the situation is, but
has anyone got any idea what could have
created the extra user files? & why would it
seem to be logging on to one of the secondary
lot of files rather than the main user? The PC
is used just for business, nothing other than
Word processing and web browsing. It has
Kaspersky and accesses broadband through a
BT router.

"I've always been mad, I know I've been mad, like the most of us..."


See More: User account changed

Report •


#1
April 20, 2010 at 13:03:44
If the singer user was an admin, then almost any hacker could have done what they wanted. Only let users and admins use limited user accounts. Always use run as to perform admin tasks.

Time for a reload maybe or better best practices?

Playing to the angels
Les Paul (1915-2009)


Report •

#2
April 21, 2010 at 01:24:12
Thanks for reply. Nothing wrong with the security - the user is
a solicitor and quite paranoid about keeping the system
secure but there would be no use in giving him a limited
account.

Problem solved after I checked Event Viewer, it seems the
user domain profile was corrupted and a temporary one
created - I logged on in Safe Mode as administrator, backed
up his original profile folders (just in case ;-) ), deleted the new
profile and logged on again in safe mode as the old user
(wasn't too sure if that bit would work but it didn't seem to be
a problem). Checked the ShellFolders key in the registry to
make sure they were all pointing to the same place & away
we went. The user sort of admitted that he had occasionally
shutdown the system by pressing & holding the power button
- ('same as the laptop'!) which I suspect was the original
reason for the problem. Also finally installed the User Profile
Hive Cleanup Utility from Microsoft to hopefully speed up the
shutdown for him, but I'll have to pop back & check on that at
a later date.

"I've always been mad, I know I've been mad, like the most of us..."


Report •

#3
April 24, 2010 at 17:14:33
HOLY CRAP THIS SAME THING JUST HAPPENED TO ME LAST NIGHT. WHAT THE LIVING HECK!!!! I WAS JUST ON MY COMPUTER AND AM THE ONLY ONE WHO USES IT AND WHEN I PREPARED TO HAVE COMPANY AND WENT TO LOAD MY IPOD FOR SOME RELAXING MUSIC I GOT THIS FREAKING ERROR NOT RECOGNIZING ME AS THE ADMINISTRATOR AND WHEN I DID LOG ON, ALL MY s--- WAS GONE!!!! !!!!! HELP...... I HAVE PICS, MOVIES, MUSIC GALORE ON MY SYSTEM ALONG WITH WORK FILES THAT HAVE ALL BEEN REMOVED. THE SCREEN WAS SO BASIC THAT I HAD TO DOWNLOAD INTERNET EXPLORER AGAIN... ???

Report •

Related Solutions

#4
April 24, 2010 at 23:48:51
For a start, turn off CAPS LOCK, it's the equivalent of shouting
& you won't get a response from many users.

First thing to try is a System Restore back to the previous day -
works in a large number of cases.

"I've always been mad, I know I've been mad, like the most of us..."


Report •


Ask Question