Unable to delete user profile folder using default Admin. account

[Robert]

I'm restoring and upgrading a friend's computer (XP Home SP3). Her teens and
their friends screwed it up by creating several bogus profiles, downloading
Trojan Horse laden ringtones, anti-virus programs and other unwanted
software, and leaving personal files and folders all over the place. I
removed several virus infections and other malware. And, I installed leading
anti-virus and anti-malware software. Then, I verified that all malicious
files and programs had indeed been completely removed by running numerous
scans untilI was confident that the system was clean.

However, one of the user accounts was locked-out due to a forgotten
password. And, the kids' IM profiles had been hacked by a former friend,
possibly compromising the mother's entire computer. Now, she's afraid he'll
try to hack it again. So, I created all new passwords and am taking further
steps to secure the system.

I created two new user accounts and their associated profiles with profile
folders. Then, I copied over select files and folders from the (2) original
profile folders using procedures outlined elsewhere on this Help site. And, I
verified that the new user accounts/profiles are functioning correctly by
logging into each one from the Windows Logon screen. They work fine.

My next step was to delete the original accounts, their profiles and their
related folders. I deleted the first account by simply clicking "Delete" in
Control Panel | User Accounts. All traces of the account's profile appear to
have been completely removed.

However, the second account's original profile folder is giving me fits! It
appeared to have been deleted like the first account when I tried using the
delete function in Control Panel | User Accounts. The account name was gone
in User Settings, in Windows Explorer and in the Registry subkey ProfileList
*. But upon reboot, this profile's folder reappears in Explorer.

Subsequent attempts to delete it from Explorer using an Admin. account have
had one of two results. Either the folder appears to be deleted and then
reappears again when I reboot. Or, Delete fails and I get an error message
stating that this is a System folder and can't be deleted. This is a curious
error message! I don't understand how it could be a System folder. The
default Windows Admin. account (listed in the Registry under ProfileList
subkey #S-1-5-21-.....-500) is still intact, assuming someone accidentally
renamed it.

I also tried logging in with the default Windows Admin. account (in Safe
Mode). The results were the same. I even tried deleting all the folder's
files and subfolders. But, the root folder keeps returning after I reboot.
There doesn't seem to be a username linked to it in Control Panel | User
Accounts either; nor in System | Advanced | User Settings, or in the Registry
under the ProfileList subkey.


Questions:
1. Since XP Home edition doesn't use the more effective MMC Snap-In, Local
Users and Groups which is available in XP Pro, do you have any suggestions
for tracing this folder's properties or links to figure out why it keeps
repairing itself?

2. A Microsoft technical expert explained to me the relationship between
Account names and Profile names. I thought I had it down pat. However, I was
unaware of the User Profile names list on the Control Panel | System |
Advanced tab until recently. Now I'm totally confused again! The user's
Account name, profile folder name and ProfileList registry entry all match.
However, the User's Profile name on the System | Advanced tab apparently
doesn't have to match the other three (e.g., some of my accounts' User
Profile names match the other (3) identifiers, and some don't. Yet, they all
work. And no, the folder I'm trying to delete isn't listed on this tab.) So,
how do User Profile names relate to these other three (Account names in
Control Panel | User Accounts, profile folders in Explorer, and the
ProfileList in the Registry)?

Thanks in advance for your assistance,
-Robert



* The path to this subkey is
HKLM/Software/Microsoft/WindowsNT/CurrentVersion/ProfileList.

[ushere]

Robert wrote:
> I'm restoring and upgrading a friend's computer (XP Home SP3). Her
> teens and their friends screwed it up by creating several bogus
> profiles, downloading Trojan Horse laden ringtones, anti-virus
> programs and other unwanted software, and leaving personal files and
> folders all over the place. I removed several virus infections and
> other malware. And, I installed leading anti-virus and anti-malware
> software. Then, I verified that all malicious files and programs had
> indeed been completely removed by running numerous scans untilI was
> confident that the system was clean.
>
> However, one of the user accounts was locked-out due to a forgotten
> password. And, the kids' IM profiles had been hacked by a former
> friend, possibly compromising the mother's entire computer. Now,
> she's afraid he'll try to hack it again. So, I created all new
> passwords and am taking further steps to secure the system.
>
> I created two new user accounts and their associated profiles with
> profile folders. Then, I copied over select files and folders from
> the (2) original profile folders using procedures outlined elsewhere
> on this Help site. And, I verified that the new user
> accounts/profiles are functioning correctly by logging into each one
> from the Windows Logon screen. They work fine.
>
> My next step was to delete the original accounts, their profiles and
> their related folders. I deleted the first account by simply clicking
> "Delete" in Control Panel | User Accounts. All traces of the
> account's profile appear to have been completely removed.
>
> However, the second account's original profile folder is giving me
> fits! It appeared to have been deleted like the first account when I
> tried using the delete function in Control Panel | User Accounts. The
> account name was gone in User Settings, in Windows Explorer and in
> the Registry subkey ProfileList *. But upon reboot, this profile's
> folder reappears in Explorer.
>
> Subsequent attempts to delete it from Explorer using an Admin.
> account have had one of two results. Either the folder appears to be
> deleted and then reappears again when I reboot. Or, Delete fails and
> I get an error message stating that this is a System folder and can't
> be deleted. This is a curious error message! I don't understand how
> it could be a System folder. The default Windows Admin. account
> (listed in the Registry under ProfileList subkey #S-1-5-21-.....-500)
> is still intact, assuming someone accidentally renamed it.
>
> I also tried logging in with the default Windows Admin. account (in
> Safe Mode). The results were the same. I even tried deleting all the
> folder's files and subfolders. But, the root folder keeps returning
> after I reboot. There doesn't seem to be a username linked to it in
> Control Panel | User Accounts either; nor in System | Advanced | User
> Settings, or in the Registry under the ProfileList subkey.
>
>
> Questions: 1. Since XP Home edition doesn't use the more effective
> MMC Snap-In, Local Users and Groups which is available in XP Pro, do
> you have any suggestions for tracing this folder's properties or
> links to figure out why it keeps repairing itself?
>
> 2. A Microsoft technical expert explained to me the relationship
> between Account names and Profile names. I thought I had it down pat.
> However, I was unaware of the User Profile names list on the Control
> Panel | System | Advanced tab until recently. Now I'm totally
> confused again! The user's Account name, profile folder name and
> ProfileList registry entry all match. However, the User's Profile
> name on the System | Advanced tab apparently doesn't have to match
> the other three (e.g., some of my accounts' User Profile names match
> the other (3) identifiers, and some don't. Yet, they all work. And
> no, the folder I'm trying to delete isn't listed on this tab.) So,
> how do User Profile names relate to these other three (Account names
> in Control Panel | User Accounts, profile folders in Explorer, and
> the ProfileList in the Registry)?
>
> Thanks in advance for your assistance, -Robert
>
>
>
> * The path to this subkey is
> HKLM/Software/Microsoft/WindowsNT/CurrentVersion/ProfileList.
>

why not simply do a clean install of winxp / programs, etc., (after
backing up mum's data?)

then create a log in for her. then tell her to remove the fuse from the
mains when either her kids or their friends visit. it's obvious that
they know far more than you, and probably many 'pro' people about
hacking etc.,.

[Robert]

Was this supposed to be insulting or helpful?!? If I could have done a
reinstall, I would have. Mom doesn't have any of the setup disks! Is anybody
else out there who's an actual Microsoft Tech Support person that's willing
to offer a more reasonable "professional" response than disconnect the fuse
(power) to the house? And when did Microsoft Communities start letting
knuckleheads like Ushere respond?

-Unbelievable







"ushere" wrote:

> Robert wrote:
> > I'm restoring and upgrading a friend's computer (XP Home SP3). Her
> > teens and their friends screwed it up by creating several bogus
> > profiles, downloading Trojan Horse laden ringtones, anti-virus
> > programs and other unwanted software, and leaving personal files and
> > folders all over the place. I removed several virus infections and
> > other malware. And, I installed leading anti-virus and anti-malware
> > software. Then, I verified that all malicious files and programs had
> > indeed been completely removed by running numerous scans untilI was
> > confident that the system was clean.
> >
> > However, one of the user accounts was locked-out due to a forgotten
> > password. And, the kids' IM profiles had been hacked by a former
> > friend, possibly compromising the mother's entire computer. Now,
> > she's afraid he'll try to hack it again. So, I created all new
> > passwords and am taking further steps to secure the system.
> >
> > I created two new user accounts and their associated profiles with
> > profile folders. Then, I copied over select files and folders from
> > the (2) original profile folders using procedures outlined elsewhere
> > on this Help site. And, I verified that the new user
> > accounts/profiles are functioning correctly by logging into each one
> > from the Windows Logon screen. They work fine.
> >
> > My next step was to delete the original accounts, their profiles and
> > their related folders. I deleted the first account by simply clicking
> > "Delete" in Control Panel | User Accounts. All traces of the
> > account's profile appear to have been completely removed.
> >
> > However, the second account's original profile folder is giving me
> > fits! It appeared to have been deleted like the first account when I
> > tried using the delete function in Control Panel | User Accounts. The
> > account name was gone in User Settings, in Windows Explorer and in
> > the Registry subkey ProfileList *. But upon reboot, this profile's
> > folder reappears in Explorer.
> >
> > Subsequent attempts to delete it from Explorer using an Admin.
> > account have had one of two results. Either the folder appears to be
> > deleted and then reappears again when I reboot. Or, Delete fails and
> > I get an error message stating that this is a System folder and can't
> > be deleted. This is a curious error message! I don't understand how
> > it could be a System folder. The default Windows Admin. account
> > (listed in the Registry under ProfileList subkey #S-1-5-21-.....-500)
> > is still intact, assuming someone accidentally renamed it.
> >
> > I also tried logging in with the default Windows Admin. account (in
> > Safe Mode). The results were the same. I even tried deleting all the
> > folder's files and subfolders. But, the root folder keeps returning
> > after I reboot. There doesn't seem to be a username linked to it in
> > Control Panel | User Accounts either; nor in System | Advanced | User
> > Settings, or in the Registry under the ProfileList subkey.
> >
> >
> > Questions: 1. Since XP Home edition doesn't use the more effective
> > MMC Snap-In, Local Users and Groups which is available in XP Pro, do
> > you have any suggestions for tracing this folder's properties or
> > links to figure out why it keeps repairing itself?
> >
> > 2. A Microsoft technical expert explained to me the relationship
> > between Account names and Profile names. I thought I had it down pat.
> > However, I was unaware of the User Profile names list on the Control
> > Panel | System | Advanced tab until recently. Now I'm totally
> > confused again! The user's Account name, profile folder name and
> > ProfileList registry entry all match. However, the User's Profile
> > name on the System | Advanced tab apparently doesn't have to match
> > the other three (e.g., some of my accounts' User Profile names match
> > the other (3) identifiers, and some don't. Yet, they all work. And
> > no, the folder I'm trying to delete isn't listed on this tab.) So,
> > how do User Profile names relate to these other three (Account names
> > in Control Panel | User Accounts, profile folders in Explorer, and
> > the ProfileList in the Registry)?
> >
> > Thanks in advance for your assistance, -Robert
> >
> >
> >
> > * The path to this subkey is
> > HKLM/Software/Microsoft/WindowsNT/CurrentVersion/ProfileList.
> >
>
> why not simply do a clean install of winxp / programs, etc., (after
> backing up mum's data?)
>
> then create a log in for her. then tell her to remove the fuse from the
> mains when either her kids or their friends visit. it's obvious that
> they know far more than you, and probably many 'pro' people about
> hacking etc.,.
>

[Leonard Grey]

FYI: This is not Microsoft technical support, so you won't find a
'Microsoft Tech Support person' here. This is a peer-to-peer newsgroup.

When a computer is as badly messed up as the one you are working on, the
best (and fastest) course of action is a clean install. All Windows
computers sold at retail have a method for doing a clean install. This
is typically done with 'recovery disks' or with a 'recovery partition'.
In addition, some OEMs still provide full installation media for all
software on the computer. In any case, the computer manufacturer can
help you to do a clean install.
---
Leonard Grey
Errare humanum est

Robert wrote:
> Was this supposed to be insulting or helpful?!? If I could have done a
> reinstall, I would have. Mom doesn't have any of the setup disks! Is anybody
> else out there who's an actual Microsoft Tech Support person that's willing
> to offer a more reasonable "professional" response than disconnect the fuse
> (power) to the house? And when did Microsoft Communities start letting
> knuckleheads like Ushere respond?
>
> -Unbelievable
>
>
>
>
>
>
>
> "ushere" wrote:
>
>> Robert wrote:
>>> I'm restoring and upgrading a friend's computer (XP Home SP3). Her
>>> teens and their friends screwed it up by creating several bogus
>>> profiles, downloading Trojan Horse laden ringtones, anti-virus
>>> programs and other unwanted software, and leaving personal files and
>>> folders all over the place. I removed several virus infections and
>>> other malware. And, I installed leading anti-virus and anti-malware
>>> software. Then, I verified that all malicious files and programs had
>>> indeed been completely removed by running numerous scans untilI was
>>> confident that the system was clean.
>>>
>>> However, one of the user accounts was locked-out due to a forgotten
>>> password. And, the kids' IM profiles had been hacked by a former
>>> friend, possibly compromising the mother's entire computer. Now,
>>> she's afraid he'll try to hack it again. So, I created all new
>>> passwords and am taking further steps to secure the system.
>>>
>>> I created two new user accounts and their associated profiles with
>>> profile folders. Then, I copied over select files and folders from
>>> the (2) original profile folders using procedures outlined elsewhere
>>> on this Help site. And, I verified that the new user
>>> accounts/profiles are functioning correctly by logging into each one
>>> from the Windows Logon screen. They work fine.
>>>
>>> My next step was to delete the original accounts, their profiles and
>>> their related folders. I deleted the first account by simply clicking
>>> "Delete" in Control Panel | User Accounts. All traces of the
>>> account's profile appear to have been completely removed.
>>>
>>> However, the second account's original profile folder is giving me
>>> fits! It appeared to have been deleted like the first account when I
>>> tried using the delete function in Control Panel | User Accounts. The
>>> account name was gone in User Settings, in Windows Explorer and in
>>> the Registry subkey ProfileList *. But upon reboot, this profile's
>>> folder reappears in Explorer.
>>>
>>> Subsequent attempts to delete it from Explorer using an Admin.
>>> account have had one of two results. Either the folder appears to be
>>> deleted and then reappears again when I reboot. Or, Delete fails and
>>> I get an error message stating that this is a System folder and can't
>>> be deleted. This is a curious error message! I don't understand how
>>> it could be a System folder. The default Windows Admin. account
>>> (listed in the Registry under ProfileList subkey #S-1-5-21-.....-500)
>>> is still intact, assuming someone accidentally renamed it.
>>>
>>> I also tried logging in with the default Windows Admin. account (in
>>> Safe Mode). The results were the same. I even tried deleting all the
>>> folder's files and subfolders. But, the root folder keeps returning
>>> after I reboot. There doesn't seem to be a username linked to it in
>>> Control Panel | User Accounts either; nor in System | Advanced | User
>>> Settings, or in the Registry under the ProfileList subkey.
>>>
>>>
>>> Questions: 1. Since XP Home edition doesn't use the more effective
>>> MMC Snap-In, Local Users and Groups which is available in XP Pro, do
>>> you have any suggestions for tracing this folder's properties or
>>> links to figure out why it keeps repairing itself?
>>>
>>> 2. A Microsoft technical expert explained to me the relationship
>>> between Account names and Profile names. I thought I had it down pat.
>>> However, I was unaware of the User Profile names list on the Control
>>> Panel | System | Advanced tab until recently. Now I'm totally
>>> confused again! The user's Account name, profile folder name and
>>> ProfileList registry entry all match. However, the User's Profile
>>> name on the System | Advanced tab apparently doesn't have to match
>>> the other three (e.g., some of my accounts' User Profile names match
>>> the other (3) identifiers, and some don't. Yet, they all work. And
>>> no, the folder I'm trying to delete isn't listed on this tab.) So,
>>> how do User Profile names relate to these other three (Account names
>>> in Control Panel | User Accounts, profile folders in Explorer, and
>>> the ProfileList in the Registry)?
>>>
>>> Thanks in advance for your assistance, -Robert
>>>
>>>
>>>
>>> * The path to this subkey is
>>> HKLM/Software/Microsoft/WindowsNT/CurrentVersion/ProfileList.
>>>
>> why not simply do a clean install of winxp / programs, etc., (after
>> backing up mum's data?)
>>
>> then create a log in for her. then tell her to remove the fuse from the
>> mains when either her kids or their friends visit. it's obvious that
>> they know far more than you, and probably many 'pro' people about
>> hacking etc.,.
>>

[Robert]

I recognize that this isn't Microsoft Tech Support. However, in the past,
MVPs monitored the site who apparently are more knowledgeable about difficult
issues like this.

For one thing, I don't appreciate being INSULTED like I was by Ushere! I
happen to BE an IT professional. And, if performing a clean install was an
option, don't you think I'd have done that by now? The computer was not a
retail purchase. Its custom-built by a Ma & Pop computer store which has
since gone out of business. The computer owner never received installation
disks. And, being an older computer, I'm having trouble finding all the
drivers and software, much less being able to reinstall the OS.

However, the system is running fine now. All I need is some information
about removing this pesky little profile folder and I'm done. In my opinion,
I've found that people who don't know any other way to fix a system always
advocate reinstalling the partition. Thanks for your time. But, I think I'll
post to a more FRIENDLY and helpful Newsgroup!

-Totally offended and frustrated





"Leonard Grey" wrote:

> FYI: This is not Microsoft technical support, so you won't find a
> 'Microsoft Tech Support person' here. This is a peer-to-peer newsgroup.
>
> When a computer is as badly messed up as the one you are working on, the
> best (and fastest) course of action is a clean install. All Windows
> computers sold at retail have a method for doing a clean install. This
> is typically done with 'recovery disks' or with a 'recovery partition'.
> In addition, some OEMs still provide full installation media for all
> software on the computer. In any case, the computer manufacturer can
> help you to do a clean install.
> ---
> Leonard Grey
> Errare humanum est
>
> Robert wrote:
> > Was this supposed to be insulting or helpful?!? If I could have done a
> > reinstall, I would have. Mom doesn't have any of the setup disks! Is anybody
> > else out there who's an actual Microsoft Tech Support person that's willing
> > to offer a more reasonable "professional" response than disconnect the fuse
> > (power) to the house? And when did Microsoft Communities start letting
> > knuckleheads like Ushere respond?
> >
> > -Unbelievable
> >
> >
> >
> >
> >
> >
> >
> > "ushere" wrote:
> >
> >> Robert wrote:
> >>> I'm restoring and upgrading a friend's computer (XP Home SP3). Her
> >>> teens and their friends screwed it up by creating several bogus
> >>> profiles, downloading Trojan Horse laden ringtones, anti-virus
> >>> programs and other unwanted software, and leaving personal files and
> >>> folders all over the place. I removed several virus infections and
> >>> other malware. And, I installed leading anti-virus and anti-malware
> >>> software. Then, I verified that all malicious files and programs had
> >>> indeed been completely removed by running numerous scans untilI was
> >>> confident that the system was clean.
> >>>
> >>> However, one of the user accounts was locked-out due to a forgotten
> >>> password. And, the kids' IM profiles had been hacked by a former
> >>> friend, possibly compromising the mother's entire computer. Now,
> >>> she's afraid he'll try to hack it again. So, I created all new
> >>> passwords and am taking further steps to secure the system.
> >>>
> >>> I created two new user accounts and their associated profiles with
> >>> profile folders. Then, I copied over select files and folders from
> >>> the (2) original profile folders using procedures outlined elsewhere
> >>> on this Help site. And, I verified that the new user
> >>> accounts/profiles are functioning correctly by logging into each one
> >>> from the Windows Logon screen. They work fine.
> >>>
> >>> My next step was to delete the original accounts, their profiles and
> >>> their related folders. I deleted the first account by simply clicking
> >>> "Delete" in Control Panel | User Accounts. All traces of the
> >>> account's profile appear to have been completely removed.
> >>>
> >>> However, the second account's original profile folder is giving me
> >>> fits! It appeared to have been deleted like the first account when I
> >>> tried using the delete function in Control Panel | User Accounts. The
> >>> account name was gone in User Settings, in Windows Explorer and in
> >>> the Registry subkey ProfileList *. But upon reboot, this profile's
> >>> folder reappears in Explorer.
> >>>
> >>> Subsequent attempts to delete it from Explorer using an Admin.
> >>> account have had one of two results. Either the folder appears to be
> >>> deleted and then reappears again when I reboot. Or, Delete fails and
> >>> I get an error message stating that this is a System folder and can't
> >>> be deleted. This is a curious error message! I don't understand how
> >>> it could be a System folder. The default Windows Admin. account
> >>> (listed in the Registry under ProfileList subkey #S-1-5-21-.....-500)
> >>> is still intact, assuming someone accidentally renamed it.
> >>>
> >>> I also tried logging in with the default Windows Admin. account (in
> >>> Safe Mode). The results were the same. I even tried deleting all the
> >>> folder's files and subfolders. But, the root folder keeps returning
> >>> after I reboot. There doesn't seem to be a username linked to it in
> >>> Control Panel | User Accounts either; nor in System | Advanced | User
> >>> Settings, or in the Registry under the ProfileList subkey.
> >>>
> >>>
> >>> Questions: 1. Since XP Home edition doesn't use the more effective
> >>> MMC Snap-In, Local Users and Groups which is available in XP Pro, do
> >>> you have any suggestions for tracing this folder's properties or
> >>> links to figure out why it keeps repairing itself?
> >>>
> >>> 2. A Microsoft technical expert explained to me the relationship
> >>> between Account names and Profile names. I thought I had it down pat.
> >>> However, I was unaware of the User Profile names list on the Control
> >>> Panel | System | Advanced tab until recently. Now I'm totally
> >>> confused again! The user's Account name, profile folder name and
> >>> ProfileList registry entry all match. However, the User's Profile
> >>> name on the System | Advanced tab apparently doesn't have to match
> >>> the other three (e.g., some of my accounts' User Profile names match
> >>> the other (3) identifiers, and some don't. Yet, they all work. And
> >>> no, the folder I'm trying to delete isn't listed on this tab.) So,
> >>> how do User Profile names relate to these other three (Account names
> >>> in Control Panel | User Accounts, profile folders in Explorer, and
> >>> the ProfileList in the Registry)?
> >>>
> >>> Thanks in advance for your assistance, -Robert
> >>>
> >>>
> >>>
> >>> * The path to this subkey is
> >>> HKLM/Software/Microsoft/WindowsNT/CurrentVersion/ProfileList.
> >>>
> >> why not simply do a clean install of winxp / programs, etc., (after
> >> backing up mum's data?)
> >>
> >> then create a log in for her. then tell her to remove the fuse from the
> >> mains when either her kids or their friends visit. it's obvious that
> >> they know far more than you, and probably many 'pro' people about
> >> hacking etc.,.
> >>
>

[Olórin]

Robert wrote:

<snip>

> if performing a clean
> install was an option, don't you think I'd have done that by now?

Why would we? You didn't tell us anything about your ability level or why a
clean install is problematic. It's not up to us to assume; it's up to you to
give full detail in the first place.

And I'd agree that if at all possible, you should go that route - the
drivers wil be out there somewhere. Perhaps seek redress from these teens
and their friends for the damage they caused if an XP disc has to be
purchased. With that level of wilful infection, you may never be 100% sure
that you're free of the malware and its effects.

<snip>

> In my opinion, I've found that people who don't know any other
> way to fix a system always advocate reinstalling the partition.

Well, you've just said that's exactly what you would have done if you could!

>
>
>
> "Leonard Grey" wrote:
>
>> FYI: This is not Microsoft technical support, so you won't find a
>> 'Microsoft Tech Support person' here. This is a peer-to-peer
>> newsgroup.
>>
>> When a computer is as badly messed up as the one you are working on,
>> the best (and fastest) course of action is a clean install. All
>> Windows computers sold at retail have a method for doing a clean
>> install. This is typically done with 'recovery disks' or with a
>> 'recovery partition'. In addition, some OEMs still provide full
>> installation media for all software on the computer. In any case,
>> the computer manufacturer can help you to do a clean install.
>> ---
>> Leonard Grey
>> Errare humanum est
>>
>> Robert wrote:
>>> Was this supposed to be insulting or helpful?!? If I could have
>>> done a reinstall, I would have. Mom doesn't have any of the setup
>>> disks! Is anybody else out there who's an actual Microsoft Tech
>>> Support person that's willing to offer a more reasonable
>>> "professional" response than disconnect the fuse (power) to the
>>> house? And when did Microsoft Communities start letting
>>> knuckleheads like Ushere respond?
>>>
>>> -Unbelievable
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> "ushere" wrote:
>>>
>>>> Robert wrote:
>>>>> I'm restoring and upgrading a friend's computer (XP Home SP3). Her
>>>>> teens and their friends screwed it up by creating several bogus
>>>>> profiles, downloading Trojan Horse laden ringtones, anti-virus
>>>>> programs and other unwanted software, and leaving personal files
>>>>> and folders all over the place. I removed several virus
>>>>> infections and other malware. And, I installed leading anti-virus
>>>>> and anti-malware software. Then, I verified that all malicious
>>>>> files and programs had indeed been completely removed by running
>>>>> numerous scans untilI was confident that the system was clean.
>>>>>
>>>>> However, one of the user accounts was locked-out due to a
>>>>> forgotten password. And, the kids' IM profiles had been hacked by
>>>>> a former friend, possibly compromising the mother's entire
>>>>> computer. Now, she's afraid he'll try to hack it again. So, I
>>>>> created all new passwords and am taking further steps to secure
>>>>> the system.
>>>>>
>>>>> I created two new user accounts and their associated profiles with
>>>>> profile folders. Then, I copied over select files and folders from
>>>>> the (2) original profile folders using procedures outlined
>>>>> elsewhere on this Help site. And, I verified that the new user
>>>>> accounts/profiles are functioning correctly by logging into each
>>>>> one from the Windows Logon screen. They work fine.
>>>>>
>>>>> My next step was to delete the original accounts, their profiles
>>>>> and their related folders. I deleted the first account by simply
>>>>> clicking "Delete" in Control Panel | User Accounts. All traces of
>>>>> the account's profile appear to have been completely removed.
>>>>>
>>>>> However, the second account's original profile folder is giving me
>>>>> fits! It appeared to have been deleted like the first account
>>>>> when I tried using the delete function in Control Panel | User
>>>>> Accounts. The account name was gone in User Settings, in Windows
>>>>> Explorer and in the Registry subkey ProfileList *. But upon
>>>>> reboot, this profile's folder reappears in Explorer.
>>>>>
>>>>> Subsequent attempts to delete it from Explorer using an Admin.
>>>>> account have had one of two results. Either the folder appears to
>>>>> be deleted and then reappears again when I reboot. Or, Delete
>>>>> fails and I get an error message stating that this is a System
>>>>> folder and can't be deleted. This is a curious error message! I
>>>>> don't understand how it could be a System folder. The default
>>>>> Windows Admin. account (listed in the Registry under ProfileList
>>>>> subkey #S-1-5-21-.....-500) is still intact, assuming someone
>>>>> accidentally renamed it.
>>>>>
>>>>> I also tried logging in with the default Windows Admin. account
>>>>> (in Safe Mode). The results were the same. I even tried deleting
>>>>> all the folder's files and subfolders. But, the root folder keeps
>>>>> returning after I reboot. There doesn't seem to be a username
>>>>> linked to it in Control Panel | User Accounts either; nor in
>>>>> System | Advanced | User Settings, or in the Registry under the
>>>>> ProfileList subkey.
>>>>>
>>>>>
>>>>> Questions: 1. Since XP Home edition doesn't use the more effective
>>>>> MMC Snap-In, Local Users and Groups which is available in XP Pro,
>>>>> do you have any suggestions for tracing this folder's properties
>>>>> or links to figure out why it keeps repairing itself?
>>>>>
>>>>> 2. A Microsoft technical expert explained to me the relationship
>>>>> between Account names and Profile names. I thought I had it down
>>>>> pat. However, I was unaware of the User Profile names list on the
>>>>> Control Panel | System | Advanced tab until recently. Now I'm
>>>>> totally confused again! The user's Account name, profile folder
>>>>> name and ProfileList registry entry all match. However, the
>>>>> User's Profile name on the System | Advanced tab apparently
>>>>> doesn't have to match the other three (e.g., some of my accounts'
>>>>> User Profile names match the other (3) identifiers, and some
>>>>> don't. Yet, they all work. And no, the folder I'm trying to
>>>>> delete isn't listed on this tab.) So, how do User Profile names
>>>>> relate to these other three (Account names in Control Panel |
>>>>> User Accounts, profile folders in Explorer, and the ProfileList
>>>>> in the Registry)?
>>>>>
>>>>> Thanks in advance for your assistance, -Robert
>>>>>
>>>>>
>>>>>
>>>>> * The path to this subkey is
>>>>> HKLM/Software/Microsoft/WindowsNT/CurrentVersion/ProfileList.
>>>>>
>>>> why not simply do a clean install of winxp / programs, etc., (after
>>>> backing up mum's data?)
>>>>
>>>> then create a log in for her. then tell her to remove the fuse
>>>> from the mains when either her kids or their friends visit. it's
>>>> obvious that they know far more than you, and probably many 'pro'
>>>> people about hacking etc.,.

[Robert]

Nevermind! And, thanks for nothing to this Newsgroup. I found MUCH more
helpful and far less hostile assistance in another Microsoft Newsgroup. You
guys must have been affected by the full moon or something. Hope you aren't
getting PAID by Microsoft for such antagonistic insulting bullcrap!

:/





"Olórin" wrote:

> Robert wrote:
>
> <snip>
>
> > if performing a clean
> > install was an option, don't you think I'd have done that by now?
>
> Why would we? You didn't tell us anything about your ability level or why a
> clean install is problematic. It's not up to us to assume; it's up to you to
> give full detail in the first place.
>
> And I'd agree that if at all possible, you should go that route - the
> drivers wil be out there somewhere. Perhaps seek redress from these teens
> and their friends for the damage they caused if an XP disc has to be
> purchased. With that level of wilful infection, you may never be 100% sure
> that you're free of the malware and its effects.
>
> <snip>
>
> > In my opinion, I've found that people who don't know any other
> > way to fix a system always advocate reinstalling the partition.
>
> Well, you've just said that's exactly what you would have done if you could!
>
> >
> >
> >
> > "Leonard Grey" wrote:
> >
> >> FYI: This is not Microsoft technical support, so you won't find a
> >> 'Microsoft Tech Support person' here. This is a peer-to-peer
> >> newsgroup.
> >>
> >> When a computer is as badly messed up as the one you are working on,
> >> the best (and fastest) course of action is a clean install. All
> >> Windows computers sold at retail have a method for doing a clean
> >> install. This is typically done with 'recovery disks' or with a
> >> 'recovery partition'. In addition, some OEMs still provide full
> >> installation media for all software on the computer. In any case,
> >> the computer manufacturer can help you to do a clean install.
> >> ---
> >> Leonard Grey
> >> Errare humanum est
> >>
> >> Robert wrote:
> >>> Was this supposed to be insulting or helpful?!? If I could have
> >>> done a reinstall, I would have. Mom doesn't have any of the setup
> >>> disks! Is anybody else out there who's an actual Microsoft Tech
> >>> Support person that's willing to offer a more reasonable
> >>> "professional" response than disconnect the fuse (power) to the
> >>> house? And when did Microsoft Communities start letting
> >>> knuckleheads like Ushere respond?
> >>>
> >>> -Unbelievable
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>> "ushere" wrote:
> >>>
> >>>> Robert wrote:
> >>>>> I'm restoring and upgrading a friend's computer (XP Home SP3). Her
> >>>>> teens and their friends screwed it up by creating several bogus
> >>>>> profiles, downloading Trojan Horse laden ringtones, anti-virus
> >>>>> programs and other unwanted software, and leaving personal files
> >>>>> and folders all over the place. I removed several virus
> >>>>> infections and other malware. And, I installed leading anti-virus
> >>>>> and anti-malware software. Then, I verified that all malicious
> >>>>> files and programs had indeed been completely removed by running
> >>>>> numerous scans untilI was confident that the system was clean.
> >>>>>
> >>>>> However, one of the user accounts was locked-out due to a
> >>>>> forgotten password. And, the kids' IM profiles had been hacked by
> >>>>> a former friend, possibly compromising the mother's entire
> >>>>> computer. Now, she's afraid he'll try to hack it again. So, I
> >>>>> created all new passwords and am taking further steps to secure
> >>>>> the system.
> >>>>>
> >>>>> I created two new user accounts and their associated profiles with
> >>>>> profile folders. Then, I copied over select files and folders from
> >>>>> the (2) original profile folders using procedures outlined
> >>>>> elsewhere on this Help site. And, I verified that the new user
> >>>>> accounts/profiles are functioning correctly by logging into each
> >>>>> one from the Windows Logon screen. They work fine.
> >>>>>
> >>>>> My next step was to delete the original accounts, their profiles
> >>>>> and their related folders. I deleted the first account by simply
> >>>>> clicking "Delete" in Control Panel | User Accounts. All traces of
> >>>>> the account's profile appear to have been completely removed.
> >>>>>
> >>>>> However, the second account's original profile folder is giving me
> >>>>> fits! It appeared to have been deleted like the first account
> >>>>> when I tried using the delete function in Control Panel | User
> >>>>> Accounts. The account name was gone in User Settings, in Windows
> >>>>> Explorer and in the Registry subkey ProfileList *. But upon
> >>>>> reboot, this profile's folder reappears in Explorer.
> >>>>>
> >>>>> Subsequent attempts to delete it from Explorer using an Admin.
> >>>>> account have had one of two results. Either the folder appears to
> >>>>> be deleted and then reappears again when I reboot. Or, Delete
> >>>>> fails and I get an error message stating that this is a System
> >>>>> folder and can't be deleted. This is a curious error message! I
> >>>>> don't understand how it could be a System folder. The default
> >>>>> Windows Admin. account (listed in the Registry under ProfileList
> >>>>> subkey #S-1-5-21-.....-500) is still intact, assuming someone
> >>>>> accidentally renamed it.
> >>>>>
> >>>>> I also tried logging in with the default Windows Admin. account
> >>>>> (in Safe Mode). The results were the same. I even tried deleting
> >>>>> all the folder's files and subfolders. But, the root folder keeps
> >>>>> returning after I reboot. There doesn't seem to be a username
> >>>>> linked to it in Control Panel | User Accounts either; nor in
> >>>>> System | Advanced | User Settings, or in the Registry under the
> >>>>> ProfileList subkey.
> >>>>>
> >>>>>
> >>>>> Questions: 1. Since XP Home edition doesn't use the more effective
> >>>>> MMC Snap-In, Local Users and Groups which is available in XP Pro,
> >>>>> do you have any suggestions for tracing this folder's properties
> >>>>> or links to figure out why it keeps repairing itself?
> >>>>>
> >>>>> 2. A Microsoft technical expert explained to me the relationship
> >>>>> between Account names and Profile names. I thought I had it down
> >>>>> pat. However, I was unaware of the User Profile names list on the
> >>>>> Control Panel | System | Advanced tab until recently. Now I'm
> >>>>> totally confused again! The user's Account name, profile folder
> >>>>> name and ProfileList registry entry all match. However, the
> >>>>> User's Profile name on the System | Advanced tab apparently
> >>>>> doesn't have to match the other three (e.g., some of my accounts'
> >>>>> User Profile names match the other (3) identifiers, and some
> >>>>> don't. Yet, they all work. And no, the folder I'm trying to
> >>>>> delete isn't listed on this tab.) So, how do User Profile names
> >>>>> relate to these other three (Account names in Control Panel |
> >>>>> User Accounts, profile folders in Explorer, and the ProfileList
> >>>>> in the Registry)?
> >>>>>
> >>>>> Thanks in advance for your assistance, -Robert
> >>>>>
> >>>>>
> >>>>>
> >>>>> * The path to this subkey is
> >>>>> HKLM/Software/Microsoft/WindowsNT/CurrentVersion/ProfileList.
> >>>>>
> >>>> why not simply do a clean install of winxp / programs, etc., (after
> >>>> backing up mum's data?)
> >>>>
> >>>> then create a log in for her. then tell her to remove the fuse
> >>>> from the mains when either her kids or their friends visit. it's
> >>>> obvious that they know far more than you, and probably many 'pro'
> >>>> people about hacking etc.,.
>
>
>