screwed up accounts-> just read please

[BriGy86]

my friend was in safe mode and deleted the files in the temp folder

then when he restarted his account had the same name but everything was dif.

all his desktop icons were gone (at least most of them)

so i looked in documents and settings and his old profile folder was still there (G code)

and there was another profile folder that no one created labeled G code.GCODE

its loading that 2nd profile automaticaly

so how do i make the other one come up when windows starts up?

thanks

 

[montag451]

go into accounts in [presume xp] in control panel and see what is in there

 

[BriGy86]

i almost forgot his specs are

Win XP home
Sony vaio
512 RAM
3.2 P4
120 gig HDD

 

[BriGy86]

heres a weird thing

in user accounts it says G code and guest thats it

but the profile for G code has all his stuff, but the computer isn't loading that

it seems to be loading the profile for G code.GCODE

and also the only log in icon that appears on start up is G code

 

[montag451]

what is the workgroup name?
is that gcode?

 

[BriGy86]

its not part of one its not on a network

 

[montag451]

at install, are you sure it wasnt given one? even default - WORKGROUP?

Also, when your mate was doing his clearing up, did he go anywhere else whith his fairy dynamite?

 

[BriGy86]

he deleted some documents in the my documents folder he said

also here is a link to a pic of the profiles

 

[BriGy86]

and the workgroup may be the default

 

[montag451]

does he use a firewall and antivirus?

can he run Adaware and Spybot and antivirus - in safe mode?

 

[montag451]

one other important thing - does event viewer show up anything?

 

[BriGy86]

ill go try running that right now

and i wouldn't really know what to look for in the even viewer

 

[montag451]

see the time/date that he started poking his sledgehammer into his computer.

See if anything comes up about profiles/users that doesnt come up 2 days previously

 

[BriGy86]

nothing that sticks out

and the only thing that the scans came up with are the DSO exploit and 2 cookies

 

[montag451]

Make another account called TRYOUT

Share that account and see what happens

 

[BriGy86]

ok thanks,

i think were just going to copy and paste a lot of the crap over to the other file if all else fails