Moderators
April 29, 2013
August 9, 2011
Daniel, which is the main profile, the one that matches your user account name, and which is the secondary profile?
Are they identical - if you open folders, do both contain exactly the same files?
Moderators
April 29, 2013
Yes Jim they have the same files but different user names. The one named "Amy" is the current user and the one named "audrey" was the first user set up on the PC when it was running W8, at least that is the info I am getting from the owner. Do you think a PC reset would fix this or am I looking at a HDD reformat I am worried that their may have been some OS file damage with all the threats that were removed. Thanks Daniel.
August 9, 2011
If the user profiles are exactly identical, and provided the desktop and everything else boots up as expected, I can't see any harm in keeping both profiles.
As far as I am aware, a Reset would remove all user accounts/profiles. It restores everything back to a clean state, very much like a fresh install.
Considering the sheer number of threats you've removed from this machine, I would definitely consider a Reset.
What results are you getting from sfc /scannow?
Have you tried the dism commands? (must be online):
Dism /Online /Cleanup-Image /ScanHealth
Dism /Online /Cleanup-Image /RestoreHealth
(These will not remove the additional profile, just check system file integrity)
August 7, 2011
I'm not up to speed on the whole story and you don't mention an infection in this thread, but Jim does. However, if the computer was infected the most likely reason for the second user is infection.
If an infection gains root/admin access it is quite common for it to create additional user accounts which also have admin access. It allows them a second attack vector, or backdoor, where they can install processes and make changes that a user wouldn't normally notice or be able to remove.
If the computer was infected at that level I would copy the user files to a separate drive and do a format/fresh install including deleting all partitions on the original drive - I would be afraid the files needed to reset may be altered. It would be safer and easier to format and install.
I would also scan any user files you copy to external media with anything you can get your hands on before returning them to the machine.
1 Guest(s)
