New account strangely created

Hi All,
I am not sure but the strangely new account with was created today for me.
Just a little brief here.
My computer name is andy. I am using "andy muer" as my login id.
Suddenly when I restared my computer. My desktop icons were gone and
background was change. It still logs me in as andy muer and same password but
it created a new profile under Documents and setting. I see 2 account
1. Andy Muer
2. Andy Muer.Andy.
All my settings and outlook setup and everything is in my account #1 which
is Andy Muer.
How can I get everything back? Can anyone please tell what happen. Is this
some kind of attack ?
Please help.

Thanks
Andy

From: "Andy"

| Hi All,
| I am not sure but the strangely new account with was created today for me.
| Just a little brief here.
| My computer name is andy. I am using "andy muer" as my login id.
| Suddenly when I restared my computer. My desktop icons were gone and
| background was change. It still logs me in as andy muer and same password but
| it created a new profile under Documents and setting. I see 2 account
| 1. Andy Muer
| 2. Andy Muer.Andy.
| All my settings and outlook setup and everything is in my account #1 which
| is Andy Muer.
| How can I get everything back? Can anyone please tell what happen. Is this
| some kind of attack ?
| Please help.
|
| Thanks
| Andy

There was a problem with Security Identifier (SID) or the user Registry. Thus it created a
new profile (not a new account) since "andy muer" already existed and it created the "andy
muer.andy" profile and was thus not containing your setttings.

Login as administrator

Rename the profile,
C:\Documents and Settings\andy muer
to
C:\Documents and Settings\andy muer.bak

Delete the profile
C:\Documents and Settings\andy muer.andy

Logoff and then login as 'andy muer' again and then logoff again.
The profile below should be re-created
C:\Documents and Settings\andy muer

Now logon as administrator again.
Copy all data, EXCEPT NTUSER.DAT, from ..
C:\Documents and Settings\andy muer.bak
to
C:\Documents and Settings\andy muer

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

David, Thanks a lot it worked. The only thing is I did not recover my outlook
profile ?
I don;t have my account setup in outlook. Is there any other way to recover
all accounts and folders in oulook ?

Thanks
Andy

"David H. Lipman" wrote:

From: "Andy"

| Hi All,
| I am not sure but the strangely new account with was created today for me.
| Just a little brief here.
| My computer name is andy. I am using "andy muer" as my login id.
| Suddenly when I restared my computer. My desktop icons were gone and
| background was change. It still logs me in as andy muer and same password but
| it created a new profile under Documents and setting. I see 2 account
| 1. Andy Muer
| 2. Andy Muer.Andy.
| All my settings and outlook setup and everything is in my account #1 which
| is Andy Muer.
| How can I get everything back? Can anyone please tell what happen. Is this
| some kind of attack ?
| Please help.
|
| Thanks
| Andy

There was a problem with Security Identifier (SID) or the user Registry. Thus it created a
new profile (not a new account) since "andy muer" already existed and it created the "andy
muer.andy" profile and was thus not containing your setttings.

Login as administrator

Rename the profile,
C:\Documents and Settings\andy muer
to
C:\Documents and Settings\andy muer.bak

Delete the profile
C:\Documents and Settings\andy muer.andy

Logoff and then login as 'andy muer' again and then logoff again.
The profile below should be re-created
C:\Documents and Settings\andy muer

Now logon as administrator again.
Copy all data, EXCEPT NTUSER.DAT, from ..
C:\Documents and Settings\andy muer.bak
to
C:\Documents and Settings\andy muer

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

From: "Andy"

| David, Thanks a lot it worked. The only thing is I did not recover my outlook
| profile ?
| I don;t have my account setup in outlook. Is there any other way to recover
| all accounts and folders in oulook ?
|
| Thanks
| Andy


Well, the PST, PAB, configuration files will be there but the Outlook Profile was in the
Registry. You will have to recreate that. However, it will see the structure that were
copied over and you can point back to the PAB, PST and other files.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm