Coreper Posted August 23, 2006 Report Share Posted August 23, 2006 on this computer we have got 2 users [apart from the admin]: arnolda and johnlalately when i crossed the Documents and Settings folder i noticed something:there was a user folder named: JOHN$, i dont know if this is spy-/ad-warei have got Norton Antivirus and Norton Internet Security and Spybot - Search & Destroythey didnt notice anything strange about the folder...the user JOHN$ isnt registered [view users here ]here is a picture of the D&S folderand here is a picture of the content of the JOHN$ folderwhat can i do to remove/get rit of this folder [deleting doesnt work]please help methanks Quote Link to comment Share on other sites More sharing options...
Boris Posted August 23, 2006 Report Share Posted August 23, 2006 If you want to remove a user account ?http://www.microsoft.com/resources/documen...r.mspx?mfr=true Quote Link to comment Share on other sites More sharing options...
Alexis Blaze Posted August 24, 2006 Report Share Posted August 24, 2006 do you have any share folder with share name JOHN$ ?? Quote Link to comment Share on other sites More sharing options...
Coreper Posted August 24, 2006 Author Report Share Posted August 24, 2006 i dont share it, it just occured and it isnt from a excisting user Quote Link to comment Share on other sites More sharing options...
cozofdeath Posted August 25, 2006 Report Share Posted August 25, 2006 If your sure someone didn't rename a profile folder and that its not needed I would go into safe mode in a different account (an admin account) and delete it. I'm not to familiar with NT but in XP you can open regedit and do a search for that folder name. Someone probably created a account then deleted it or messed with profile settings. There is a registry key that when its in place tells Windows there is an account there. But in this case it sounds like it was removed. The key below and the folder is still there. Which can happen if an account isn't removed correctly. This is my experience with xp, it may not be the same for you.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DocFolderPaths\JOHN$Also I seen someone is sharing their profile folder. You might want to make sure the proper permissions are in place for that shared admin folder (arnolda) so someone can't come along and create an admin account, if you think it needs checking of course. Quote Link to comment Share on other sites More sharing options...
Coreper Posted August 26, 2006 Author Report Share Posted August 26, 2006 i also noticed that "arnolda" was shared, i unshared itand no search results in regedit for JOHN$also all the users are the same as before [no one changed] you can see them herei will try [again] to delete the folder, but this time in Safe Mode Quote Link to comment Share on other sites More sharing options...
Coreper Posted August 26, 2006 Author Report Share Posted August 26, 2006 deleting it worked, now lets just hope it wont show up again... Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.