Deleted user account has virus

[ChrisPeters]

Question I have concerns a deleted user account
On XP created a user account named "ttt" to test some
software. Deleted the account.
Norton virus displayed message that I had a "
download.manager virus located in C:\documents and
settings\ttt\local settings\ restu1[1].htm.

My question: Are deleted user accounts really deleted -or
are they stored in the registry such as HKEY_USERS\S-1-5-
20 or HKEY_USERS\S-1-5-21-507921405-651377827-725345543-
1003_Classes, even tho un-usable they might contain
viruses?

I consulted with Norton and it explained the virus may be
detected but cannot remove due to the area being
compressed ,,if I have a virus,,great~!!,,,,someone out
there explain can remove the deleted user account or is
it really gone, and Does the registry really keep track
of deleted user accounts ...any help would help me learn
more the ways of puters
Thanks a ton and best regards

 

[Doug Knox MS-MVP]

If the account was deleted, but not the files, you can "take ownership" of
them, so that your account has the appropriate permissions.

See Help and Support and search for "take ownership"

HOW TO: Take Ownership of a File or Folder in Windows XP
http://support.microsoft.com/?id=308421

 

[Todd Shillam]

Whoa! Don't go editing the registry quite yet. When using Windows, there
are 'user accounts' and 'user profiles' -- they are two separate things.

To view user accounts, left click on the My Computer icon on the desktop
(that's left click). Select, <Manage> in the sub-menu--this will open the
MMC (Microsoft Management Console). Once the console open, look in the left
pane and locate <Locale Users and Groups> folder. Here you can delete a
'user account' or disable, etc.

If you want to delete a user profile, right (that's right click) on <My
Computer> and select <Properties> on the sub-menu--this will open the
<System Properties> window. In Windows 2000, just select <User Profiles> tab
and delete those user's whom profiles you don't want on the computer. This
will delete the user's profile directories under <C:\Documents and
Settings\%USERPROFILE%

If you have XP, the process is the same; however, you'll need to select the
<Advance> tab, versus <User Profiles>.

Best regards,

Todd

Question I have concerns a deleted user account
On XP created a user account named "ttt" to test some
software. Deleted the account.
Norton virus displayed message that I had a "
download.manager virus located in C:\documents and
settings\ttt\local settings\ restu1[1].htm.

My question: Are deleted user accounts really deleted -or
are they stored in the registry such as HKEY_USERS\S-1-5-
20 or HKEY_USERS\S-1-5-21-507921405-651377827-725345543-
1003_Classes, even tho un-usable they might contain
viruses?

I consulted with Norton and it explained the virus may be
detected but cannot remove due to the area being
compressed ,,if I have a virus,,great~!!,,,,someone out
there explain can remove the deleted user account or is
it really gone, and Does the registry really keep track
of deleted user accounts ...any help would help me learn
more the ways of puters
Thanks a ton and best regards

 

[Todd Shillam]

Opps! Better make that a right click on <My Computer> icon.

Best regards,

Todd

To view user accounts, left click on the My Computer icon on the desktop
(that's left click). Select, <Manage> in the sub-menu--this will open the
MMC (Microsoft Management Console). Once the console open, look in the left
pane and locate <Locale Users and Groups> folder. Here you can delete a
'user account' or disable, etc.