Windows 7 – Removing unwanted users safely (possible bots)
From: http://answers.microsoft.com/en-us/windows/forum/windows_7-security/unknown-user-called-slavik/b8db6327-7d4a-e011-8dfc-68b599b31bf5
Each machine has a number of user accounts. See below for a method to find out what they are.
Each machine has a number of user profile folders. They are usually kept in C:\Users. Some are created by the System, e.g.
c:\Users\Public
c:\Users\Default,
some belong to existing user accounts and some belong to user accounts that no longer exist.
You can have user accounts without a user profile folder (which happens if the account was never used).
You can have user profile folders without user accounts (which happens if the account got deleted).
To clarify what you really have on your machine, do this:
Boot into Safe Mode.
Click Start.
Type the three letters cmd into the Search box.
Press Ctrl+Shift+Enter
Click “Run as Administrator”.
Type the following commands and press Enter after each of them:
mode con lines=50
(to increase the screen size)
net user
(to see what accounts exist on your machine)
set username
(to see what account you currently use)
net user baduser1
(to see when this account was last used, if it is active and if it is an admin account)
net user baduser1 /active:no
(to disable this account)
ren \Users\baduser1 baduser1.bad
(to move the baduser1 profile folder out of reach of Windows)
rdd /s /q c:\Users\baduser1.bad
(to permanently delete the baduser1 profile folder)
Since I am not at all sure what the baduser1 folder contains, you should wait at least one week before running the last command. If you run it immediately then you risk deleting files that you wanted to keep. These files cannot be deleted. You have been warned.
