Solved

ntuser.dat X 2 = ??? HELP!!!

Posted on 2004-03-21
26
1,654 Views
Last Modified: 2007-12-19
ntuser.dat

Now here is prob:

_______________________

#1: ntuser.dat - 1,536KB DAT File

Location: C:\Documents and Settings\Scott

When I right click and go to properties this is what it says:

size: 1.50 MB (1,572,864 bytes)
size on disk: 1.50 MB (1,572,864 bytes)
created: March 10, 2004, 6:01:58 PM
modified: March 21, 2004, 6:24:41 AM
Accessed: March 21, 2004, 6:16:53 AM
_______________________

#2: ntuser.dat - 256 KB

Location: C:\WINDOWS\system32\config\systemprofile

When I right click and go to properties this is what it says:


size: 256 KB (262,144 bytes)
size on disk: 256 KB (262,144 bytes)
created: March 10, 2004, 6:01:58 PM
modified: March 10, 2004, 6:01:58 PM
Accessed: March 21, 2004, 7:36:08 AM
_______________________

I only noticed this because I went into Documents and Settings,
however I do know that it was not there yesterday.
So what does it mean? And what do I do about it?

Any help/responses in dummy form would be greatly appreciated.

Thanx,

Angie
0
Comment
Question by:Angelwings609
  • 15
  • 11
26 Comments
 

Author Comment

by:Angelwings609
ID: 10643728
Do I simply slove probelem by deleting the new just appeared ntuser.dat file in documents and settings?
0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 10643744
Hi Angelwings609,

NTUSER.DAT is a normal system file, it stores the profile.
Don't delete it from your computer, as it won't boot afterwards.

You have probably set the view to be able to see hidden files and folders (including systemfiles)
If you don't want to see this file: Tools => "Folder options" => "View"
Tick the box in front of "Hide protected operating systemfiles"
set "do not show hidden files and folders"

It could be named a little different as I'm using win2k and you're using winXP.

Greetings,

LucF
0
 

Author Comment

by:Angelwings609
ID: 10643796
So both are manditory? Strange.....

Also, why does it say they were both modified today?

1 more question, howcome the ntuser.dat file in documents and settings says; 1,536 KB but then changes to 1.50 MB when I right click on it?

lol How did you learn so much about this stuff? & Thanx, ;)

Angie
0
 

Author Comment

by:Angelwings609
ID: 10643803
Oh ya, you said to check "do not show hidden files and folders"
but it is already set to that, also, "hide protected system operating files" is also on.

I haven't changed any folder options at all, that's why I found it so weird that it suddenly just appeared.

lol This happened at same time all the other stuff you helped me with did.
0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 10643804
1) Yep, both are manditory, the first is the user profile, the second is the system profile (to run some services all the time like a virusscanner)

2) The first is modified today as you logged in.
The second isn't modified today, it's accessed today (it opened when you started the computer)

3) It's because of the cluster size on the drive, a harddisk isn't written in bytes, but in clusters which contain a few kilobytes. This causes all files to take more room on the drive than their own size, it also causes everything to speed up, that's why this is made this way.

4) lol! Just a lot of practice, I messed up some computers when I started, finally got to know how to fix it ;-)
Surfing the web is a great way to learn all kinds of things, but I guess most I learned here at Experts-Exchange

LucF
0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 10643810
Hmm, can you please do this:

Start => Run => type "CMD" (without the quotes) and press enter.

attrib C:\Documents and Settings\Scott\NTUSER.dat

and post the result, it should be something like

"A    H   C:\Documents and Settings\Scott\NTUSER.dat"
0
 

Author Comment

by:Angelwings609
ID: 10643819
Could it's sudden appearence have anything to do with the fact that I deleted a couple user accounts that were unnecessary (kids)?
0
 

Author Comment

by:Angelwings609
ID: 10643827
It says:

C:\Documents and Settings\Scott\NTUSER.dat
The process cannot access the file because it is being used by another process.
0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 10643828
It should not happen... at least, I've never seen this happen.
0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 10643837
Ah... of course... my bad.
Do you have another account on your computer to login with and check that again?
0
 

Author Comment

by:Angelwings609
ID: 10643838
So is it normal for it to say proccess cannot be accessed?
0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 10643842
Yep, the profile is in use.
0
 

Author Comment

by:Angelwings609
ID: 10643848
Tried as other user, but it said same thing....
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 

Author Comment

by:Angelwings609
ID: 10643853
I have the other logged off and just tried again, still says same thing.
0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 10643858
That I find strange... could be just that this is normal with winXP (I don't use it)

Please try to enable viewing hidden files and folders and systemfiles.
See if you see another one showing up.
0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 10643879
Ah, just thinking, this could be pretty normal for windows XP as you can switch users very easy.
Just guessing, but maybe winXP caches the profiles for the fast user switching functionality...
0
 

Author Comment

by:Angelwings609
ID: 10643897
I did that and two more showed up:

ntuser.log
ntuser.inf

But, after opening My Computer to go and do as you requested I noticed something else different... I only have 2 user accounts on this, 'Scott & Angie' and 'Deanna' (my daughter) however now there is also a folder in Documents and Settings called 'Deanna.HOME-EVANS'  which, again was not there earlier before all my probs started.
0
 

Author Comment

by:Angelwings609
ID: 10643900
So how did this user folder, just suddenly appear?
0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 10643910
Is that Deanna.HOME-EVANS a little lighter in color than the other ones?
If so, it's just the default profile and it will hide again when you set to hide hidden files and folders again.

NTuser.log is just a log file
I don't know what NTuser.inf is. A .inf file is normally used to setup a driver for a hardware device. It could be you have some software on your computer that created this file.

Personally I think you're perfectly safe.
0
 

Author Comment

by:Angelwings609
ID: 10643921
Just for the heck of it I went to 'User Acounts' there is only "Scott & Angie" and "Deanna" aswell as the regular "Guest". So, why the heck is "Deanna.HOME-EVANS" in Documents and Settings.....

Ahhhh, guess it can't hurt anything. But very strange....

I have to go for now, but will be back later today (baby shower)

Bye 4 now,

Angie
0
 

Author Comment

by:Angelwings609
ID: 10643927
Nope it didn't hide again it's still there... I rechecked the hide hidden folders box, still there in same colour as the others.
0
 
LVL 32

Accepted Solution

by:
Luc Franken earned 250 total points
ID: 10643933
Yep, now I'm 100% sure that "Deanna.HOME-EVANS" is just the default profile.
Which means that at the moment you create another user account, the settings of this default one will be copied to the new profile.

Good luck with the baby.

LucF
0
 

Author Comment

by:Angelwings609
ID: 10675105
Thank you very nuch for all your help, srry I took so log to get back to you...

;)Angie
0
 

Author Comment

by:Angelwings609
ID: 10675116
lol took so long I meant..... Sleepy...
0
 

Author Comment

by:Angelwings609
ID: 10675125
Omg, and I meant thank you very much, not nuch.  You'd never guess English is my first and only language... Srry for the typos.

;) G'nite.
0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 10675195
No problem Angie.

Glad to help ;-)

LucF
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

Issue: Unstable cursor in Windows XP and Windows runs extremely slow in that any click will bring up the Hour glass (sometimes for several seconds before giving you what you want) . Troubleshooting Process and the FINAL FIX: This issue see…
If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now