I am having a similar problem as WolfManBN25 in case ID#: 22761624.
I have several people who terminal serve onto a server. They do this several times a day - and not necessarily from the same computer. Sometimes it can be a thin client and other times it is a desktop PC. I was receiving Event ID 1517 all over the place. Also, sometimes when the person tries to log back in all they receive is a blue screen - no login. I would have to go into the Terminal Services Manager and reset their account.
So, anyway, I have installed UPHClean. It got rid of the 1517 errors and now I recieve the UPHClean Info 1401 that look like this:
The following handles in user profile hive DOMAIN\username (S-1-5-21-153723871-2679035580-3975090593-1611) have been remapped because they Rtvscan.exe (2384)
HKCU\Software\Symantec\Symantec Endpoint Protection\AV\Custom Tasks (0xb8c)
Problem is - I still have users getting locked up w/ the blank screen and no login, so I still have to reset the account.
Any ideas how to get this to stop?