I was called out to remove a trojan from a user's PC, Windows XP Pro Sp3, with a domain join to a Windows 2003 R2 SBS server. I removed the trojan with the bartpe boot disk and I logged back on as the user with the network cable disconnected, so in case other components of the trojan got left behind, it would not be able to contact the Internet to phone home to its buddies and download more malware. With this offline logon, WIndows XP generated a new profile, and subsequent logons with the cable reconnected it now signs in with the new profile. For now I simply copied all of the user's personal documents, favorites, and email settings to the new profile, and all is well. However for future reference is there a way to force the workstation to use the original profile, assuming it was not damaged by the trojan? Is the user profile "copy to" in system properties a safe bet?