[freestyle252]

Hi GTG

I noticed under Documents and Settings I have three administrators. I haven't the slightest idea how they got their or why so many . I was thinking it might cause a conflict when running different scans for adware, malware, trojans or viruses.

Should i be concerned? If so, how do i got about removing the other two Administrators?

The ones i have are:

Administrator
Administrator.(my name)
Administrator.(my name).000

Any insight on this would be appreciated.

[Advertisements]

How many times have you reloaded your Windows XP? each time, a new admin account is created.

[Mark D]

How many times have you reloaded your Windows XP? each time, a new admin account is created.

[freestyle252]

Only one time that I can recall, when i upgraded from Widows98 to Windows XP pro .

[Broni]

Go Start>Run, type in:
regedit
Click OK.

In Registry Editor, expand HKEY_USERS directory.
Look at folders starting with S-1-5-21.
If the last three numbers are 500 in all S-1-5-21 folders, then all your Admin accounts are safe, and legit.
Look at my screenshot below. It's from Vista, so last numbers are 1000, but yours should read 500.

[freestyle252]

Hello Broni thx for the reply


In both S-1-5-21 folders mines end with 1003 not 500.

One folder is 1003
Other folder is 1003_Classes

So does that mean they are not legit? And what do i do now?

[Broni]

Download, and run (by double clicking) SIDList.vbs from here: http://windowsxp.mvps.org/utils/
The results will open in Notepad.
Copy, and paste it back here.

[Broni]

Actually, I double checked, and "1003" value is safe, and legit.

[freestyle252]

I was thinking about this issue and I remember now that I use to have three computers on a network

Maybe that is why I have three administrators. Don't know why i didn't think of that before!

*************************************************************
Lists all the user accounts, their SIDs and Profile paths.
SIDList.vbs - Copyright © 2005-2006, Ramesh Srinivasan
WWW: http://windowsxp.mvps.org & http://www.winhelponline.com
*************************************************************

Username : Administrator
SID : S-1-5-21-839522115-1202660629-1708537768-500
Profile dir : C:\Documents and Settings\Administrator.RICKY.000

Username : Guest
SID : S-1-5-21-839522115-1202660629-1708537768-501
Profile dir :

Username : theguidrys
SID : S-1-5-21-839522115-1202660629-1708537768-1003
Profile dir : C:\Documents and Settings\theguidrys

*************************************************************

[Broni]

All looks normal:
SID.....500 - Administrator (default)
SID.....501 - Guest (default)
SID.....1003 - "theguidrys" user (you probably know, who it is)