F buttons

My son has struck again.

Sunday, While trying to bypass the administrator password which I had just set up, my son restarted the computer, pushed one of the "f" buttons (he says F10), eventually realized things weren't going to well and says he exited without saving changes. However, My documents are all gone. I have a computer that starts without a password -- with the HP_administrator (and my picture) but the screen is the HP screen and it acts like a new computer -- programs don't seem to be completely installed (all the stuff that came with the computer). But, there are also my programs that I added later -- but they cannot be accessed.

As I search around -- in the advance,system restore settings user profile it says I have two administrator accounts. Any possibility that I might be able to switch administrator and have my setting and documents?

I have a HP Pavilion a12249, with XP.

I really don't know that much, so go easy on me.

Thanks.

 

you can try this
goto start control panel click on user accounts click change the way a user logs on uncheck use the welcome screen , when you reboot you should have the option to type in the a user, type your old user name in and password, your old account should come up

 

That didn't work. HP_Administrator doesn't work with a password now. I can enter without a password.

I did find my documents in my computer/c drive/doc & setting. There are three administrator files.
Mine: HP_Administrator (documents are titled: Administrator's documents)

The one that is actually running:HP_Administrator.YOUR-BZ7FB1C401 (all the stuff after the . doesn't show when I boot up, but I know this is the one running because I saved a word document to it and it shows)

And then another one entitle: Administrator

I also found out that I have a virus, which showed when I tried to connect to the internet -- fake virus protection.

I haven't been using that computer to send any of this info, now or before.

I have backed up my stuff to an external drive. If worse comes to worse, the only thing I think I'll lose is the outlook email stuff.

Any other suggestions?

 

Ok you have several issues, lets start at the logon
1. you now have2 admin accounts and by what you are telling me you should be able to log onto them both.
The fisrt account logon info is hp_administrator and the second account is administrator.
Try logging on to those individually, one at a time and see if you can get into them.
2. you need to back up you pst files from your email account since you believe you are in danger of loosing them.
3. is a critical one you have malware and from it sound like it is Vondu or Smitfraud. the easiest way to rid yourself of them is to go to This link and do the Read and Run Me First

 

Buggabear was replying as I was typing so follow his suggestion first before changing back to the Welcome screen below:

It is odd that your old account name doesn't work. Go ahead and change back to Use the Welcome Screen in Control Panel>Users.

Try Start>Run>type in control userpasswords2 hit OK. In the window that opens you should have an Administrator account an ASPNET account and whatever accounts you have created. Besides the two listed above how many do you have? Two? One HP_Administrator and one HP_Administartator..B1C401?

I would tick the box "Users must use a name and password" and reboot. See what accounts are listed on the welcome screen.

 

IN answer to buggabear (and Sach2) recommendations:

3. I am trying to run the scans with new downloads. Even though the anti virus programs are on the computer they don't run, or in the case of SUS it wouldn't get updates. And, I am running these scans are my supposed account (HP_administrator), which is really the HP_administrator.YOUR-BZ7FB1C401. Which so far isn't finding anything. Although CC found and removed six cookies from the HP_administrator.YOUR-BZ7FB1C401. I'll do all the scans. I have downloaded the programs to a flashdrive on a different computer and then dealing with it.

1. In normal mode I only can access the fake account. In safe mode, I can switch between the two administrators, but neither are mine. Neither uses or will accept a password. And it doesn't have my documents (doesn't show) or programs running.

When I try typing in the accounts as sach2 suggested, it doesn't work either, I don't have the exact wording (sorry) but basically, except for the fake administrator's account, it can't find anything. Also, it does not accept a password.

2. How do you back up pst files? In the fake account I have outlook, but it isn't configured (as if it is a new computer). Should I do that? I don't expect to find my email information there anyway.

 

I'm wondering if your original HP_Administrator account was deleted. When an account is deleted XP leaves the user folder in C:\Documents and Settings\username which it appears is the case here. Whether your son deleted and then tried to recreate the account or the account became corrupted I can't say.

You said you tried All Programs>Accessories>System Tools>System Restore [you would have picked a date before the changes]? And had no success? I don't want you to try it now but I want to know if you have tried it. If you haven't tried it--If you start the program do you have a choice of dates before the problem happened (available dates would be in bold)? Just exit the program without doing the restore.

********

Did you do this:

**********

I'm thinking that if there is no way to restore the original HP_Administrator account and this one has no personal settings it may be advisable to create a new account with administrator privileges and get rid of the one with the odd name.

 

When I go to the system restore I only have the option of March 15 (the day this all happened), 16 and 17. It doesn't let me go back to a different month.

**************

When I try run>control userpasswords2 nothing happens

When I try run>controluserpasswords2 I get the message below.

When I try run>userpasswords2 the message says that windows cannot find 'userpassword2'. Make sure you typed the named correctly, etc...

**************

When I right click: start menu find under administrator folder I find:

Administrator's documents (these are not mine)

Default User

HP Administrator (which is mine with all my documents, etc.)

HP Administrator.YOUR-B27FB1C401 (which is what actually is opened and is the only thing I can open under normal conditions. But when you open it, it shows, with my picture, as HP Administrator)