Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I ran the Combofix program to check for malware and it deleted ntuser.dat from C:\programdata. Is the file necessary in that folder?

share|improve this question
no, don't delete. – Sathya Nov 15 '12 at 7:52
Combofix saved a backup of ntuser.dat. If I copy that back to C:\programdata, will that solve the problem? – user701510 Nov 15 '12 at 8:10
@Sathya: Sounds like it's too late... – martineau Nov 15 '12 at 11:14
Ntuser.dat in c:\programdata ? That's not a standard location of this type of file. Ntuser.dat contains user registry. So it should be fine withou it. I would try to use antivirus check before delete, but... – week Nov 15 '12 at 12:23
up vote 4 down vote accepted

ntuser.dat is the HKEY_CURRENT_USER hive for the registry.

It should be under your user folder like C:\Users\Your User Name. I thought the file deleted from C:\programdata\ is a malware or at least not for user registry.

Keep the backup and reboot. if everything works fine, don't recover the backup file.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .