How do you clean or blow-away/reset an infected Guest account (still want a Guest account at the end)?

I have an XP MCE system with 'Guest' account enabled (no password) plus two other user accounts with Admin level privileges.

The owner had purchased 2 MBAM licenses but forgot to install it on this one PC (he remembered to do it for his own PC but not for this one - the kids PC - UGH!)

So this system gets infected in both kids user accounts and they also have people using the Guest account and it gets messy there also.

Problem/Question is .... that after infection, people used the 'Guest' account on the system and the malware reared it's head in that account as well and tried all it's sorted various evil works.

I've visited the Guest account before attempting to clean the system and seen this myself.

I was fortunate to get MBAM installed on one of the Admin level accounts and scan/clean short and then full. I then went into the second admin account and ran MBAM in there as well. Subsequent scans in both the Admin level user account come back clean.

I have not *revisited* the Guest account for perhaps some irrational fear that I may reinfect the system again just by going into it. I'm also not sure if MBAM can be effectively used in the Guest account and so I'm seeking advice.

What about the Guest Account however????? How do I 'clean' it or deal with it?

Is MBAM an option or are the limited user aspects of the Guest account going to cause limitations of what MBAM can do?

There is nothing of interest or value with this Guest account - so if I knew how to essentially blow it away and regenerate it fresh I could consider that. The owner does like using/having the guest account for friends, etc. to use so getting rid of any sort of guest account would not be desirable. But perhaps there's some options for either advising me that MBAM will work fine on the Guest account or advice for how to essentially "reset" it or "replace" it with another one (and the old one gone, disabled or even hidden.)

Thanks! I look forward to ideas and advice.

- David

Hi and welcome to the forum!

Please read and follow ALL the instructions below. Thanks!


Scan and post logs - read note at bottom in green
If you're having Malware related issues with your computer that you're unable to resolve.

1. Please read and follow the instructions provided here: I'm infected - What do I do now?
2. If needed please post your logs in a NEW topic here:Malware Removal - HijackThis Logs
3. When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested.


* Please do not post any logs in the General forum. We do not work on any logs posted in the General forum.
* Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you.
* Using these other tools often makes the cleanup task more difficult and time consuming.
* If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved.
* Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback.
* There are often many others that require assistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review


* NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can