NTUSER.DAT file


Tagged with:
65 replies [Last post]
auversoi
I am luvin TheGuG from sea wa
Member for 6 years 46 weeks
GuG-Points: 44

Does anyone know what the NTUSER.DAT file is? There is a NTUSER.DAT file in my documents and settings under a file with my ex boyfriends name. Of course he used to have files on this computer 1 year ago but the file has a modified date of last week.

Thanks

 

TAGs: NTUSER, NTUSER.DAT, Windows, XP, File

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.
dgilluly
dgilluly's picture
I am the boy your mother warned you about from Belmont, NY
Member for 1 year 46 weeks
GuG-Points: 66
Re: NTUSER.DAT file

 NTUSER.DAT is a registry hive. You should find one in EVERY user folder on your computer(C:\Documents and Settings\*username* 2000/XP, or C:\Users\*username* Vista/7/8) The registry hive is a database of all of the user's application settings and is nothing to be worried about. From time to time Windows will access a user's NTUSER.DAT file to make a backup, even if the account hasn't been logged in to.

If you press the Windows key + letterR (brings up run dialog) and type in "regedit" and press enter. The HKEY_CURRENT_USER folder on the left is all data loaded from your user account's NTUSER.DAT. http://www.pcruneasy.com/tutorials/vista/regedit/hkey_current_user.jpg


_________________________________

Associates in Occupational Studies in Computer and Network Technology
CompTIA A+ and Network+ certs, 2nd place 2010 NY state Skills USA
Owner, Gilluly IT Services

Ivy (not verified)
Re: NTUSER.DAT file
Why does my ntuser.dat file say the size is 3,072 kb and my ntuser.dat.LOG2 say 0 kb? Is this normal or do I have a virus? Never saw these folders before on my computer. Why won't they open and I do have my settings set in "don't show hidden files, folders and drives". Your advise would be greatly appreciated.
dgilluly
dgilluly's picture
I am the boy your mother warned you about from Belmont, NY
Member for 1 year 46 weeks
GuG-Points: 66
Re: NTUSER.DAT file

Both are protected system files and shouldn't be deleted. They store the HKEY_CURRENT_USER registry hive, which is a database that stores your user application settings.

photo of member named
Hubby
insert witty description here
I am a Grown Up Geek
Re: NTUSER.DAT file

you cant open them because they are system files and not meant to be (easily/automatically) opened. The sizes are because NTUSER.dat is big and the ntuser.dat.LOG2 files is empty.
THere is nothing that you have described that suggests a virus, but if you are concerned you should make sure that your antivirus is up to date and run a scan.

CLI Ninja (not verified)
Re: NTUSER.DAT file
If anyone from the community could give me some understanding please? In my Videos file i now see a icon image (DVD X) as a file name,ntuser.dat, which 1 it wasn't seen their before, and 2 system files and such i have all as hidden files. if anyone has some knowledge about this please advise. i dare not to remove it, but also dont understand how it become this way, if malware has created or attached to it? Running win7sp1, also DVD X is a player not a movie. Thank You in advance J
dgilluly
dgilluly's picture
I am the boy your mother warned you about from Belmont, NY
Member for 1 year 46 weeks
GuG-Points: 66
Re: NTUSER.DAT file

 There could be one of a few issues associated with this one.

  First, the pointer to your profile image may have somehow got changed to your video folder (I've seen it get changed to C:\Users\username\Appdata\Local\Temp before). One way to know for sure is if you remember a time where the computer reset all of its settings. (desktop arrangement, settings defaulted in certain applications, etc.) It's probably best to have a certified technician look into the registry and change the profile image setting.

  Second, could be a virus/rootkit. Sometimes viruses mimic names of system files to try to fool technicians. Try running a scan with Malwarebytes(free version, update first) to see if it picks anything up. If not you may have to hire a tech to disinfect it.

  Third, a combination of first and second, a virus/rootkit that changed the profile image path.

photo of member named
Hubby
insert witty description here
I am a Grown Up Geek
Re: NTUSER.DAT file

NTUSER.DAT is a required file for Windows to function, but it does not belong in your video files folder and it should not have DVD X associated with it - so.. something is wrong.
AFTER you backup anything important on the computer, see if you can move that file into the recycle bin. If it is the 'real' NTUSER.DAT file, it will be locked (in use) and you wont be able to move it into the recycle bin. If it does go into the recycle bin, reboot and make sure everything is ok - everything is fine..

If NTUSER.DAT is locked and you cant delete it then it could be your 'real' NTUSER.DAT file, but something has had to go seriously sideways for it to end up in your videos folder. It could also be something more sinister.

Anonymous Visitor (not verified)
Re: NTUSER.DAT file
If I delete a User profile will it delete that DAT File also? Do I need that Dat File if I use "MY" profile. I just want my comp. to load faster at start up without waiting for it to load profiles that I don't use.
photo of member named
Hubby
insert witty description here
I am a Grown Up Geek
NTUSER.DAT

Each Windows profile has it's own NTUSER.DAT file, and it only loads when that profile is loaded. If you are are using profile X, and you deleted the entire profile why, NTUSER.DAT for profile why will be removed and it will not affect your profile X.
Wont speed up your computer any though. For that you can do things like uninstalling programs/services that always run at start-up/in the background - you usually (but not always) see these as icons down in your 'tray' near your clock at the lower-right.

Anonymous Visitor (not verified)
Re: NTUSER.DAT file
What do I do since I deleted my Ntuser 2 or 3 times? I deleted them a LONG time ago and suddenly I can't seem to see anything on my Facebook account- pictures, videos, or even my cover picture!!! What do I do???
photo of member named
Hubby
insert witty description here
I am a Grown Up Geek
Re: NTUSER.DAT file

NTUSER.DAT would have nothing to do with anything missing on your Facebook.
If you deleted NTUSER.DAT if you were able to log back on to your PC it would be recreated... But I don't think you would be able to (easily) log back on to the PC if you properly deleted it.

Anonymous Visitor (not verified)
Re: NTUSER.DAT file
Rename it to NTUSER.MAN and it will be harmless,the system need it so don't delete it.
Anonymous Visitor (not verified)
Re: NTUSER.DAT file
When my 23 year old cousin, who hacked for years, moved in with me, I started having problems with Recovery. I went in and deleted it. It's under Public in Network Sharing. I have had nothing but problems with my computer when I 1st noticed that file. I deleted it and am waiting to see if my computer is going to start working better! I will let EV1 know if it has improved my pc's performance!
Steven Koelsche (not verified)
Re: NTUSER.DAT file
Never ever delete the ntuser.dat file EVER, it is the registry entrys for Local User under your registry, it has all your application setting and keys for that perticular user. If you delete these file you will have issue opening many pieces of software and have data missing from applications such as the outlook setting will disappear. NEVER EVER delete this file
Confused XP Mom (not verified)
Re: NTUSER.DAT file
If I have Windows XP Home on my computer, should there be NTUSER files running and controlling everything that happens on my computer? It appears that the NTUSER is logging on and starting and stopping services. Do I have a hacker or is this normal?
photo of member named
Hubby
insert witty description here
I am a Grown Up Geek
Re: NTUSER.DAT file

NTUSER.DAT (which this discussion is about) is a file, so it is not possible for it to log in or start/stop anything. If you are seeing something different, please create a new thread with the details and we can help figure it out.

Anonymous Visitor (not verified)
Re: NTUSER.DAT file
i have a ntuser.dat and ntuser.dat.log and recycle and i deleted those files so do my system will face any problem?
Anonymous Visitor (not verified)
Re: NTUSER.DAT file
far as i can tell it tracks what your doing and send commands to read emails where you searched. Now theres two different ones mine says ntuser.dat this is the one im talking about the other they wont even let me open .the first one i delete no problems . make sure you get the right one .if opens it properly is yhe one; stroll down you can tell you if they are tracking you .if they are you should be able to delete it .a lot of codes there but in between itshows what its doing .good luck
I See Stupid People (not verified)
Re: NTUSER.DAT file
Anonymous Visitor wrote:

far as i can tell it tracks what your doing and send commands to read emails where you searched.

Not a single bit of this is true. The rest doesn't even make sense.

Anonymous Visitor (not verified)
Re: NTUSER.DAT file
No just go ahead and run cmd as admin and type format C: , i mean you like deleting files right?
pwd (not verified)
60+ ntuser.dat files
Hi. I am wondering if anyone can enlighten me? I have 60+ ntuser.dat files, though there have only ever been 2 user profiles set up for use of this computer. Why would I have 60+ files? Is this a problem and does it indicate someone accessing my computer via the internet? Any advice will be very much appreciated. Thanks
photo of member named
Hubby
insert witty description here
I am a Grown Up Geek
Re: 60+ ntuser.dat files

Where are the NTUSER.DAT files located?

Sylvester (not verified)
Re: 60+ ntuser.dat files
the NTUSER is located in the users profiles.
Jerry (not verified)
Re: NTUSER.DAT file
Maybe you can help me too with my XP, NTUSER.DAT and similar problem. Under "Document and Setting" I have a folder called "Jerry" with all of my personal files like Word and Excell. There are three files (NTUSER.DAT, ntuser.dat.LOG, and ntuser.ini) and the 1st two prevent me from backing up my folder called "Jerry" because both the NTUSER and ntuser.dat.log file give me a message that it (the file) is being used by another program. BTW, they all indicate that they were modified today. I would very much like to backup my folder...what am I doing wrong? Thank you very much for any suggestions....
photo of member named
Hubby
insert witty description here
I am a Grown Up Geek
Re: NTUSER.DAT file

read thru all the other comments already posted and you will see that you can't modify or back up the NTUSER.DAT files while you are logged-on because Windows uses those files to store your registry and other information.

Either exclude those files from your backup, or configure your backup software to run while you are not logged in if it has that capability.

Freedom rings (not verified)
Re: changing my IP address
This comment has been moved here: changing my IP address
freedom rings (not verified)
Re: changing my IP address
Thank You for the response I will let you know how things turm out. Well they should be just fine as long as I follow directions like you always say. Smile Thank You!
Freedom rings (not verified)
Re: NTUSER.DAT file
This comment has been moved here: get my husband off my computer
Jerry (not verified)
Re: NTUSER.DAT file
I need to be logged in, but can I move them (NTUSER.DAT etc.) to another folder, or move all my stuff out of the folder and just leasve those files in the "old" folder. Sorry to be a pest...newbie.
photo of member named
Hubby
insert witty description here
I am a Grown Up Geek
Re: NTUSER.DAT file

you can't move your USER.DAT files, so you would have to move everything else.. are you sure your backup software does not have an option to exclude specific files, or filenames by wildcard?

Post new comment

The content of this field is kept private and will not be shown publicly.
To prevent automated spam submissions leave this field empty.