okay, so i see what happens, when i post here, it shows up in all the vista
forums, so i guess it was me, sorry but no other info found on this file.

Hi, Newbie.

These Microsoft Communities (also known as discussion groups and maybe some
other names) actually are Usenet newsgroups hosted on the Microsoft public
news servers.  Microsoft makes the same posts available in Communities so
that they can be accessed by Internet Explorer and other browsers in a
web-based Graphical User Interface (GUI).  Most of us who frequent these
groups and try to help out prefer to access the newsgroups through a
newsreader, such as Outlook Express (in WinXP and prior) or Windows Mail (in
Vista) or Windows Live Mail (which runs in both WinXP and Vista).  Newbies
often find the GUI easier to use for their one-shot questions.  But all too
often, they forget how to come back to find the responses to their
questions.  I'm glad to see that you have quoted our prior messages; too
many newbies never figure that out.

Many Usenet news servers (like those provided free by most ISPs) simply
"slurp" messages from these Microsoft public news servers and relay them to
their own customers, often resulting in messages that are delayed, out of
sequence - or just lost.  And few other servers carry all 2000+ of these
newsgroups.

Many forums (also called discussion groups, web pages and other names) also
"slurp" messages from these Microsoft public newsgroups and post them on
their own forums, often with no clue as to the origin of the posts and
giving no credit to Microsoft for providing the initial newsgroup.  I've
often seen my own posts in a forum where I've never been and never even knew
existed!  That apparently is what happened to you, too.  You posted here,
and at least 6 other forums (vistax64.com, wugnet.com, techarena.com,
pcreview.co.uk, boardreader.com, vistaheads.com - and others) have picked up
your question and my reply.  We're FAMOUS!  :^{

The good part of this multiplication of our posts is that now MILLIONS of
online computer users, including at least THOUSANDS of true experts, have
read your question.  If even ONE of them had an answer, you would have
probably heard by now.

My question from before was:

Actually, you SHOULD have a file in your User folder with a
similar-but-not-identical name:
C:\Users\<newbie>\ntuser.dat.LOG1

And there should be a similar .LOG2, plus a half-dozen or more ntuser.dat*
files that you won't normally see because they are Hidden, System files.
These are legitimate parts of Vista and, if you have multiple Users, each of
them should have a set of these files.

The only part that might be a concern is the ".COPY.TMP" part of the
filename.  This may have been created by the malware - or by your cleanup
efforts.  It may be benign.

Try this:  Rename that file - maybe just add ".bad" to the end of the
existing extension.  If Vista doesn't complain in a week or two, then delete
that file.

And from now on, PRACTICE SAFE HEX!  In spite of all the wild stories we
hear, malware almost never arrives without being invited by the computer
user!  Remember that any free offer online always carries the risk of
delivering MORE than you bargained for - and you probably will not like the
"MORE".  :>(

RC