Account Unknown (S-1-5-32-547)

I recently discovered that I could no longer add or delete files and folders \All Users\Documents folder, even though I'd done so many times months ago. In fact, I couldn't even access the folder for viewing if I turned sharing off on it. My account is listed as the computer administrator in the control panel, so I suspected foul play. I went into safe mode and reclaimed ownership rights to the folder and while I was in there, I noticed an account called "Account Unknown (3-1-5-32-547) ". Does anybody know what this could be and if it might have anything to do with the change in permissions on my "Shared Documents" folder?

TIA


Mark

 

Possible the following occured.
The Owner Account Is Displayed As "Account Unknown "

 

Thanks. I followed the link in your message and read about how that account gets there, but is it something that needs to be removed and if so, how? Also, I have a fresh HJT log if you'd like to scan it, since I'm still baffled by the change in permissions on that folder.

Mark

 

Hi, Mark.

I'm sorry. I don't know how to answer your question but it appears (from the link Dennis provided) that you should obtain the latest service pack (which is Service Pack 2).

What service pack are you currently running?

If you are already running SP2, then I'll defer to others more experienced than me for advice on how to proceed.

EDIT: I don't know if it would be advisable to install SP2 if you already are running SP2. It's probably a good idea to wait for advice from someone else before proceeding with that idea.

EDIT #2: If you upgrade your Windows XP to Service Pack 2 and install all other critical updates that have been released since the SP2 release date, that might fix your issue. Microsoft directs us to use Windows Update for upgrading a single computer to SP2.

If you want a network SP2 install package (266 MB), you can download it via this link:
Windows XP Service Pack 2 Network Installation Package for IT Professionals and Developers

This network package is also recommended for slipstreaming to a bootable SP2 CD in case you ever want to go that route (preparation for starting over with a fresh install).
Instructions: Slipstreaming Windows XP Service Pack 2 and Create Bootable CD

 

Thanks mailman.

I am running SP2 and have all the critical updates (via automatic update) and, since I'm never one to completely trust anything automatic, I check periodically to see if there are any updates (critical or otherwise) that I feel like I should have. Since this is not a major issue for me and it only shows up in safe mode, I probably won't spend a whole lot of energy trying to clean up after Dell's system installation crew. I was mostly worried that it was either a sign of a malware intrusion, or an exploitable path for intrusion. Thanks again for your efforts on my behalf.

Mark