Sorry if this is the wrong forum.

System: Windows XP Professional (Service Pack 2)

I stumbled across the User Profiles window (Control Panel > Performance and
Maintenance > System > Advanced; click User Profiles > Settings).

In the 'Name' column an 'Account Unknown' name was listed. I tried to delete
this (the "Delete" button was enabled) and this deleted all files from every
user. A 3rd party file recovery tool was needed to recover the data.

I am aware of a hotfix for Windows XP Home Edition
(http://support.microsoft.com/kb/312131)
but thought this may be new in Windows XP Professional. If its already
well-known, please ignore this comment.

Thanks

KB312131 would not apply to a WinXP SP2 or SP3 machine.

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjunction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachi...php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/


NoviceUser wrote:
> Sorry if this is the wrong forum.
>
> System: Windows XP Professional (Service Pack 2)
>
> I stumbled across the User Profiles window (Control Panel > Performance
> and
> Maintenance > System > Advanced; click User Profiles > Settings).
>
> In the 'Name' column an 'Account Unknown' name was listed. I tried to
> delete
> this (the "Delete" button was enabled) and this deleted all files from
> every
> user. A 3rd party file recovery tool was needed to recover the data.
>
> I am aware of a hotfix for Windows XP Home Edition
> (http://support.microsoft.com/kb/312131)
> but thought this may be new in Windows XP Professional. If its already
> well-known, please ignore this comment.
>
> Thanks

I love form email responses.









"PA Bear [MS MVP]" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> KB312131 would not apply to a WinXP SP2 or SP3 machine.
>
> Unexplained computer behavior may be caused by deceptive software
> http://support.microsoft.com/kb/827315
>
> Run a /thorough/ check for hijackware, including posting your hijackthis
> log to an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine2.blogspot.com/
> http://www.elephantboycomputers.com/...moving_Malware
>
> When all else fails, HijackThis v2.0.2
> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use
> (in conjunction with some other utilities). HijackThis will NOT fix
> anything on its own, but it will help you to both identify and remove any
> hijackware/spyware with assistance from an expert. **Post your log to
> http://spywarehammer.com/simplemachi...php?board=10.0,
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://aumha.net/viewforum.php?f=30, or another appropriate forum for
> review by an expert in such matters, not here.**
>
> If the procedures look too complex - and there is no shame in admitting
> this isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
>
> NoviceUser wrote:
>> Sorry if this is the wrong forum.
>>
>> System: Windows XP Professional (Service Pack 2)
>>
>> I stumbled across the User Profiles window (Control Panel > Performance
>> and
>> Maintenance > System > Advanced; click User Profiles > Settings).
>>
>> In the 'Name' column an 'Account Unknown' name was listed. I tried to
>> delete
>> this (the "Delete" button was enabled) and this deleted all files from
>> every
>> user. A 3rd party file recovery tool was needed to recover the data.
>>
>> I am aware of a hotfix for Windows XP Home Edition
>> (http://support.microsoft.com/kb/312131)
>> but thought this may be new in Windows XP Professional. If its already
>> well-known, please ignore this comment.
>>
>> Thanks
>

I will follow the links you have provided. Many thanks.

"PA Bear [MS MVP]" wrote:

> KB312131 would not apply to a WinXP SP2 or SP3 machine.
>
> Unexplained computer behavior may be caused by deceptive software
> http://support.microsoft.com/kb/827315
>
> Run a /thorough/ check for hijackware, including posting your hijackthis log
> to an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine2.blogspot.com/
> http://www.elephantboycomputers.com/...moving_Malware
>
> When all else fails, HijackThis v2.0.2
> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
> conjunction with some other utilities). HijackThis will NOT fix anything on
> its own, but it will help you to both identify and remove any
> hijackware/spyware with assistance from an expert. **Post your log to
> http://spywarehammer.com/simplemachi...php?board=10.0,
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
> by an expert in such matters, not here.**
>
> If the procedures look too complex - and there is no shame in admitting this
> isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
>
> NoviceUser wrote:
> > Sorry if this is the wrong forum.
> >
> > System: Windows XP Professional (Service Pack 2)
> >
> > I stumbled across the User Profiles window (Control Panel > Performance
> > and
> > Maintenance > System > Advanced; click User Profiles > Settings).
> >
> > In the 'Name' column an 'Account Unknown' name was listed. I tried to
> > delete
> > this (the "Delete" button was enabled) and this deleted all files from
> > every
> > user. A 3rd party file recovery tool was needed to recover the data.
> >
> > I am aware of a hotfix for Windows XP Home Edition
> > (http://support.microsoft.com/kb/312131)
> > but thought this may be new in Windows XP Professional. If its already
> > well-known, please ignore this comment.
> >
> > Thanks
>
>

Unsure if it would apply to a stand-alone system but wouldn't an unknown
account on a domain be related to the fact that the domain account was killed
off but was still left on the local system? Since the system can't match the
SID, it used the unknown account phrase.

"PA Bear [MS MVP]" wrote:

> KB312131 would not apply to a WinXP SP2 or SP3 machine.
>
> Unexplained computer behavior may be caused by deceptive software
> http://support.microsoft.com/kb/827315
>
> Run a /thorough/ check for hijackware, including posting your hijackthis log
> to an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine2.blogspot.com/
> http://www.elephantboycomputers.com/...moving_Malware
>
> When all else fails, HijackThis v2.0.2
> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
> conjunction with some other utilities). HijackThis will NOT fix anything on
> its own, but it will help you to both identify and remove any
> hijackware/spyware with assistance from an expert. **Post your log to
> http://spywarehammer.com/simplemachi...php?board=10.0,
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
> by an expert in such matters, not here.**
>
> If the procedures look too complex - and there is no shame in admitting this
> isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
>
> NoviceUser wrote:
> > Sorry if this is the wrong forum.
> >
> > System: Windows XP Professional (Service Pack 2)
> >
> > I stumbled across the User Profiles window (Control Panel > Performance
> > and
> > Maintenance > System > Advanced; click User Profiles > Settings).
> >
> > In the 'Name' column an 'Account Unknown' name was listed. I tried to
> > delete
> > this (the "Delete" button was enabled) and this deleted all files from
> > every
> > user. A 3rd party file recovery tool was needed to recover the data.
> >
> > I am aware of a hotfix for Windows XP Home Edition
> > (http://support.microsoft.com/kb/312131)
> > but thought this may be new in Windows XP Professional. If its already
> > well-known, please ignore this comment.
> >
> > Thanks
>
>