Click here to get back home

Unknown User Account or Spyware?

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Unknown User Account or Spyware? John 09-11-2005
Posted by John on September 11, 2005, 12:14 pm
Please log in for more thread options
Hello,

First off, I am using Win2003 server on a Sony VIO notebook.
I was trying to delete some photo file from my photos folder and I
discovered that I did not have permissions to do so. I saw that an
"Unknown Account" had permissions and that my account the owner of the
foler/files did not. I just wanted to know more about this Unknown
User Account? I looked in system/user accounts section but no unknown
accounts show up there. I have discovered that at least one "Unknown
Account" shows up under the permissions for at least a number of
different files/folders.
How can I block this Unknown account from being created?
In the past I have had a lot of Spyware that I have cleaned off. At
least 99%. I also just got Symantec Antivirus Corporate edition 10.0
and it did not find any viruses, etc. Among using the other standard
free applications.
The other mystery is that my internet connection will work fine for
awhile and then all of a suden stop working. At that moment I can ping
the router just fine but I can not ping a DNS server, etc. on the
internet. I have checked with another PC connected to the dlink router
and at the same time that PC works fine. I also updated the Dlink
router vto the latest firmware 2.70.

Any help will be appreciated,

John



Posted by Roger Abell [MVP] on September 11, 2005, 3:44 pm
Please log in for more thread options
Unknown account usually means there is a SID that no longer makes
sense, either that account was deleted, it is from a prior install, or a
dual boot install, or from a domain once but no longer joined.
> Hello,
>
> First off, I am using Win2003 server on a Sony VIO notebook.
> I was trying to delete some photo file from my photos folder and I
> discovered that I did not have permissions to do so. I saw that an
> "Unknown Account" had permissions and that my account the owner of the
> foler/files did not. I just wanted to know more about this Unknown
> User Account? I looked in system/user accounts section but no unknown
> accounts show up there. I have discovered that at least one "Unknown
> Account" shows up under the permissions for at least a number of
> different files/folders.
> How can I block this Unknown account from being created?
> In the past I have had a lot of Spyware that I have cleaned off. At
> least 99%. I also just got Symantec Antivirus Corporate edition 10.0
> and it did not find any viruses, etc. Among using the other standard
> free applications.
> The other mystery is that my internet connection will work fine for
> awhile and then all of a suden stop working. At that moment I can ping
> the router just fine but I can not ping a DNS server, etc. on the
> internet. I have checked with another PC connected to the dlink router
> and at the same time that PC works fine. I also updated the Dlink
> router vto the latest firmware 2.70.
>
> Any help will be appreciated,
>
> John
>




Posted by Steven L Umbach on September 11, 2005, 9:23 pm
Please log in for more thread options
Roger explained about the unknown account. As far as internet connection you
could run the command ipconfig /all on both of your computers to see if they
are configured the same for preferred dns servers. Possibly the other
computer has another dns server listed in its preferred dns server list.
Keep in mind however that Windows 2003 can be configured as its own dns
server if dns is installed on it and could be required to if it is a domain
controller. It could still resolve internet host names using either by
forwarding to your ISP dns servers or using "root hints". The command
nslookup is also helpful in checking for proper dns name resolution. The
link below contains info on using dns in Windows 2000/2003 server. ---
Steve

http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B291382

> Hello,
>
> First off, I am using Win2003 server on a Sony VIO notebook.
> I was trying to delete some photo file from my photos folder and I
> discovered that I did not have permissions to do so. I saw that an
> "Unknown Account" had permissions and that my account the owner of the
> foler/files did not. I just wanted to know more about this Unknown
> User Account? I looked in system/user accounts section but no unknown
> accounts show up there. I have discovered that at least one "Unknown
> Account" shows up under the permissions for at least a number of
> different files/folders.
> How can I block this Unknown account from being created?
> In the past I have had a lot of Spyware that I have cleaned off. At
> least 99%. I also just got Symantec Antivirus Corporate edition 10.0
> and it did not find any viruses, etc. Among using the other standard
> free applications.
> The other mystery is that my internet connection will work fine for
> awhile and then all of a suden stop working. At that moment I can ping
> the router just fine but I can not ping a DNS server, etc. on the
> internet. I have checked with another PC connected to the dlink router
> and at the same time that PC works fine. I also updated the Dlink
> router vto the latest firmware 2.70.
>
> Any help will be appreciated,
>
> John
>




Posted by John on September 12, 2005, 2:47 pm
Please log in for more thread options
Thanks,

I do have DNS installed. I added the DNS for my ISP in the forwarding
section of DNS. I already have the ISP DNS addresses in IP properties
and I thought that was enough for this Server/PC. I'll see if this
fixes the problem.

John



Similar ThreadsPosted
unknown user name or bad password? July 14, 2005, 12:16 pm
User Account Created - 624 And User Account Enabled - 626 for Hel October 13, 2005, 1:56 pm
Spyware,Malware scanner June 15, 2005, 9:33 pm
how to use the user account and the computers account to ... March 9, 2007, 10:38 am
AD/SPYWARE protection package for a windows 2003 server. August 30, 2005, 12:43 am
Black Holing Spyware Sites by HOSTS Lists September 3, 2006, 3:37 pm
Unknown Publisher for *.lnk? October 7, 2005, 11:46 pm
Unknown Security Event December 27, 2006, 9:08 am
EFS Unknown Error 0000177c May 5, 2007, 6:39 pm
NT4 user account recovery June 3, 2005, 6:29 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap