Account Unknown listed in Registry Editor's Permissions.


Joined
May 23, 2016
Messages
53
Reaction score
0
I've found a listing under the Right-Click > Permissions list of Security Accounts in the Registry editor.

It says 'Account Unknown' and lists an SID I don't recognise. It has 'Read'

This computer has been behaving very strangely lately and my gut instinct is it's hacked. The mouse cursor skips occasionally as if due to restricted-bandwidth ('lag').

Can anyone assist with resolving this issue and securing this computer?

Constructive answers only please.

Appreciated.
 
Ad

Advertisements

Trouble

Noob Whisperer
Moderator
Joined
Nov 19, 2013
Messages
12,327
Reaction score
1,981
Not sure this qualifies as "Constructive", but.....
I have just checked three physical machines
One running Windows 10 Pro, the current latest fully updated version 1809 and it has
Code:
Account Unknown(S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)
Another running Windows 10 Pro, the latest Insider Build of 19H1 18282.1000. IT also has the identical string in the Registry
The third running Windows 10 Home, again latest Version and Build. Same identical string. All three with "Read" permissions to most if not all root keys, so...

I don't know if this gives you any peace of mind or not but I'm reasonably certain that none of the above machines are hacked or compromised in any way and unless we've all got the same attacker, who is not clever enough to even alter the SID, I'm gonna go out on a limb and suggest that it might be a product of some mysterious Temp account that Microsoft uses to support some aspects of the installation, upgrade or update process.

Personally, I have no immediate concern or worry, but....
I may at some time in the future, see if it might be worth the time and effort to delete it.
 
Ad

Advertisements

Joined
Feb 3, 2017
Messages
151
Reaction score
33
I see the same, I usually remove them but on occasion this has caused problems with Windows so now I leave them.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top