Windows 10: Strange account named S-1-5-21-xxxx-1001 in security properties

Im my apps Properties There is a strange account in the security tab with the name S-1-5-21-xxxx-1001, When i look at the users on my computer it does not show up. I am also not able to change any of its permissons is this some kind of virus?

:)

 

S-1-5-21-119163587-1573839180-90999006-1001

I give up, what is it - and what's a "security ownership panel?"

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FYI...

Well-known security identifiers in Windows operating systems:

Security identifiers | Microsoft Learn

Unknown User in security settings s-1-5-21 ... 1001

Unknown User in security settings s-1-5-21 ... 1001 - Can someone please review? - Virus, Trojan, Spyware, and Malware Removal Help

Account Unknown (S-1-5-21-130066488-785734366-1129733132-1000)??

https://www.tenforums.com/user-acco...21-130066488-785734366-1129733132-1000-a.html

How to understand the anatomy of security identifiers

How to understand the anatomy of security identifiers | TechRepublic

 

How did UID get into my User's property/security list?

If I right click a file or folder in `C:\Users\[my user]` and select Security tab, then under Group or user names I find:

• SYSTEM
• S-1-5-21-2111192990-xxxxxxxxxx-xxxxxxxxxx-xxxx
• Administrators ([machine]\Administrators)

In another post
unknown user account named "s-1-5-21-3872869465-169670-6742-130931603-1001"

This is described by a use as: "The number you mention is called a "SID" (Security IDentifier). Each account has a SID. In the access permission list it becomes visible after you delete the account it is tied to."

How does this appear?

Is this my logged in User account?

Other than a few basic apps, I use this computer mostly to remote to work:

- Logmein

Then I have a few Python development related apps:

- Anaconda/Miniconda

- WSL/Debian

- Apache

 

HKU S-1-5-18 TO S-1-5-21-1377943898-483413162-3496510108-1001 AND S-1-5-21-1377943898-483413162-3496510108-1001 Virus

Hiii,

I have some how downloaded this virus HKU S-1-5-18

HKU S-1-5-19,

HKU S-1-5-20

S-1-5-21-1377943898-483413162-3496510108-1001 S-1-5-21-1377943898-483413162-3496510108-1001 _classes

I have got installed with so many viruses ,and get affected by them,

so inorder to remove them I reset my pc by removing apps and keeping only files and folders.

by doing this my windows got installed again on resetting the pc.

but this HKU s-1-5-18 to s-1-5-21 shown above virus was still in the Regedit (register keys)

I am trying to delete this folder in regedit but it is saying that unable to delete the specified values and also showing I don't have administrator permissions

After installing this viruses my Windows Defender Check Apps and Files in App & browse Control is off and greyed out

showing in defender this is managed by your administrator ,but I am the administrator



again in properties security setting this s-1-521 user account is automatically created and gained administrator permissions

so please,help me with this how to fix them and to check are there any other viruses

I tried malware bytes and emsisoft but they are unable to clean them

so please help me ,to how to get rid of this and permenantely delete them