Windows 10: What is the s-1–5-21-...-1001. Is it normal or it that a virus ?

submitted by /u/TheRealFlash_Caith
[link] [comments]

:)

 

HKU S-1-5-18 TO S-1-5-21-1377943898-483413162-3496510108-1001 AND S-1-5-21-1377943898-483413162-3496510108-1001 Virus

Hiii,

I have some how downloaded this virus HKU S-1-5-18

HKU S-1-5-19,

HKU S-1-5-20

S-1-5-21-1377943898-483413162-3496510108-1001 S-1-5-21-1377943898-483413162-3496510108-1001 _classes

I have got installed with so many viruses ,and get affected by them,

so inorder to remove them I reset my pc by removing apps and keeping only files and folders.

by doing this my windows got installed again on resetting the pc.

but this HKU s-1-5-18 to s-1-5-21 shown above virus was still in the Regedit (register keys)

I am trying to delete this folder in regedit but it is saying that unable to delete the specified values and also showing I don't have administrator permissions

After installing this viruses my Windows Defender Check Apps and Files in App & browse Control is off and greyed out

showing in defender this is managed by your administrator ,but I am the administrator



again in properties security setting this s-1-521 user account is automatically created and gained administrator permissions

so please,help me with this how to fix them and to check are there any other viruses

I tried malware bytes and emsisoft but they are unable to clean them

so please help me ,to how to get rid of this and permenantely delete them

 

S-1-5-21-119163587-1573839180-90999006-1001

I give up, what is it - and what's a "security ownership panel?"

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FYI...

Well-known security identifiers in Windows operating systems:

https://support.microsoft.com/en-us...rity-identifiers-in-windows-operating-systems

Unknown User in security settings s-1-5-21 ... 1001

https://www.bleepingcomputer.com/fo...ings-s-1-5-21-1001-can-someone-please-review/

Account Unknown (S-1-5-21-130066488-785734366-1129733132-1000)??

Account Unknown (S-1-5-21-130066488-785734366-1129733132-1000)?? - Windows 10 Help Forums

How to understand the anatomy of security identifiers

How to understand the anatomy of security identifiers

 

S-1-5-21 Virus/Malware

Hello everyone. I have a dire issue and If I can't solve this, I need to purchase a new SSD storage drive.
I downloaded a program a while ago on my Windows 10 Pro from an unverified website and it came with a keygen. I ran the keygen and the worst virus/malware got unleashed on my system.

The first symptom that I noticed was the fact that my Chrome browser logged out of my Google account. I logged back in and after closing the browser and reopening it, I was logged out again. At first I thought it was a Google settings issue so I checked
every single settings on my account but it didn't go away.

So I suspected that It could be a virus and at this point I checked my windows machine users and there i found the discrepancy. Beside the normal users that are there ({MY NAME} user, "Administrators" and and "SYSTEM", there was two additional users named
"Administrator", "Interactive" and "S-1-5-21" followed by a long string of numbers. So I deleted them and went to Regedit, searched "S-1-5-21" and deleted everything related to it.

But the chrome issue was still there, so I decided to delete the entire hard drive and start from the scratch. I did that and out a new copy of the Windows on it but to my absolute shock, the same accounts were there when windows came up for the first time
and the Chrome is still not keeping me logged-in.

Please help me, otherwise I'd have to purchase a new SSD drive.