Two unknown user accounts showing in the security tab

badspell68

New member
Member
VIP
Local time
5:51 AM
Messages
231
Location
PA
I have two unknown user accounts showing in the security tab. They do not exist under "user accounts" in control panel. I have been unable to delete them and thought they might be part of Comodo firewall or Avast antivirus?

I'm not familiar with how to navigate to the security tab other then right clicking on a file...is there another way? I recently updated both their rights to deny everything in the hopes that might prevent any malicious behavior?
 

Attachments

  • permissions.JPG
    permissions.JPG
    33.3 KB · Views: 52
  • 2.JPG
    2.JPG
    38.2 KB · Views: 42

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
Hi Jeff,

how many accounts are in use? This is how my Laptop C; looks.

RR.jpg

Remember your image is from Groundhog Day.
 

My Computer My Computer

At a glance

Win7 H.Prem. 32bit+SP1
Computer Manufacturer/Model Number
Look in my Signature.
OS
Win7 H.Prem. 32bit+SP1
Account Unknown comes from previous installations or other installations of Windows. Or from accounts that have existed at one point and no longer. Judging from the SID points to the former.
 

My Computer My Computer

At a glance

Windows 10 Pro (x64)Intel Core i7-3930K (3.2GHz - 4.5GHz)4x Samsung 4GB PC3-12800 DDR3 (16GB 1600MHz)Nvidia Geforce GTX 690
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Alienware Aurora ALX R4
OS
Windows 10 Pro (x64)
CPU
Intel Core i7-3930K (3.2GHz - 4.5GHz)
Motherboard
Alienware Aurora-R4 x79
Memory
4x Samsung 4GB PC3-12800 DDR3 (16GB 1600MHz)
Graphics Card(s)
Nvidia Geforce GTX 690
Sound Card
SteelSeries Siberia Elite
Monitor(s) Displays
Dell UltraSharp U3011
Screen Resolution
2560x1600
Hard Drives
Samsung 850 Pro 256 GB, Seagate 1TB Desktop Hybrid HDD, 2x Western Digital 4TB Green HDD
PSU
875W Some Dell PSU <.<
Case
Alienware Aurora ALX
Cooling
Custom Liquid Cooling (EK CPU & GPU blocks) dual EK 480RAD
Keyboard
Logitech G710+ Mechanical
Mouse
Logitech G700s
Internet Speed
Verizon Fios (50 mbps average)
Other Info
Server: Intel NUC D54250WYK: i5-4250U, 16GB, 256 GB mSATA, Windows Server 2012 R2
Account Unknown comes from previous installations or other installations of Windows. Or from accounts that have existed at one point and no longer. Judging from the SID points to the former.
Having looked at Jeff's image 1, it looks like its from something that he installed.
 

My Computer My Computer

At a glance

Win7 H.Prem. 32bit+SP1
Computer Manufacturer/Model Number
Look in my Signature.
OS
Win7 H.Prem. 32bit+SP1
I have a thread with the same prob....I have a good screenshot.

Roderunner.... Don't look at the properties of the laptop. Look at the properties of the system/OS itself.
 

My Computer My Computer

At a glance

Microsoft Windows 10 Home Build 15036Intel(R) Core(TM) i7-860 @ 2.80GHz4.00 GBNVIDIA GeForce GTX 750
Computer type
PC/Desktop
Computer Manufacturer/Model Number
iBuyPower NZXT
OS
Microsoft Windows 10 Home Build 15036
CPU
Intel(R) Core(TM) i7-860 @ 2.80GHz
Motherboard
Gigabyte Technology Co., Ltd. P55-UD3L
Memory
4.00 GB
Graphics Card(s)
NVIDIA GeForce GTX 750
Sound Card
(1) Line 6 UX2 (2) Realtek High Definition Audio
Monitor(s) Displays
23" acer
Screen Resolution
1920 x 1080 x 32 bits (4294967296 colors) @ 60 Hz
Hard Drives
(1) WDC WD5000AAKS-00D2B0 ATA Device (2) Seagate FreeAgent Go 250G USB Device
Cooling
Corsair H75 liquid cooler (Very easy to install, actually)
Internet Speed
60M cable modem-->Linksys E1200-->1Gbps net card
Browser
Chrome
Other Info
This is probably the longest I've ever had a Windows machine run without having to restore it to scratch. I'm used to restoring to "factory" about every 2 yrs. I've run with Win7 since new in 2009 and only recently (Nov, '14) restored to clean up the machine from all my 'xperimenting. LOL!! I may never need another machine.

Upgraded to 10 when it was still free, then installed 2017 update.
Roderunner.... Don't look at the properties of the laptop. Look at the properties of the system/OS itself.
What do you think C: drive on my laptop is then :devil:
 

My Computer My Computer

At a glance

Win7 H.Prem. 32bit+SP1
Computer Manufacturer/Model Number
Look in my Signature.
OS
Win7 H.Prem. 32bit+SP1
The only account that should be in use is one admin account, the Jeff account, that is visible in the Control Panel "User Accounts". Should I and can I delete the two unknown accounts?
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7

My Computer My Computer

At a glance

Microsoft Windows 10 Home Build 15036Intel(R) Core(TM) i7-860 @ 2.80GHz4.00 GBNVIDIA GeForce GTX 750
Computer type
PC/Desktop
Computer Manufacturer/Model Number
iBuyPower NZXT
OS
Microsoft Windows 10 Home Build 15036
CPU
Intel(R) Core(TM) i7-860 @ 2.80GHz
Motherboard
Gigabyte Technology Co., Ltd. P55-UD3L
Memory
4.00 GB
Graphics Card(s)
NVIDIA GeForce GTX 750
Sound Card
(1) Line 6 UX2 (2) Realtek High Definition Audio
Monitor(s) Displays
23" acer
Screen Resolution
1920 x 1080 x 32 bits (4294967296 colors) @ 60 Hz
Hard Drives
(1) WDC WD5000AAKS-00D2B0 ATA Device (2) Seagate FreeAgent Go 250G USB Device
Cooling
Corsair H75 liquid cooler (Very easy to install, actually)
Internet Speed
60M cable modem-->Linksys E1200-->1Gbps net card
Browser
Chrome
Other Info
This is probably the longest I've ever had a Windows machine run without having to restore it to scratch. I'm used to restoring to "factory" about every 2 yrs. I've run with Win7 since new in 2009 and only recently (Nov, '14) restored to clean up the machine from all my 'xperimenting. LOL!! I may never need another machine.

Upgraded to 10 when it was still free, then installed 2017 update.

My Computer My Computer

At a glance

Win7 H.Prem. 32bit+SP1
Computer Manufacturer/Model Number
Look in my Signature.
OS
Win7 H.Prem. 32bit+SP1
The only account that should be in use is one admin account, the Jeff account, that is visible in the Control Panel "User Accounts". Should I and can I delete the two unknown accounts?
These two unknown accounts are possible only for that file you used, and should be left alone.

Capture.JPG

Try another one.
 

My Computer My Computer

At a glance

Win7 H.Prem. 32bit+SP1
Computer Manufacturer/Model Number
Look in my Signature.
OS
Win7 H.Prem. 32bit+SP1

My Computer My Computer

At a glance

Microsoft Windows 10 Home Build 15036Intel(R) Core(TM) i7-860 @ 2.80GHz4.00 GBNVIDIA GeForce GTX 750
Computer type
PC/Desktop
Computer Manufacturer/Model Number
iBuyPower NZXT
OS
Microsoft Windows 10 Home Build 15036
CPU
Intel(R) Core(TM) i7-860 @ 2.80GHz
Motherboard
Gigabyte Technology Co., Ltd. P55-UD3L
Memory
4.00 GB
Graphics Card(s)
NVIDIA GeForce GTX 750
Sound Card
(1) Line 6 UX2 (2) Realtek High Definition Audio
Monitor(s) Displays
23" acer
Screen Resolution
1920 x 1080 x 32 bits (4294967296 colors) @ 60 Hz
Hard Drives
(1) WDC WD5000AAKS-00D2B0 ATA Device (2) Seagate FreeAgent Go 250G USB Device
Cooling
Corsair H75 liquid cooler (Very easy to install, actually)
Internet Speed
60M cable modem-->Linksys E1200-->1Gbps net card
Browser
Chrome
Other Info
This is probably the longest I've ever had a Windows machine run without having to restore it to scratch. I'm used to restoring to "factory" about every 2 yrs. I've run with Win7 since new in 2009 and only recently (Nov, '14) restored to clean up the machine from all my 'xperimenting. LOL!! I may never need another machine.

Upgraded to 10 when it was still free, then installed 2017 update.
I have two unknown user accounts showing in the security tab. They do not exist under "user accounts" in control panel. I have been unable to delete them and thought they might be part of Comodo firewall or Avast antivirus?

I'm not familiar with how to navigate to the security tab other then right clicking on a file...is there another way? I recently updated both their rights to deny everything in the hopes that might prevent any malicious behavior?
I see SID S-1-5-21-xxxxxxx
Can you post whole SID so xxxxxx as well

Go into registry (regedit) and have a look at key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
expand it. and post the S-1-5-21 sids you see. Make screenshot
 

My Computer My Computer

At a glance

Microsoft Windows 7 Home Premium 64-bits 7601...Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz4,00 GBATI Mobility Radeon HD 5400 Series
Computer type
Laptop
Computer Manufacturer/Model Number
ACER ASPIRE 5742G
OS
Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
CPU
Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz
Motherboard
Acer Aspire 5742G
Memory
4,00 GB
Graphics Card(s)
ATI Mobility Radeon HD 5400 Series
Sound Card
(1) AMD High Definition Audio Device (2) Realtek High Defi
Screen Resolution
1366 x 768 x 32 bits (4294967296 colors) @ 60 Hz
Hard Drives
WDC WD5000BEVT-22ZAT0
Yes, it does seem to be there for a lot of files, but not all. Some files have "trustedinstaller" & "CREATOR OWNER". Will there always be a wide range of user accounts?
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
I have two unknown user accounts showing in the security tab. They do not exist under "user accounts" in control panel. I have been unable to delete them and thought they might be part of Comodo firewall or Avast antivirus?

I'm not familiar with how to navigate to the security tab other then right clicking on a file...is there another way? I recently updated both their rights to deny everything in the hopes that might prevent any malicious behavior?
Go in explorer to c:\users and rightclick on folder Jef. Change its security so delete both security items there!! They are UNKNOWN so useless!
 

My Computer My Computer

At a glance

Microsoft Windows 7 Home Premium 64-bits 7601...Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz4,00 GBATI Mobility Radeon HD 5400 Series
Computer type
Laptop
Computer Manufacturer/Model Number
ACER ASPIRE 5742G
OS
Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
CPU
Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz
Motherboard
Acer Aspire 5742G
Memory
4,00 GB
Graphics Card(s)
ATI Mobility Radeon HD 5400 Series
Sound Card
(1) AMD High Definition Audio Device (2) Realtek High Defi
Screen Resolution
1366 x 768 x 32 bits (4294967296 colors) @ 60 Hz
Hard Drives
WDC WD5000BEVT-22ZAT0
... They are UNKNOWN so useless!

Everytime I read words like that, I cringe. Until you KNOW the source, I wouldn't assume ANYTHING is useless.
 

My Computer My Computer

At a glance

Microsoft Windows 10 Home Build 15036Intel(R) Core(TM) i7-860 @ 2.80GHz4.00 GBNVIDIA GeForce GTX 750
Computer type
PC/Desktop
Computer Manufacturer/Model Number
iBuyPower NZXT
OS
Microsoft Windows 10 Home Build 15036
CPU
Intel(R) Core(TM) i7-860 @ 2.80GHz
Motherboard
Gigabyte Technology Co., Ltd. P55-UD3L
Memory
4.00 GB
Graphics Card(s)
NVIDIA GeForce GTX 750
Sound Card
(1) Line 6 UX2 (2) Realtek High Definition Audio
Monitor(s) Displays
23" acer
Screen Resolution
1920 x 1080 x 32 bits (4294967296 colors) @ 60 Hz
Hard Drives
(1) WDC WD5000AAKS-00D2B0 ATA Device (2) Seagate FreeAgent Go 250G USB Device
Cooling
Corsair H75 liquid cooler (Very easy to install, actually)
Internet Speed
60M cable modem-->Linksys E1200-->1Gbps net card
Browser
Chrome
Other Info
This is probably the longest I've ever had a Windows machine run without having to restore it to scratch. I'm used to restoring to "factory" about every 2 yrs. I've run with Win7 since new in 2009 and only recently (Nov, '14) restored to clean up the machine from all my 'xperimenting. LOL!! I may never need another machine.

Upgraded to 10 when it was still free, then installed 2017 update.
... They are UNKNOWN so useless!

Everytime I read words like that, I cringe. Until you KNOW the source, I wouldn't assume ANYTHING is useless.
They are security items on C:\Users\Jeff only!! and inhereted by files and folders. Probably from windows mediaplayer sharing (dlna) or old homegroup stuff. As long as system, administrators and Jef himself have full access, I don't see the problem.

But to be honest... you're right with your statement
 

My Computer My Computer

At a glance

Microsoft Windows 7 Home Premium 64-bits 7601...Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz4,00 GBATI Mobility Radeon HD 5400 Series
Computer type
Laptop
Computer Manufacturer/Model Number
ACER ASPIRE 5742G
OS
Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
CPU
Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz
Motherboard
Acer Aspire 5742G
Memory
4,00 GB
Graphics Card(s)
ATI Mobility Radeon HD 5400 Series
Sound Card
(1) AMD High Definition Audio Device (2) Realtek High Defi
Screen Resolution
1366 x 768 x 32 bits (4294967296 colors) @ 60 Hz
Hard Drives
WDC WD5000BEVT-22ZAT0
Back
Top