Windows 11 virus?

[bitfenix]

Hi

I'm running Windows 11 Home and have all latest windows updates

Found this in local disk properties - under security - group or user names.

Is account unknown safe?

David

 

[brendy]

It's usually a user account that you've deleted.

 

[andshrew]

I was going to say it's pretty unusual to have a specific account permission on the root of your drive, but I have the same thing. The full SID:

Account Unknown(S-1-15-3-65536-1888954469-739942743-1668119174-2468466756-4239452838-1296943325-355587736-700089176)

Results on Google suggest it is a security thing Windows is doing related to app containerisation, so a permission for giving particular applications restricted access into the filesystem.

What are these SIDs of the form S-1-15-3-xxx? - The Old New Thing

They are app capability SIDs.

devblogs.microsoft.com

 

[bitfenix]

I was going to say it's pretty unusual to have a specific account permission on the root of your drive, but I have the same thing. The full SID:

Account Unknown(S-1-15-3-65536-1888954469-739942743-1668119174-2468466756-4239452838-1296943325-355587736-700089176)

Results on Google suggest it is a security thing Windows is doing related to app containerisation, so a permission for giving particular applications restricted access into the filesystem.

What are these SIDs of the form S-1-15-3-xxx? - The Old New Thing

They are app capability SIDs.

devblogs.microsoft.com

Thanks for the reply thought maybe it was hacker or virus.

I've windows security up to date.