Re: Trojan or bugs?

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 04/30/04


Date: Thu, 29 Apr 2004 23:28:05 GMT

That would indicate that a user or group that one time had that right was deleted and
therefore the user/group name can no longer be resolved to friendly name. It does not
necessarily mean a compromise but if you are the only person that ever configured the
computer then you may want to give it a thorough checkout. It is not on the list of
well known sids. -- Steve

http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/Q243/3/30.ASP&NoWebContent=1

"crapit" <littlecramp@yahoo.com.sg> wrote in message
news:eKC5tadLEHA.3012@tk2msftngp13.phx.gbl...
> Browse through the local security settings and happen to saw this.
>
> From local polices -\ User Rights Assignment,
>
> Under policy column.
> Access this computer from this network,
>
> Under local Setting
> MISC, Administrators, Backup Operators, Power Users,
> Users, Everyone,
> *S-1-5-21-842925246-1801674531-72
> 5345543-1000
>
>
> What the crap is this user?
> ->>> *S-1-5-21-842925246-1801674531-72
> 5345543-1000
>
>