Those groups are legit...I have the same ones but instead of Owner-PC, my computer name is different
S-1-15-2-1 part of a security identifier (SID)
used by Windows...see Well-Known SID Structures
which are a group of SIDs that identify generic groups and generic users...Their values remain constant across all operating systems.
When using Internet Explorer, the browser will run an extra instance of iexplorer.exe
for each opened tab as part of the Loosely-Coupled IE
and Automatic Crash Recovery
features by design. ACR stores information about a browsing session on the hard disk so that in the event of a browser crash, hang, or other unexpected shutdown, it will allow you to resume the last browsing session. If using multiple tabs, ARC allows recovery of all opened tabs in case of a browser failure. Essentially that allows Internet Explorer to prevent itself from closing when a web site in one tab crashes. In order to this, Internet Explorer will open a new process for the main window and another process with any opened tab
. As such, it is not unusual to find multiple instances of iexplore.exe running in Task Manager
. More information about ACR and LCIE can be found on the IEBlog: IE8 and Reliability
. One drawback of this feature is that ACR is known to utilize high memory resources
...especially when the more open tabs there are.
Usually when a computer is infected with malware there will be indications (signs of infection
) that something is wrong.