I never knew about event logs until very recently and now I can't stop looking.
Still dealing with connectivity issues, so it makes sense to play detective, but there is one particular thing which freaks me out.
A while ago, I noticed in Firefox properties that there is an entity there that is very mysterious.
Now it turns out that this S 1-5-8 etc. is a Microsoft Security Check that is CONSTANTLY logging in and out, and I don't like it one bit.
First of all, it doesn't have authorization to access my computer, I checked on that. It only accesses through Firefox. (No, I haven't contacted Mozilla about it, but I will.) When I discovered it a couple of months ago it had authority to read, write, etc. which I immediately relieved it of. But it still has "special" powers, whatever that means.
But that's not all. There are also event logs from System, id# 1530, like this:
Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 7/8/2018 5:28:49 PM
Event ID: 1530
Task Category: None
Windows detected your registry file is still in use by other applications
or services. The file will be unloaded now. The applications or services
that hold your registry file may not function properly afterwards.
1 user registry handles leaked from \Registry\User\S-1-5-21-
Process 944 (\Device
\HarddiskVolume2\Windows\System32\svchost.exe) has opened key
<Provider Name="Microsoft-Windows-User Profiles Service"
<TimeCreated SystemTime="2018-07-08T21:28:49.133184500Z" />
<Execution ProcessID="944" ThreadID="7764" />
<Security UserID="S-1-5-18" />
<Data Name="Detail">1 user registry handles leaked from \Registry
opened key \REGISTRY\USER\S-1-5-21-1382324992-2956011349-
Am I overreacting only is this as freaky as it looks?
In the advanced firewall settings I don't have Remote Access allowed at all. So I don't know how this is even possible, but there you have it. It happens, and I wish I knew what it means and how to stop it, if necessary.
Any ideas? I would appreciate your input on this.
(I would upload an image of "S" from Firefox Properties, but I don't see where I could do that.)