I've noticed that a lot of posts in this thread appear to have the following general substance:
Hi, I'm a computer user with NO formal education in InfoSec, but I DEFINITELY know what I am talking about! I have read SEVERAL blogs and forum posts about Windows security, which qualifies me as a SECURITY EXPERT. These "unknown" SIDs are UNQUESTIONABLY either a 1337 h4x0r breaking into my computer, or M$ spying on me; there's NO POSSIBLE WAY they could be legitimate components of an incredibly complex operating system that are necessary for the OS to function properly. I'm so certain of this that I did not need to do ANY research on this specific SID to see if it could be, for example, a known Capability SID.
So I just removed it from the ACL, completely ignoring any warning messages that may have come up in the process. (Who reads those warnings anyway? They are just LIES from M$ to cover up their BLATANT spying activities!)
But ever since then, a certain component of Windows hasn't been working right. This is PROOF that M$ has crippled my PC in retaliation for me putting a stop to their OBVIOUS spyware. It's definitely NOT an indication that I broke something by removing that SID from the ACL. I'm an EXPERT, remember?
smh
This post is not directed at anyone in particular. If you are offended by the content of this post, consider the possibility that the reason you take offense is that you realize that it describes you, and consider what that actually means.