I was putting some processes to sleep using process explorer and noticed that on the security tab. their was an account listed as unknown, when I clicked on that account it said > Advanced security settings for msmsgs.exe account unknown S- 123456789. This account under permissions has only 2 check marks > Terminate and Set information are the only ones checked. The unknown account has a check mark which is listed as Special Permissions. I have messenger disabled on this system and file sharing or it should be and I don't use any p2p software.

When I go to > Control Userpasswords2, this account does not show up, User Accounts > Admin. > ME, which should be the only accounts on this system since I'm the only one who uses this computer.

Would this unknown account be from Microsoft?

Why when I click on preview post button, I get a V - Bulletin message telling me to login > when I click the back button my post is their and it says "Logged in as Winnipeg"?

The only account that Microsoft adds is with the .NET Framework.

This is ASPNET and is a User account.

That being said you might want to run a HijackThis log by our Pros over in their section.

There is a known Msmsgs.exe(agobot-nl Worm) but I myself do not know what affects it creates.

Thanks Jephree

Just posted the hijack log, hope it's not this worm.