New
#11
okay, so I restored the suspicious file, and then ran windows defender, and it removed it, too.
this particular torrent -- Windows 10 Pro RTM 10240 x64 ISO - TankityTank -- is bundled with an activator, for people who need it for whatever reason. So I surmise that the suspicious file was added to the ISO to facilitate the activator.
does that make sense to anyone?
I usually have good experience with the bay, but the particular author of this torrent is not a known figure. I took it because it downloaded faster than the known figure's torrent, which everyone else was using.
okay, experience is a good teacher.
I rolled back to build 10166 for the meantime.