suspicious Windows.old file


  1. cbrundage
    Posts : 3
    W10
       New #1

    suspicious Windows.old file


    I have a custom built computer that has only had W10 on it. 2 weeks ago I couldn't get on the Internet and it took several techs to figure out why - it was some kind of malware that didn't show up in any scans, put "Killer" in the systray and popped up a screen showing SoundBlaster. The tech didn't think either one was legitimate. Both were installed the day the computer went down and when they were removed, things seemed fine. I have had 2 BSODs since that said "Bad Pool Leader" and today I noticed I have a huge file in my C drive, "Windows.old", which was created that same day. Since I have never had an upgrade, I know this isn't a normal Windows file. Can I delete it without a problem?
    Thanks for any suggestions.
      My Computer
    Quote Quote

  3. hiphopper
    Posts : 92
    Windows 10
       New #2

    Actually, Windows.old is created not just when you upgrade, but also with some large updates. For instance, the Windows 10 November update creates a Windows.OLD folder when it is installed.

    So depending on how long it has been since you let Windows Update install patches, this folder is probably normal. I would recommend running "disk cleaner" and selecting to remove the Old Windows Installs from the options. You may have to select the "Clean System files" button to get there.
      My Computer
    Quote Quote

  4. EdTittel
    Posts : 4,224
    Windows 10
       New #3

    Try using the Disk Cleanup utility, and after it makes its first pass over your boot/sys drive, tell it to "Clean up system files." Normally, this will get rid of Windows.old in a jiffy. If that fails to clean things up, let us know here and tell us how big the folder remains. If it's under 0.5MB it's probably nothing to worry about. Bigger, though, and things might get interesting.
    Good luck!
    --Ed--
      My Computers
    Quote Quote

  6. cbrundage
    Posts : 3
    W10
    Thread Starter
       New #4

    Thank you so much. I did run the "clean the system files" and it got rid of it - it was a huge file so now I have a lot more room. It was sort of unnerving not to really know what actually that malware was or what it did though.
      My Computer
    Quote Quote

  7. EdTittel
    Posts : 4,224
    Windows 10
       New #5

    Glad it worked for you. If you want to read about how I dealt with a remnant of Windows.old that the utility failed to cleanup, check out my blog post entitled "Temporary Files Cleanup: Build 1429" posted Monday, 3/21/2016. Essentially, I had to take ownership of the holdout directories, and then delete them manually, one at a time, working up from the bottom of that folder hierarchy.
    HTH,
    --Ed--
      My Computers
    Quote Quote

  8. cbrundage
    Posts : 3
    W10
    Thread Starter
       New #6

    Thanks so much - I'm going to look at that.
      My Computer
    Quote Quote

 

  Related Discussions
How to Turn On or Off Windows Defender Block Suspicious Behaviors in Windows 10 Starting with Windows 10 build 17704, you can enable a new protection setting, Block suspicious behaviors, which brings the Windows Defender Exploit Guard attack...
Suspicious or Not?
in AntiVirus, Firewalls and System Security

Received the following from deleted upon advice. Thanks "We recently received a request to recover your Microsoft account **REMOVED**. Unfortunately, our automated system has determined that the information you provided was not sufficient for us...
Very suspicious update popups on Windows 10
in AntiVirus, Firewalls and System Security

I have been getting a strange popup for update without any update about what it's about. It also want's to install Yahoo search It has happened few times so far and I am unable to figure out which program is it related to. I used process...
Suspicious account/group found on Windows
in User Accounts and Family Safety

I found something that caught my eye earlier. It appears as though an account has been on my computer, and I was not aware of it. It seems to be deleted according to the red x on the icon, and when I checked under accounts, I couldn't find it. I did...
Google chrome blocking file-downloads it deems as suspicious tried downloading irfanview from the irfanview website, but chrome blocks it. is there a way of getting round this, a registry hack perhaps thanks Google the ' internet Police...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 11:02.
Find Us




Windows 10 Forums