1.    02 Jul 2016 #1
    Join Date : Jul 2016
    Posts : 5
    Win10

    C:\Windows10Upgrade - Is it malware?


    Hello,

    So today I booted my Win10 machine to find that it wanted to upgrade because it didn't have the latest security? Something like that...

    I have to say, something about the UI looked...'off'...I think the MS logo was slightly blurred also which didn't help me believe it more than before.

    Either way, I looked at the properties of the new 'Windows 10 Upgrade Assistant' executable that was on my desktop. The exe was located in: C:\Windows10Upgrade, it doesn't look quite right to me, and the fact that I could actually send this to the recycling bin with no issue also didn't seem right.

    Just curious to understand why Windows 10 wanted to upgrade to windows 10 and why it is using that directory. VirusTotal scored a 0 and I really can't figure out if it's malware or not.

    (Looked through some config files and it appeared legitimate. But can't be sure).

    Any ideas?

    Thanks.
      My ComputerSystem Spec
  2.    02 Jul 2016 #2
    Join Date : Jun 2015
    Posts : 1,929
    Windows 3.1 to Windows 10

    It would seem funny to me that a Windows 10 OS would want to run a Windows 10 Upgrade Assistant...

    The New Windows 10 Upgrade is due out Aug 2...

    But if running windows 10 now, then an upgrade assistant seems funny..
      My ComputerSystem Spec
  3.    02 Jul 2016 #3
    Join Date : Jul 2016
    Posts : 5
    Win10
    Thread Starter

    Quote Originally Posted by Kyhi View Post
    It would seem funny to me that a Windows 10 OS would want to run a Windows 10 Upgrade Assistant...

    The New Windows 10 Upgrade is due out Aug 2...

    But if running windows 10 now, then an upgrade assistant seems funny..
    That's what I was thinking :/

    Again, looking through the files they appear to be legit, obviously that's what malware would go through, but the logging system seems just a bit too in detail to be malware...

    Not sure, either way it's in my recycling bin, hoping to see if it's remade. If it does re-appear I'll delete it again and setup a program to try and see what's making the folder if I can.


    ​Just thought of something, could be because I transferred files from my old-pc running win7 with the upgrader installed, to this new one... Another weird thing is that it only seemed to appear today. Infact; the creation date is: 02 ‎July ‎2016, ‏‎12:23:34, so yea; today...
      My ComputerSystem Spec
  4.    02 Jul 2016 #4

    Have you run a full antivirus scan?

    Also could you post a screenshot showing the files in that folder.
      My ComputersSystem Spec
  5.    02 Jul 2016 #5
    Join Date : Jul 2016
    Posts : 5
    Win10
    Thread Starter

    Virus scans all returned nothing.

    Image attached of main folder in C:\

    Click image for larger version. 

Name:	win10upgradepossiblemalware.png 
Views:	20 
Size:	73.0 KB 
ID:	87923
      My ComputerSystem Spec
  6.    02 Jul 2016 #6
    Join Date : Jul 2015
    Posts : 196
    Win 7 8 and 10

    Bet the topic starter is still on 10240. I have seen this on a few computers as of late.
      My ComputerSystem Spec
  7.    02 Jul 2016 #7
    Join Date : Jul 2016
    Posts : 5
    Win10
    Thread Starter

    Quote Originally Posted by Porthos View Post
    Bet the topic starter is still on 10240. I have seen this on a few computers as of late.
    I am infact on that version of Win10, is there an issue with the update this time around or something?
      My ComputerSystem Spec
  8.    02 Jul 2016 #8
    Join Date : Jul 2015
    Posts : 196
    Win 7 8 and 10

    Quote Originally Posted by jakeb View Post
    I am infact on that version of Win10, is there an issue with the update this time around or something?
    Build wise you have been "out of date" since November. The computer I saw yesterday like this did not have enough disk space on the little 32 gig SSD (HP Stream).
      My ComputerSystem Spec
  9.    02 Jul 2016 #9
    Join Date : Jul 2016
    Posts : 5
    Win10
    Thread Starter

    Quote Originally Posted by Porthos View Post
    Build wise you have been "out of date" since November. The computer I saw yesterday like this did not have enough disk space on the little 32 gig SSD (HP Stream).
    Okay, thanks for letting me know; I am not low on space by any means though.
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
Solved Malware on start up
Hello Guys and gals :), its been a while since i have been here , i have unknowingly installed a piece of malware / spyware, i have tried all the known removal process, and still unsuccessful i do have a backup of the C:\ folder. under the c:\...
AntiVirus, Firewalls and System Security
Solved Browser Malware Etc
A while back I commented on browsers, namely firefox, adding malware to their product. I was told basically that this was impossible if I got it from source, which I always do. I meant to produce some visual evidence but a bad memory let time...
Browsers and Email
undefined.com malware
I have a desktop running windows 8.1 that has been bit by the undefined.com malware. I have tried every suggestion I could find on the internet. Several of the malware programs will remove it unit I reboot then it comes back. Something funny...
AntiVirus, Firewalls and System Security
Malware recovery
I have a windows 10 pc that was infected by malware, a full scan by windows defender deleted the malware however I still have new tabs spawning in chrome on virtually any action taken in chrome. I have reinstalled chrome to no avail. Other browsers...
AntiVirus, Firewalls and System Security
Malware or Virus?
I usually use downmagz.com to download magazines. Today, I went to there to get some mags and when I went to the download page I got a popup that said CableONE has blocked the website. Clicked OK and then a page came up with a blue screen and...
AntiVirus, Firewalls and System Security
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 10:25.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums