Windows 10: Strange file at AppData/Roaming

Hi everyone,


After cleaning my PC, I found a strange file located at C:\Users\facu_\AppData\Roaming\Stuartis. It has an .exe file named Ruch3idim.exe 340 MB. I can't find something related to "Stuartis" or "Ruch3idim" on Google it seems very strange for me. I scanned it with Windows Defender and MalwareBytes, but they didn't detect something.


I had some bad experiences trying to remove files/services/register entries that not seemed important, but inducing Windows to crash.


Should I remove it?

:)

 

AppData Roaming Files on single use computer

To research further about this concern, kindly answer the following questions for clarification:

• About the roaming function, do you wish to prevent Windows 10 from storing files on the AppData>Roaming folder?
• If not, do you wish to delete some files on the AppData folder?

Kindly specify which kind of configuration you wish to perform. Meanwhile, we suggest that you check this

thread and see if it helps.

Kindly get back to us so we can assist you further.

 

can not find script file C:users\user\appdata\roaming\system.vbs

My pc always show the popup, can not find script file C:users\user\appdata\roaming\system.vbs, Please suggest a solution.

 

Suspected infection in AppData\Roaming\.exe

Original title: AppData\Roaming\.exe

Can someone tell me what this is?

• C:\Users\knenina\AppData\Roaming\522001c91a0ba0c96d004d78\522001c91a0ba0c96d004d78.exe

My Antivirus said Application.Downloader.AAB (Suspected infection) but then it also says

"Cannot open file" error occurred: The "Cannot open file" error message means that the scanner was unable to open a file and that this file was not scanned. You can normally ignore this error message as there are many reasons for this message
that do not imply a security threat, including:

• The file was a system file. System files are protected by the operation system by design. You can ignore this message in this case.
  
• You do not have permission to read the file. To scan the file, log in with a user account with sufficient permissions (for example the computer's administrator account) and rescan.
  
• The file was in use by an application when the scan was performed. To scan this file, close all applications and rescan.

Said I have to manually remove i'm unsure how to do that exactly.

Or is this a valid file? This just appeared today.