Windows 10: suspicious Windows.old file

Discus and support suspicious Windows.old file in Windows 10 Support to solve the problem; I have a custom built computer that has only had W10 on it. 2 weeks ago I couldn't get on the Internet and it took several techs to figure out why - it... Discussion in 'Windows 10 Support' started by cbrundage, Mar 21, 2016.

  1. cbrundage Win User

    suspicious Windows.old file

    I have a custom built computer that has only had W10 on it. 2 weeks ago I couldn't get on the Internet and it took several techs to figure out why - it was some kind of malware that didn't show up in any scans, put "Killer" in the systray and popped up a screen showing SoundBlaster. The tech didn't think either one was legitimate. Both were installed the day the computer went down and when they were removed, things seemed fine. I have had 2 BSODs since that said "Bad Pool Leader" and today I noticed I have a huge file in my C drive, "Windows.old", which was created that same day. Since I have never had an upgrade, I know this isn't a normal Windows file. Can I delete it without a problem?
    Thanks for any suggestions.

    cbrundage, Mar 21, 2016
  2. Monkey57 Win User

    Suspicious 2.6GB file in Windows.old

    Please see:

    "select Clean up system files" ->check the all the boxes

    There are instance when 'Disk Cleanup", does not remove the Windows.old completely, please post back if Windows.old still exists after running Disk Cleanup (Clean up system files). Please let me know the subfolders (if only a few) of the Windows.old folder
    (is the file in question in a subfolder?), after running the tool.

    Do you use OneDrive,
    , or something else to backup your data?

    ▓►Avoid a post. Backup your data.◄▓-{from the signature of Bruce Hagen(MS-MVP)}
    Monkey57, Mar 21, 2016
  3. Suspicious 2.6GB file in Windows.old

    Windows 10 Single Language (Build 15063.447)

    Acer Swift 5 (SF514-51-530G)
    NathanCheow, Mar 21, 2016
  4. hiphopper Win User

    suspicious Windows.old file

    Actually, Windows.old is created not just when you upgrade, but also with some large updates. For instance, the Windows 10 November update creates a Windows.OLD folder when it is installed.

    So depending on how long it has been since you let Windows Update install patches, this folder is probably normal. I would recommend running "disk cleaner" and selecting to remove the Old Windows Installs from the options. You may have to select the "Clean System files" button to get there.
    hiphopper, Mar 22, 2016
  5. EdTittel Win User
    Try using the Disk Cleanup utility, and after it makes its first pass over your boot/sys drive, tell it to "Clean up system files." Normally, this will get rid of Windows.old in a jiffy. If that fails to clean things up, let us know here and tell us how big the folder remains. If it's under 0.5MB it's probably nothing to worry about. Bigger, though, and things might get interesting.
    Good luck!
    EdTittel, Mar 22, 2016
  6. cbrundage Win User
    Thank you so much. I did run the "clean the system files" and it got rid of it - it was a huge file so now I have a lot more room. It was sort of unnerving not to really know what actually that malware was or what it did though.
    cbrundage, Mar 22, 2016
  7. EdTittel Win User
    Glad it worked for you. If you want to read about how I dealt with a remnant of Windows.old that the utility failed to cleanup, check out my blog post entitled "Temporary Files Cleanup: Build 1429" posted Monday, 3/21/2016. Essentially, I had to take ownership of the holdout directories, and then delete them manually, one at a time, working up from the bottom of that folder hierarchy.
    EdTittel, Mar 22, 2016
  8. cbrundage Win User

    suspicious Windows.old file

    Thanks so much - I'm going to look at that.
    cbrundage, Apr 4, 2018

suspicious Windows.old file

  1. suspicious Windows.old file - Similar Threads - suspicious old file

  2. suspicious apps

    in Windows 10 Software and Apps
    suspicious apps: a suspicious app shows up on my pc; looks like a virus
  3. Suspicious

    in AntiVirus, Firewalls and System Security
    Suspicious: Sometimes I feel that there is suspicious activity going on, there are some things in my computer files that I cant go into, (files that I didn't download) it asks for a password, but if I didn't put it on here, how am im going to know that password? There are some things...
  4. Suspicious entries in Hosts file

    in Windows 10 Network and Sharing
    Suspicious entries in Hosts file: Hi, i am here today because I have found some things that I believe are malware. They are in my hosts file. [ATTACH] I am sure that there is something wrong but is it safe to delete everything? Please get back to me...
  5. Suspicious Folder and Files

    in Windows 10 Network and Sharing
    Suspicious Folder and Files: Okay so I recently found this folder on my computer. I can delete it, however, it will just come back in 5 minutes. I try to search online for something about it, but there seems to be nothing. Antivirus doesn't seem to think it's a threat. I don't have much on this computer...
  6. suspicious file

    in Windows 10 BSOD Crashes and Debugging
    suspicious file: .usr_app_ncr.dat this file is located in c:/ user/documents should I delete it?
  7. Suspicious program

    in AntiVirus, Firewalls and System Security
    Suspicious program: Attempting to open a .png file in Windows 10. the list of possible apps appears with the "Open With" option but one of the programs has the name "%1" which seems like an illegal name to me. Could this be malicious software?...
  8. Suspicious startup

    in AntiVirus, Firewalls and System Security
    Suspicious startup: Hi, I just found out every time windows starts it opens a task manager. I also think I'm not using my laptops full potential. How can I check if there is any hidden miner on my laptop?...
  9. Super Suspicious Files

    in Windows 10 Network and Sharing
    Super Suspicious Files: Hello, I was taking a look through my task manager and found a process called "sedsvc" I went to the location, and I brought me to C:\Program Files\rempl, I found a bunch of other things in that folder like disktoast.exe, sedlauncher.exe, sedsvc.exe, osrrb.exe, etc. I'm...
  10. Suspicious or Not?

    in AntiVirus, Firewalls and System Security
    Suspicious or Not?: Received the following from L: "We recently received a request to recover your Microsoft account L: Unfortunately, our automated system has determined that the information you provided was not sufficient for us to validate...