[SOLVED] S-1-5-18 weighs 16GB

[MarkMan47]

This folder is located in $RECYCLE.BIN.
Here is an image with all the info about the folder.
Is it safe to delete?
Where did it come from and what are the files in there? it has some explorer xrml digital license file and others. Can't show them all since there is like 214 000 of em.

 

[Colif]

that looks like a win 10 installer. ISO, or installer folders.

you should be able to delete it.
.wim - windos image file
.vdm = defender file
ttc = fonts
ocx - ActiveX files

I don't have an installer handy to confirm contents are an installer but 16/4gb

 

[MarkMan47]

that looks like a win 10 installer. ISO, or installer folders.

you should be able to delete it.
.wim - windos image file
.vdm = defender file
ttc = fonts
ocx - ActiveX files

I don't have an installer handy to confirm contents are an installer but 16/4gb

Okay. Also, malware bytes said some files there are viruses. Files like: $RYREZH4.lnk / $R7I8XMH.EXE / $RV5AFF9.EXE

 

[Colif]

its odd, S 1 5 18 - SID for local system - https://docs.microsoft.com/en-us/tr...rver/identity/security-identifiers-in-windows

SECURITY_LOCAL_SYSTEM_RID S-1-5-18 - A special account used by the operating system.

Each SID subfolder of $Recycle.bin is the actual recycle bin of the respective user. Deleting any such folder won't be a problem in itself, because the operating system will just re-create it the next time the user logs on.

MS says you should be able to delete them - https://social.technet.microsoft.co...e-files-in-bins-under-recyclebin?forum=ws2016

 

[MarkMan47]

its odd, S 1 5 18 - SID for local system - https://docs.microsoft.com/en-us/tr...rver/identity/security-identifiers-in-windows

SECURITY_LOCAL_SYSTEM_RID S-1-5-18 - A special account used by the operating system.



MS says you should be able to delete them - https://social.technet.microsoft.co...e-files-in-bins-under-recyclebin?forum=ws2016

Thanks! I deleted it, and the laptop seems to not have changed in any way. Will report if anything happens, but for now, thank you.