Help identifying unknown file

[robwalters04]

IN windirstar in my $recycle.bin folder in my C drive there is a file named S-1-5-21-3261537125-3447090211-3479999893-1000 and it is 3.4 gbs!

Any body have any idea what this is?

 

[iPwn]

Recycled User Profile that has been deleted from the users list. Did you recently delete a user?

 

[robwalters04]

No? what the hell, the file now says its 129 bytes... so strange

 

[iPwn]

What about recent updates? I'm not sure why an update would carry a user SID but Windows Updates SID's look very close to this...

I must say though, that is odd.

 

[robwalters04]

Yeah i recently windows updated the computer. I dont know what a user SID is but why it be in a ssd recycle bin?

 

[iPwn]

A SID just stands for "Security Identifier"... the non-user-friendly name that Windows uses to reference.

Have you specified to not use the recycle bin? Whether it's on an SSD, spinning disk, or USB flash, Windows will default to using a Recycle Bin. The use of a recycle bin is not necessarily life-time threatening to an SSD, so it's not disabled by default.

 

[robwalters04]

I havent specified anything, no. Oh well its only 129 bytes now so lol

 

[iPwn]

If you want to disable the recycle bin, right click on it and go to Properties.
See attachment below.