• PNG files in C:\WINDOWS\SYSTEM32

    From Mr. Man-wai Chang@3:633/10 to All on Tue Jun 30 01:13:03 2026

    Why are PNG files stored in C:\WINDOWS\SYSTEM32 ?

    Is this normal? Was my Windows 10 compromised?

    @AdvancedKeySettingsNotification.png
    @AppHelpToast.png
    @AudioToastIcon.png
    @BackgroundAccessToastIcon.png
    @bitlockertoastimage.png
    @edptoastimage.png
    @EnrollmentToastIcon.png
    @language_notification_icon.png
    @optionalfeatures.png
    @StorageSenseToastIcon.png
    @VpnToastIcon.png
    @WindowsHelloFaceToastIcon.png
    @WindowsUpdateToastIcon.contrast-black.png @WindowsUpdateToastIcon.contrast-white.png
    @WindowsUpdateToastIcon.png
    @WirelessDisplayToast.png
    @WLOGO_48x48.png
    ActiveHours.png
    BluetoothPairingSystemToastIcon.contrast-black.png BluetoothPairingSystemToastIcon.contrast-high.png BluetoothPairingSystemToastIcon.contrast-white.png BluetoothPairingSystemToastIcon.png
    BluetoothSystemToastIcon.contrast-white.png
    BluetoothSystemToastIcon.png
    ComputerToastIcon.contrast-white.png
    ComputerToastIcon.png
    DefaultAccountTile.png
    DesktopSpotlightToastIcon_Dark.png
    DesktopSpotlightToastIcon_Light.png
    DisplaySystemToastIcon.contrast-white.png
    DisplaySystemToastIcon.png
    FeatureToastBulldogImg.png
    FeatureToastDlpImg.png
    GameSystemToastIcon.contrast-white.png
    GameSystemToastIcon.png
    HandwritingSystemToastIcon.contrast-white.png
    HandwritingSystemToastIcon.png
    HeadphoneSystemToastIcon.contrast-white.png
    HeadphoneSystemToastIcon.png
    HeadsetSystemToastIcon.contrast-white.png
    HeadsetSystemToastIcon.png
    HealthSystemToastIcon.contrast-white.png
    HealthSystemToastIcon.png
    InputSystemToastIcon.contrast-white.png
    InputSystemToastIcon.png
    KeyboardSystemToastIcon.contrast-white.png
    KeyboardSystemToastIcon.png
    MediaSystemToastIcon.contrast-white.png
    MediaSystemToastIcon.png
    MouseSystemToastIcon.contrast-white.png
    MouseSystemToastIcon.png
    OkDone_80.contrast-black.png
    OkDone_80.contrast-white.png
    OkDone_80.png
    PhoneSystemToastIcon.contrast-white.png
    PhoneSystemToastIcon.png
    RemoteSystemToastIcon.contrast-white.png
    RemoteSystemToastIcon.png
    RestartNowPower_80.contrast-black.png
    RestartNowPower_80.contrast-white.png
    RestartNowPower_80.png
    RestartTonight_80.png
    RestartTonight_80_contrast-black.png
    RestartTonight_80_contrast-white.png
    ScheduleTime_80.contrast-black.png
    ScheduleTime_80.contrast-white.png
    ScheduleTime_80.png
    SecurityAndMaintenance.png
    SecurityAndMaintenance_Alert.png
    SecurityAndMaintenance_Error.png
    Snooze_80.contrast-black.png
    Snooze_80.contrast-white.png
    Snooze_80.png
    SpeakersSystemToastIcon.contrast-white.png
    SpeakersSystemToastIcon.png
    SvBannerBackground.png
    WindowsSecurityIcon.png
    wpcatltoast.png
    wpcmon.png
    X_80.contrast-black.png
    X_80.contrast-white.png
    X_80.png


    --

    @~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
    / v \ May the Force and farces be with you! Live long and prosper!!
    /( _ )\ https://sites.google.com/site/changmw/
    ^ ^ https://github.com/changmw/changmw
    The game is afoot... Meow...


    --- PyGate Linux v1.5.18
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From R.Wieser@3:633/10 to All on Mon Jun 29 19:41:18 2026
    Mr. Man-wai Chang,

    Why are PNG files stored in C:\WINDOWS\SYSTEM32 ?

    Is this normal? Was my Windows 10 compromised?

    What do you get when you drop one or more of those filenames into google ?

    Regards,
    Rudy Wieser



    --- PyGate Linux v1.5.18
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From J. P. Gilliver@3:633/10 to All on Mon Jun 29 19:09:13 2026
    On 2026/6/29 18:41:18, R.Wieser wrote:
    Mr. Man-wai Chang,

    Why are PNG files stored in C:\WINDOWS\SYSTEM32 ?

    Is this normal? Was my Windows 10 compromised?

    What do you get when you drop one or more of those filenames into google ?

    Regards,
    Rudy Wieser


    I have 89 .png files under that folder - 7 in subdirectories, so that
    makes 82 in the exact folder. They're mostly very small; the ones I
    could open seem to be just icons or similar.
    --
    J. P. Gilliver. UMRA: 1960/<1985 MB++G()ALIS-Ch++(p)Ar++T+H+Sh0!:`)DNAf

    Often at work I wish they'd pay me what I'm worth, but sometimes I'm
    glad they don't. (BrritSki, in uk.media.radio.archers, on 2000-12-25.)

    --- PyGate Linux v1.5.18
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From ....winston@3:633/10 to All on Mon Jun 29 16:53:42 2026
    On 06/29/2026 1:13 PM, Mr. Man-wai Chang wrote:

    Why are PNG files stored in C:\WINDOWS\SYSTEM32 ?

    Is this normal?

    Yes

    Was my Windows 10 compromised?

    No


    Look at the file dates then try and use your skills to determine the
    reason for being saved(in System32).





    --
    ...wнд?ё?д

    --- PyGate Linux v1.5.18
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Alan K.@3:633/10 to All on Mon Jun 29 17:16:31 2026
    On 6/29/26 4:53 PM, ....winston wrote:
    On 06/29/2026 1:13 PM, Mr. Man-wai Chang wrote:

    Why are PNG files stored in C:\WINDOWS\SYSTEM32 ?

    Is this normal?

    Yes

    Was my Windows 10 compromised?

    No


    Look at the file dates then try and use your skills to determine the
    reason for being saved(in System32).





    Kinda sounds like some browser cache went amok.

    --
    Mint 22.3, Thunderbird 140.12.0esr, Firefox 152.0.3
    Alan K.

    --- PyGate Linux v1.5.18
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From John K.Eason@3:633/10 to All on Tue Jun 30 00:30:00 2026
    In article <111u931$gkvl$1@toylet.eternal-september.org>, toylet.toylet@gmail.com
    (Mr. Man-wai Chang) wrote:

    *From:* "Mr. Man-wai Chang" <toylet.toylet@gmail.com>
    *Date:* Tue, 30 Jun 2026 01:13:03 +0800

    Why are PNG files stored in C:\WINDOWS\SYSTEM32 ?

    Is this normal? Was my Windows 10 compromised?

    @AdvancedKeySettingsNotification.png
    @AppHelpToast.png
    @AudioToastIcon.png
    @BackgroundAccessToastIcon.png
    @bitlockertoastimage.png
    @edptoastimage.png
    @EnrollmentToastIcon.png
    @language_notification_icon.png
    @optionalfeatures.png
    @StorageSenseToastIcon.png
    @VpnToastIcon.png
    @WindowsHelloFaceToastIcon.png
    @WindowsUpdateToastIcon.contrast-black.png @WindowsUpdateToastIcon.contrast-white.png
    @WindowsUpdateToastIcon.png
    @WirelessDisplayToast.png
    @WLOGO_48x48.png
    ActiveHours.png
    BluetoothPairingSystemToastIcon.contrast-black.png BluetoothPairingSystemToastIcon.contrast-high.png BluetoothPairingSystemToastIcon.contrast-white.png BluetoothPairingSystemToastIcon.png BluetoothSystemToastIcon.contrast-white.png
    BluetoothSystemToastIcon.png
    ComputerToastIcon.contrast-white.png
    ComputerToastIcon.png
    DefaultAccountTile.png
    DesktopSpotlightToastIcon_Dark.png
    DesktopSpotlightToastIcon_Light.png
    DisplaySystemToastIcon.contrast-white.png
    DisplaySystemToastIcon.png
    FeatureToastBulldogImg.png
    FeatureToastDlpImg.png
    GameSystemToastIcon.contrast-white.png
    GameSystemToastIcon.png
    HandwritingSystemToastIcon.contrast-white.png
    HandwritingSystemToastIcon.png
    HeadphoneSystemToastIcon.contrast-white.png
    HeadphoneSystemToastIcon.png
    HeadsetSystemToastIcon.contrast-white.png
    HeadsetSystemToastIcon.png
    HealthSystemToastIcon.contrast-white.png
    HealthSystemToastIcon.png
    InputSystemToastIcon.contrast-white.png
    InputSystemToastIcon.png
    KeyboardSystemToastIcon.contrast-white.png
    KeyboardSystemToastIcon.png
    MediaSystemToastIcon.contrast-white.png
    MediaSystemToastIcon.png
    MouseSystemToastIcon.contrast-white.png
    MouseSystemToastIcon.png
    OkDone_80.contrast-black.png
    OkDone_80.contrast-white.png
    OkDone_80.png
    PhoneSystemToastIcon.contrast-white.png
    PhoneSystemToastIcon.png
    RemoteSystemToastIcon.contrast-white.png
    RemoteSystemToastIcon.png
    RestartNowPower_80.contrast-black.png
    RestartNowPower_80.contrast-white.png
    RestartNowPower_80.png
    RestartTonight_80.png
    RestartTonight_80_contrast-black.png
    RestartTonight_80_contrast-white.png
    ScheduleTime_80.contrast-black.png
    ScheduleTime_80.contrast-white.png
    ScheduleTime_80.png
    SecurityAndMaintenance.png
    SecurityAndMaintenance_Alert.png
    SecurityAndMaintenance_Error.png
    Snooze_80.contrast-black.png
    Snooze_80.contrast-white.png
    Snooze_80.png
    SpeakersSystemToastIcon.contrast-white.png
    SpeakersSystemToastIcon.png
    SvBannerBackground.png
    WindowsSecurityIcon.png
    wpcatltoast.png
    wpcmon.png
    X_80.contrast-black.png
    X_80.contrast-white.png
    X_80.png

    I have all of those here too so I guess they've always been there.
    --
    Regards
    John

    --- PyGate Linux v1.5.18
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Mr. Man-wai Chang@3:633/10 to All on Tue Jun 30 16:03:15 2026
    On 6/30/2026 4:53 AM, ....winston wrote:

    Look at the file dates then try and use your skills to determine the
    reason for being saved(in System32).
    Among the files I found, the following four
    file names are most interesting. Good
    security means leaving PNG files in ...
    C:\WINDOWS\SYSTEM32? ;)

    SecurityAndMaintenance.png
    SecurityAndMaintenance_Alert.png
    SecurityAndMaintenance_Error.png
    WindowsSecurityIcon.png

    --

    @~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
    / v \ May the Force and farces be with you! Live long and prosper!!
    /( _ )\ https://sites.google.com/site/changmw/
    ^ ^ https://github.com/changmw/changmw
    The game is afoot... Meow...

    --- PyGate Linux v1.5.18
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Mr. Man-wai Chang@3:633/10 to All on Tue Jun 30 17:24:22 2026
    On 6/30/2026 2:09 AM, J. P. Gilliver wrote:
    On 2026/6/29 18:41:18, R.Wieser wrote:
    Mr. Man-wai Chang,

    Why are PNG files stored in C:\WINDOWS\SYSTEM32 ?

    I have 89 .png files under that folder - 7 in subdirectories, so that
    makes 82 in the exact folder. They're mostly very small; the ones I
    could open seem to be just icons or similar.

    Listing those found in my C:\WINDOWS\SYSTEM32
    and its subdirectories (countL: 97). There are
    pet photoes.

    C:\Windows\System32\> dir *.png /s/a/b

    C:\Windows\System32\@AdvancedKeySettingsNotification.png C:\Windows\System32\@AppHelpToast.png
    C:\Windows\System32\@AudioToastIcon.png C:\Windows\System32\@BackgroundAccessToastIcon.png C:\Windows\System32\@bitlockertoastimage.png C:\Windows\System32\@edptoastimage.png C:\Windows\System32\@EnrollmentToastIcon.png C:\Windows\System32\@language_notification_icon.png C:\Windows\System32\@optionalfeatures.png C:\Windows\System32\@StorageSenseToastIcon.png C:\Windows\System32\@VpnToastIcon.png C:\Windows\System32\@WindowsHelloFaceToastIcon.png C:\Windows\System32\@WindowsUpdateToastIcon.contrast-black.png C:\Windows\System32\@WindowsUpdateToastIcon.contrast-white.png C:\Windows\System32\@WindowsUpdateToastIcon.png C:\Windows\System32\@WirelessDisplayToast.png C:\Windows\System32\@WLOGO_48x48.png
    C:\Windows\System32\ActiveHours.png C:\Windows\System32\BluetoothPairingSystemToastIcon.contrast-black.png C:\Windows\System32\BluetoothPairingSystemToastIcon.contrast-high.png C:\Windows\System32\BluetoothPairingSystemToastIcon.contrast-white.png C:\Windows\System32\BluetoothPairingSystemToastIcon.png C:\Windows\System32\BluetoothSystemToastIcon.contrast-white.png C:\Windows\System32\BluetoothSystemToastIcon.png C:\Windows\System32\ComputerToastIcon.contrast-white.png C:\Windows\System32\ComputerToastIcon.png C:\Windows\System32\DefaultAccountTile.png C:\Windows\System32\DesktopSpotlightToastIcon_Dark.png C:\Windows\System32\DesktopSpotlightToastIcon_Light.png C:\Windows\System32\DisplaySystemToastIcon.contrast-white.png C:\Windows\System32\DisplaySystemToastIcon.png C:\Windows\System32\FeatureToastBulldogImg.png C:\Windows\System32\FeatureToastDlpImg.png C:\Windows\System32\GameSystemToastIcon.contrast-white.png C:\Windows\System32\GameSystemToastIcon.png C:\Windows\System32\HandwritingSystemToastIcon.contrast-white.png C:\Windows\System32\HandwritingSystemToastIcon.png C:\Windows\System32\HeadphoneSystemToastIcon.contrast-white.png C:\Windows\System32\HeadphoneSystemToastIcon.png C:\Windows\System32\HeadsetSystemToastIcon.contrast-white.png C:\Windows\System32\HeadsetSystemToastIcon.png C:\Windows\System32\HealthSystemToastIcon.contrast-white.png C:\Windows\System32\HealthSystemToastIcon.png C:\Windows\System32\InputSystemToastIcon.contrast-white.png C:\Windows\System32\InputSystemToastIcon.png C:\Windows\System32\KeyboardSystemToastIcon.contrast-white.png C:\Windows\System32\KeyboardSystemToastIcon.png C:\Windows\System32\MediaSystemToastIcon.contrast-white.png C:\Windows\System32\MediaSystemToastIcon.png C:\Windows\System32\MouseSystemToastIcon.contrast-white.png C:\Windows\System32\MouseSystemToastIcon.png C:\Windows\System32\OkDone_80.contrast-black.png C:\Windows\System32\OkDone_80.contrast-white.png C:\Windows\System32\OkDone_80.png C:\Windows\System32\PhoneSystemToastIcon.contrast-white.png C:\Windows\System32\PhoneSystemToastIcon.png C:\Windows\System32\RemoteSystemToastIcon.contrast-white.png C:\Windows\System32\RemoteSystemToastIcon.png C:\Windows\System32\RestartNowPower_80.contrast-black.png C:\Windows\System32\RestartNowPower_80.contrast-white.png C:\Windows\System32\RestartNowPower_80.png C:\Windows\System32\RestartTonight_80.png C:\Windows\System32\RestartTonight_80_contrast-black.png C:\Windows\System32\RestartTonight_80_contrast-white.png C:\Windows\System32\ScheduleTime_80.contrast-black.png C:\Windows\System32\ScheduleTime_80.contrast-white.png C:\Windows\System32\ScheduleTime_80.png C:\Windows\System32\SecurityAndMaintenance.png C:\Windows\System32\SecurityAndMaintenance_Alert.png C:\Windows\System32\SecurityAndMaintenance_Error.png C:\Windows\System32\Snooze_80.contrast-black.png C:\Windows\System32\Snooze_80.contrast-white.png C:\Windows\System32\Snooze_80.png C:\Windows\System32\SpeakersSystemToastIcon.contrast-white.png C:\Windows\System32\SpeakersSystemToastIcon.png C:\Windows\System32\SvBannerBackground.png C:\Windows\System32\WindowsSecurityIcon.png
    C:\Windows\System32\wpcatltoast.png
    C:\Windows\System32\wpcmon.png
    C:\Windows\System32\X_80.contrast-black.png C:\Windows\System32\X_80.contrast-white.png
    C:\Windows\System32\X_80.png C:\Windows\System32\Bthprops\@BthpropsNotificationLogo.png C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_7840b4313191ae17\NvCamera\Sticker01.png
    C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_7840b4313191ae17\NvCamera\Sticker02.png
    C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_7840b4313191ae17\NvCamera\Sticker03.png
    C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_7840b4313191ae17\NvCamera\Sticker04.png
    C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_7840b4313191ae17\NvCamera\Sticker05.png
    C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_7840b4313191ae17\NvCamera\Sticker06.png
    C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_7840b4313191ae17\NvCamera\Sticker07.png
    C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_7840b4313191ae17\NvCamera\Sticker08.png
    C:\Windows\System32\PerceptionSimulation\Assets\ClosedHand.png C:\Windows\System32\PerceptionSimulation\Assets\OpenHand.png C:\Windows\System32\PerceptionSimulation\Assets\Pinch.png C:\Windows\System32\PerceptionSimulation\Assets\Point.png C:\Windows\System32\Speech_OneCore\common\privacy-icon.png C:\Windows\System32\Speech_OneCore\common\toast-hero-image.png


    --

    @~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
    / v \ May the Force and farces be with you! Live long and prosper!!
    /( _ )\ https://sites.google.com/site/changmw/
    ^ ^ https://github.com/changmw/changmw
    The game is afoot... Meow...

    --- PyGate Linux v1.5.18
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From ....winston@3:633/10 to All on Tue Jun 30 08:16:01 2026
    On 06/30/2026 4:03 AM, Mr. Man-wai Chang wrote:
    On 6/30/2026 4:53 AM, ....winston wrote:

    Look at the file dates then try and use your skills to determine the
    reason for being saved(in System32).
    Among the files I found, the following four
    file names are most interesting. Good
    security means leaving PNG files in ...
    C:\WINDOWS\SYSTEM32? ;)

    SecurityAndMaintenance.png
    SecurityAndMaintenance_Alert.png
    SecurityAndMaintenance_Error.png
    WindowsSecurityIcon.png


    Missed the hint.
    Dates, not names.

    --
    ...wнд?ё?д

    --- PyGate Linux v1.5.18
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Mr. Man-wai Chang@3:633/10 to All on Tue Jun 30 21:53:30 2026
    On 6/30/2026 8:16 PM, ....winston wrote:
    On 06/30/2026 4:03 AM, Mr. Man-wai Chang wrote:

    SecurityAndMaintenance.png
    SecurityAndMaintenance_Alert.png
    SecurityAndMaintenance_Error.png
    WindowsSecurityIcon.png

    Missed the hint.
    Dates, not names.


    C:\Windows\System32> dir *security*.png
    Volume in drive C is [+]WIn10

    Directory of C:\Windows\System32

    12/07/2019 05:08 PM 5,783 SecurityAndMaintenance.png
    12/07/2019 05:08 PM 2,613 SecurityAndMaintenance_Alert.png 12/07/2019 05:08 PM 6,873 SecurityAndMaintenance_Error.png 12/07/2019 05:08 PM 759 WindowsSecurityIcon.png
    4 File(s) 16,028 bytes


    --

    @~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
    / v \ May the Force and farces be with you! Live long and prosper!!
    /( _ )\ https://sites.google.com/site/changmw/
    ^ ^ https://github.com/changmw/changmw
    The game is afoot... Meow...

    --- PyGate Linux v1.5.18
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From ....winston@3:633/10 to All on Tue Jun 30 13:26:23 2026
    On 06/30/2026 9:53 AM, Mr. Man-wai Chang wrote:
    On 6/30/2026 8:16 PM, ....winston wrote:
    On 06/30/2026 4:03 AM, Mr. Man-wai Chang wrote:

    SecurityAndMaintenance.png
    SecurityAndMaintenance_Alert.png
    SecurityAndMaintenance_Error.png
    WindowsSecurityIcon.png

    Missed the hint.
    Dates, not names.


    C:\Windows\System32> dir *security*.png
     Volume in drive C is [+]WIn10

    Directory of C:\Windows\System32

    12/07/2019  05:08 PM             5,783 SecurityAndMaintenance.png
    12/07/2019  05:08 PM             2,613 SecurityAndMaintenance_Alert.png 12/07/2019  05:08 PM             6,873 SecurityAndMaintenance_Error.png 12/07/2019  05:08 PM               759 WindowsSecurityIcon.png
                   4 File(s)         16,028 bytes



    Quite informative. Probably many more with the exact same date.
    => a very telling clue why those files are are present in that folder.



    --
    ...wнд?ё?д

    --- PyGate Linux v1.5.18
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From J. P. Gilliver@3:633/10 to All on Tue Jun 30 18:29:56 2026
    On 2026/6/30 13:16:1, ....winston wrote:
    On 06/30/2026 4:03 AM, Mr. Man-wai Chang wrote:
    On 6/30/2026 4:53 AM, ....winston wrote:

    Look at the file dates then try and use your skills to determine the
    reason for being saved(in System32).
    Among the files I found, the following four
    file names are most interesting. Good
    security means leaving PNG files in ...
    C:\WINDOWS\SYSTEM32? ;)

    SecurityAndMaintenance.png
    SecurityAndMaintenance_Alert.png
    SecurityAndMaintenance_Error.png
    WindowsSecurityIcon.png


    Missed the hint.
    Dates, not names.

    Nearly all of the .png files in my C:\WINDOWS\SYSTEM32 (Windows 10 64
    bit) are 2019/12/7 9:9. The rest are 2019/12/7 9:10 (four in a
    subfolder), 2013/12/4 2:41 (two in a subfolder, two not), and 2025/1/31
    13:59 (two).
    --
    J. P. Gilliver. UMRA: 1960/<1985 MB++G()ALIS-Ch++(p)Ar++T+H+Sh0!:`)DNAf

    Don't play "stupid" with me... I'm better at it.

    --- PyGate Linux v1.5.18
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)