I'm feeling quite paranoid about something I found recently. When I checked my %TEMP% folder, I discovered several screenshots of my desktop applications that were open at different times, saved as random 6-7 digit file names like "592708.png". I've already turned off Copilot, but I'm at a loss for what's causing this. I'm really hoping it's not malware, so any insights would be greatly appreciated!
3 Answers
I also noticed something odd; my taskbar keeps popping up unexpectedly. I’m using a custom taskbar app called Seelen UI, but I've experienced this behavior with and without it. Could this be connected to the screenshots you're seeing?
You should try opening PowerShell as an administrator and running this command: DISM /Online /Get-FeatureInfo /FeatureName:Recall. Look for the 'state.' If it shows as enabled, you might have a Microsoft AI feature that could be causing the screenshots.
If you're worried about malware, it’s a good idea to run Windows Defender and ensure you do an 'offline' scan. But honestly, it seems unlikely someone would be taking screenshots. Usually, unexpected computer activities don’t point directly to malware. But definitely check your system just to be safe.

Thanks for the tip! I just checked and it says 'Disabled with Payload Removed' since I used a debloater. But I'm still really curious about where those screenshots are coming from.