Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Microsoft security essentials wants a file upload for additional testing?


  • Please log in to reply
4 replies to this topic

#1 Toony

Toony

  • Members
  • 117 posts
  • OFFLINE
  •  
  • Local time:02:45 PM

Posted 11 October 2015 - 04:39 AM

So I had this box pop up earlier in which it said microsoft security essentials wanted to upload a file to microsoft or something (I didn't quite read it all) to see for further testing if it was malicious. The file in question was steamwebhelper.exe

 

Was this alert legitimate? Am I infected with something, what can I do to remove it? I have run a MSE and malware bytes scan and not found anything.


Edited by Toony, 11 October 2015 - 04:57 AM.


BC AdBot (Login to Remove)

 


#2 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:11:45 PM

Posted 11 October 2015 - 04:50 AM

Hi there,

From the file name it appears to be a component of the Steam gaming platform - if you have it installed then there is nothing to worry about. I guess MSE just got curious and wanted to take a further look, but this is the first time I've heard of MSE asking to upload a file.

#3 Toony

Toony
  • Topic Starter

  • Members
  • 117 posts
  • OFFLINE
  •  
  • Local time:02:45 PM

Posted 11 October 2015 - 04:58 AM

Hi there,

From the file name it appears to be a component of the Steam gaming platform - if you have it installed then there is nothing to worry about. I guess MSE just got curious and wanted to take a further look, but this is the first time I've heard of MSE asking to upload a file.

That's why I was concerned. I didn't know if it was the real MSE or malware masquerading. I found a few results on google from 2009 stating mse/windows defender asked to upload various different steam files.



#4 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:11:45 PM

Posted 11 October 2015 - 05:01 AM

There is always the option of switching to another antivirus and see if the alert persists.

But to be honest I doubt it - since malware commonly fakes MSE and other antivirus to tell you that your computer is infected, not to ask to upload files.

#5 Toony

Toony
  • Topic Starter

  • Members
  • 117 posts
  • OFFLINE
  •  
  • Local time:02:45 PM

Posted 11 October 2015 - 05:09 AM

I also found this in event viewer, if it helps

 

Fault bucket 371586993, type 29
Event Name: AVSubmit
Response: Not available
Cab Id: 0

Problem signature:
P1: Microsoft Security Essentials (EDB4FA23-53B8-4AFA-8C5D-99752CCA7094)
P2: 1.1.12101.0
P3: 1.207.2640.0
P4: 1.207.2640.0
P5: 0000000000000000,08d5c3608c181f0cc4d18717a7205e5529eb8da7
P6:
P7:
P8:
P9:
P10:

Attached files:
\\?\c:\ProgramData\Microsoft\Microsoft Antimalware\LocalCopy\{A27907E9-9386-0F4C-1B48-9D4BFBB77CC1}-steamwebhelper.exe
C:\Users\Toony\AppData\Local\Temp\MPSampleSubmit\client_manifest.txt

These files may be available here:
C:\Users\Toony\AppData\Local\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft Securi_d47d54896137a096c4c6ef23fff6bb6e64d88556_08d8cc00

Analysis symbol:
Rechecking for solution: 0
Report Id: 98a8cd94-6fe4-11e5-adc4-bc5ff43e476d
Report Status: 0






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users