Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: What is MPSigStub and can it be safely deleted?

15 Sep 2010   #1
ramblinflebro

Windows 7 Home Premium 64-bit
 
 
What is MPSigStub and can it be safely deleted?

Suddenly a folder appears on my external hard drive. It has a name of mixed letters and numbers about 3 inches long. Inside the folder is an executable named MPSigStub. All I can find out, it seems to have something to do with Windows updates. I also read, it could very well be spyware if I find it on my C drive, which I have. I have scanned it with Norton and two spyware programs and nothing. What is this? Can it be safely deleted? Thank you.


My System SpecsSystem Spec
.

15 Sep 2010   #2
richc46

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium SP1, clean install, upgrade disc
 
 

Did you scan with malwarebytes, if not do so.
Run the long scan
update before using.
My System SpecsSystem Spec
15 Sep 2010   #3
Bill2

Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
 
 

MpSigStub.exe is a MS installer application used in conjunction with Windows Automatic Updates. It extracts update files to a temporary directory.

How the Forefront Client Security Antimalware Service updates the anti-malware engine files and the anti-malware definition files

However, some malware may also camouflage themselves as MPSigStub.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. So run a malware scan on your MPSigStub.exe process to make sure its clean.

I guess, if you delete it, it'll probably recreate itself. Rename it to see what happens. E.g. rename MpSigStub to MpSigStub.old. Most likely it will recreate if they are necessary ( or give you an error message) as the system won't be able to find them. If they turn out to be necessary just remove the .old and you are back in business.
My System SpecsSystem Spec
.


15 Sep 2010   #4
ramblinflebro

Windows 7 Home Premium 64-bit
 
 

I have ran full scans with Norton and Malwarebytes. Both report no infections. My concern is as Bill2 stated in his post, some malware can camouflage themselves. Why is it in 2 different location? Any input would really be appreciated.
My System SpecsSystem Spec
15 Sep 2010   #5
Bill2

Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
 
 

Quote   Quote: Originally Posted by ramblinflebro View Post
I have ran full scans with Norton and Malwarebytes. Both report no infections. My concern is as Bill2 stated in his post, some malware can camouflage themselves. Why is it in 2 different location? Any input would really be appreciated.
I would suggest you just rename the files to .OLD, if the windows updates process works smoothly even then, you know the files will recreate. Then you can delete the existing files or just let them be if they are not flagged by AVs.
My System SpecsSystem Spec
16 Sep 2010   #6
ramblinflebro

Windows 7 Home Premium 64-bit
 
 

Thanks Bill2.
My System SpecsSystem Spec
Reply

 What is MPSigStub and can it be safely deleted?




Thread Tools





Similar help and support threads
Thread Forum
Need to recover deleted office 2003, deleted in error
Hi, Whilst removing a virus I have somehow managed to delete office 2003 with my outlook with all of my work emails on !!! I have tried a system restore but it wont let me do it and comes up with %systemroot%\registration then ComPlusStaging I could just reinstall office but I dont have...
Microsoft Office
Being the admin safely. When that is just the way it is.
AKA : how do I "RUNAS" the user. I use my computer just a little bit different than other people might. I regularly "test" things, some extreeme things, 99% of the time i require full access to the system. this psudo admin in window7 has been the most frustrating thing, i would rather see...
System Security
"Deleted" Facebook photos still not deleted: a followup
"Deleted" Facebook photos still not deleted: a followup Source: "Deleted" Facebook photos still not deleted: a followup What bullshit. This is why there are no photos of me online... ~Lordbob
Chillout Room
Recover deleted data from a deleted user account?
How to recover deleted data from an deleted user? Hi Guys, Please help I had an old user account which was corrupted, So I deleted that however forgotten to keep the files...... Is there any way I can get my old data back??:( Using Windows 7 Ultimate 32 bit
Chillout Room
Deleted Items Folder: Where Are The Deleted Messages
:huh: Hi, Could someone please tell me why my deleted messages are deleted from the computer instead of going to my Deleted Items Folder? I "do not" have the box checked from Menus - Options - Advanced - Maintenance - Empty messages from the "Deleted Items" folder on exit. Your help would be most...
Browsers & Mail

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 00:36.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App