Warnings about uefi:\\xxxx files - What's that ?

[Samoréen 8]

Hi,

Now that I have installed the Windows 10 Creators update, I am receiving a lot of warnings about "files" being sent to ESET :

11/07/2017 17:45:33;ESET Kernel;File  'uefi:\\Volume 2\CpuDxe' was sent to ESET for analysis.;
11/07/2017 17:45:35;ESET Kernel;File  'uefi:\\Volume 2\FileSystem' was sent to ESET for analysis.;
11/07/2017 17:45:51;ESET Kernel;File  'uefi:\\Volume 2\CORE_DXE' was sent to ESET for analysis.;
11/07/2017 17:45:53;ESET Kernel;File  'uefi:\\Volume 2\Runtime' was sent to ESET for analysis.;
11/07/2017 17:45:54;ESET Kernel;File  'uefi:\\Volume 2\FtBbUpdate' was sent to ESET for analysis.;
11/07/2017 22:40:04;ESET Kernel;File  'uefi:\\Volume 2\ASUSXBBUpdate' was sent to ESET for analysis.;
11/07/2017 22:40:05;ESET Kernel;File  'uefi:\\Volume 2\ReFlash' was sent to ESET for analysis.;
11/07/2017 22:40:06;ESET Kernel;File  'uefi:\\Volume 2\PciBus' was sent to ESET for analysis.;
11/07/2017 22:50:09;ESET Kernel;File  'uefi:\\Volume 2\AmiBoardInfo' was sent to ESET for analysis.;
11/07/2017 22:50:10;ESET Kernel;File  'uefi:\\Volume 2\ECDXE' was sent to ESET for analysis.;
12/07/2017 11:47:38;ESET Kernel;File  'uefi:\\Volume 2\ECFWUpdate' was sent to ESET for analysis.;
12/07/2017 11:47:39;ESET Kernel;File  'uefi:\\Volume 2\SIOBasicIODxe' was sent to ESET for analysis.;
12/07/2017 11:47:41;ESET Kernel;File  'uefi:\\Volume 2\CpuInitDxe' was sent to ESET for analysis.;
12/07/2017 11:47:44;ESET Kernel;File  'uefi:\\Volume 2\SmmBaseRuntime' was sent to ESET for analysis.;
12/07/2017 13:02:00;ESET Kernel;File  'uefi:\\Volume 2\SmmDisp' was sent to ESET for analysis.;
12/07/2017 13:02:01;ESET Kernel;File  'uefi:\\Volume 2\SmmThunk' was sent to ESET for analysis.;
12/07/2017 13:02:02;ESET Kernel;File  'uefi:\\Volume 2\CpuPolicyDxe' was sent to ESET for analysis.;
12/07/2017 13:02:03;ESET Kernel;File  'uefi:\\Volume 2\MicrocodeUpdate' was sent to ESET for analysis.;
12/07/2017 13:02:04;ESET Kernel;File  'uefi:\\Volume 2\CpuSmmSaveRes' was sent to ESET for analysis.;
12/07/2017 13:02:06;ESET Kernel;File  'uefi:\\Volume 2\CpuSpSMI' was sent to ESET for analysis.;
12/07/2017 13:40:54;ESET Kernel;File  'uefi:\\Volume 2\SBDXE' was sent to ESET for analysis.;
12/07/2017 13:40:55;ESET Kernel;File  'uefi:\\Volume 2\SBRun' was sent to ESET for analysis.;
12/07/2017 13:40:57;ESET Kernel;File  'uefi:\\Volume 2\SmmChildDispatcher' was sent to ESET for analysis.;
12/07/2017 13:40:58;ESET Kernel;File  'uefi:\\Volume 2\SmmChildDispatcher2' was sent to ESET for analysis.;
12/07/2017 13:40:59;ESET Kernel;File  'uefi:\\Volume 2\AcpiModeEnable' was sent to ESET for analysis.;
12/07/2017 13:41:00;ESET Kernel;File  'uefi:\\Volume 2\SleepSmi' was sent to ESET for analysis.;
12/07/2017 15:14:47;ESET Kernel;File  'uefi:\\Volume 2\SBSMI' was sent to ESET for analysis.;
12/07/2017 15:14:48;ESET Kernel;File  'uefi:\\Volume 2\PchSpiWrap' was sent to ESET for analysis.;
12/07/2017 15:14:49;ESET Kernel;File  'uefi:\\Volume 2\WdtAppDxe' was sent to ESET for analysis.;
12/07/2017 15:14:50;ESET Kernel;File  'uefi:\\Volume 2\ActiveBios' was sent to ESET for analysis.;
12/07/2017 15:14:58;ESET Kernel;File  'uefi:\\Volume 2\IoTrap' was sent to ESET for analysis.;
12/07/2017 15:15:06;ESET Kernel;File  'uefi:\\Volume 2\IntelLegacyInterrupt' was sent to ESET for analysis.;
12/07/2017 15:54:09;ESET Kernel;File  'uefi:\\Volume 2\PchInitDxe' was sent to ESET for analysis.;
12/07/2017 15:54:10;ESET Kernel;File  'uefi:\\Volume 2\PchSmiDispatcher' was sent to ESET for analysis.;
12/07/2017 15:54:11;ESET Kernel;File  'uefi:\\Volume 2\PchPcieSmm' was sent to ESET for analysis.;
12/07/2017 15:54:12;ESET Kernel;File  'uefi:\\Volume 2\PchReset' was sent to ESET for analysis.;
12/07/2017 15:54:13;ESET Kernel;File  'uefi:\\Volume 2\PchS3Peim' was sent to ESET for analysis.;
12/07/2017 16:57:55;ESET Kernel;File  'uefi:\\Volume 2\PchS3Support' was sent to ESET for analysis.;
12/07/2017 16:57:56;ESET Kernel;File  'uefi:\\Volume 2\PchSerialGpio' was sent to ESET for analysis.;
12/07/2017 16:57:57;ESET Kernel;File  'uefi:\\Volume 2\SmartTimer' was sent to ESET for analysis.;
12/07/2017 16:57:58;ESET Kernel;File  'uefi:\\Volume 2\PchSmbusDxe' was sent to ESET for analysis.;
12/07/2017 16:57:59;ESET Kernel;File  'uefi:\\Volume 2\SmmControl' was sent to ESET for analysis.;
12/07/2017 16:58:00;ESET Kernel;File  'uefi:\\Volume 2\PchSpiSmm' was sent to ESET for analysis.;

Anyone seeing the same warnings ? Any idea about what is going on ?

Thanks.

Edited July 12, 2017 by Samoréen

[Marcos 5,074]

These are not warnings, only notifications about submitted files that are not logged by default.

You can disable logging under Tools -> ESET LiveGrid and turn off "Enable logging" .

[Samoréen 8]

Just now, Marcos said:

These are not warnings, only notifications about submitted files that are not logged by default.

You can disable logging under Tools -> ESET LiveGrid and turn off "Enable logging" .

I understand but that's not the problem. I'm just bothered by all these suspected files that ESET is finding on my system. If I understand you well, these are Windows system files unknown from the current ESET version (because the last ESET update is older than the recent Creators update ?) and for which I should see these notifications only once ?

[Marcos 5,074]

Those files are not a part of Windows and do not pose any risk. Files are submitted only once; if somebody else had already submitted them, they would not have been submitted again. Simply ignore these records or better disable logging as users tend to worry they are infected if some files get submitted just because they were interesting or suspicious to ESET for some reason.