cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Community Guide

Microsoft.store wants to connect to the internet

For the last several days I've started getting a Webroot popup that says that "Microsoft.store followed by some numbers with dashes and maybe some letters" wants to connect to the internet and is not trusted. There are 5-7 of these that you have to click through...EVERY day.

Is anybody else seeing this?

I'm never really sure if I should allow these requests or not. I tried searching the web first to see if the file should be trusted. But nothing came up that was applicable to my search. I do know if I open the Microsoft store, that the boxes will be empty, so they requests do seem to be related to the store...which I never use I might add. I may someday...but I haven't yet.

But why do I have to allow these things everyday? I'm not saying it's Webroot's fault. No doubt it's something Microsoft has done.And yes, I've clicked on Always Allow.

10 REPLIES
Bronze VIP

Re: Microsoft.store wants to connect to the internet

Yes I have seen the same and it's because Microsoft Updated the files in connection to the Microsoft Store so i wouldn't worry! Here is one line I see in my scan log: Fri 2018-08-03 16:51:16.0757 Monitoring process C:\Program Files\WindowsApps\Microsoft.WindowsStore_11807.1001.13.0_x64__8wekyb3d8bbwe\WinStore.App.exe [DC7D4999963D8CE95672FEACDEC6CDA5]. Type: 1 (3990)

 

And it's still unknown to the Webroot Cloud Database.

 

2018-08-04_12-25-19.png

 

HTH,

 


Daniel Bow.gif  “Truth is more of a stranger than fiction.” (Mark Twain)


 EPA.giforiginal (6).png   


original.png Microsoft® Windows Insider MVP - Windows Security beta_tester_transparent.png


Alienware 17R5 Laptop with the new i9-8950HK Processor Overclock-able to 5.0GHz - 2 Samsung 960 Pro PCIe NVMe M.2 512GB + 1 Samsung 860 Pro 512GB SSD's with 32GB of G.SKILL Ripjaws RAM and NVIDIA GTX 1080 GPU Overclocked. Windows 10 Pro for Workstations 1809 x64.

Bronze VIP

Re: Microsoft.store wants to connect to the internet

WSA just did a scan and it's still Unknown to the Webroot Cloud Database:

 

Sat 2018-08-04 12:56:47.0722 Monitoring process C:\Program Files\WindowsApps\Microsoft.WindowsStore_11807.1001.13.0_x64__8wekyb3d8bbwe\WinStore.App.exe [DC7D4999963D8CE95672FEACDEC6CDA5]. Type: 1 (3990)
Sat 2018-08-04 12:59:00.0675 Monitoring process C:\Program Files\WindowsApps\Microsoft.WindowsStore_11807.1001.13.0_x64__8wekyb3d8bbwe\WinStore.App.exe [DC7D4999963D8CE95672FEACDEC6CDA5]. Type: 1 (3990)

 


Daniel Bow.gif  “Truth is more of a stranger than fiction.” (Mark Twain)


 EPA.giforiginal (6).png   


original.png Microsoft® Windows Insider MVP - Windows Security beta_tester_transparent.png


Alienware 17R5 Laptop with the new i9-8950HK Processor Overclock-able to 5.0GHz - 2 Samsung 960 Pro PCIe NVMe M.2 512GB + 1 Samsung 860 Pro 512GB SSD's with 32GB of G.SKILL Ripjaws RAM and NVIDIA GTX 1080 GPU Overclocked. Windows 10 Pro for Workstations 1809 x64.

Community Guide

Re: Microsoft.store wants to connect to the internet

Thanks, TripleHelix. For the information and glad to know I'm not the only one getting this.

Bronze VIP

Re: Microsoft.store wants to connect to the internet

Always and anytime! Smiley Wink

 

Cheers,

 


Daniel Bow.gif  “Truth is more of a stranger than fiction.” (Mark Twain)


 EPA.giforiginal (6).png   


original.png Microsoft® Windows Insider MVP - Windows Security beta_tester_transparent.png


Alienware 17R5 Laptop with the new i9-8950HK Processor Overclock-able to 5.0GHz - 2 Samsung 960 Pro PCIe NVMe M.2 512GB + 1 Samsung 860 Pro 512GB SSD's with 32GB of G.SKILL Ripjaws RAM and NVIDIA GTX 1080 GPU Overclocked. Windows 10 Pro for Workstations 1809 x64.

Bronze VIP

Re: Microsoft.store wants to connect to the internet

Maybe @DanP can get this file white-listed for us?

 

2018-08-06_15-37-42.png

 


Daniel Bow.gif  “Truth is more of a stranger than fiction.” (Mark Twain)


 EPA.giforiginal (6).png   


original.png Microsoft® Windows Insider MVP - Windows Security beta_tester_transparent.png


Alienware 17R5 Laptop with the new i9-8950HK Processor Overclock-able to 5.0GHz - 2 Samsung 960 Pro PCIe NVMe M.2 512GB + 1 Samsung 860 Pro 512GB SSD's with 32GB of G.SKILL Ripjaws RAM and NVIDIA GTX 1080 GPU Overclocked. Windows 10 Pro for Workstations 1809 x64.

Threat Researcher

Re: Microsoft.store wants to connect to the internet

This is a bit of an unusual case, otherwise it would already be whitelisted...  I'm having it looked into. 

 

-Dan

Webroot Threat Research
Bronze VIP

Re: Microsoft.store wants to connect to the internet


@DanP wrote:

This is a bit of an unusual case, otherwise it would already be whitelisted...  I'm having it looked into. 

 

-Dan


True and it's not an area that we can open easily.

 

2018-08-07_17-15-32.png2018-08-07_17-16-06.png

 


Daniel Bow.gif  “Truth is more of a stranger than fiction.” (Mark Twain)


 EPA.giforiginal (6).png   


original.png Microsoft® Windows Insider MVP - Windows Security beta_tester_transparent.png


Alienware 17R5 Laptop with the new i9-8950HK Processor Overclock-able to 5.0GHz - 2 Samsung 960 Pro PCIe NVMe M.2 512GB + 1 Samsung 860 Pro 512GB SSD's with 32GB of G.SKILL Ripjaws RAM and NVIDIA GTX 1080 GPU Overclocked. Windows 10 Pro for Workstations 1809 x64.

Threat Researcher

Re: Microsoft.store wants to connect to the internet

I did hear back on this one, it is not typical, but if you scan it with WSA, it will show as Good:

 

[G] c:\users\danp\desktop\e15db4473202686cf529d71b926d0ab892a715221b7193528db11427a773421b [SHA256: E15DB4473202686CF529D71B926D0AB892A715221B7193528DB11427A773421B] [MD5: DC7D4999963D8CE95672FEACDEC6CDA5] [Flags: 00090000.3645]


The system does consider the file to be whitelisted, but it may continue to show as Unclassified when looked up using the MD5 lookup. 

 

@Kev914 - Are you still seeing the "wants to connect to the internet and is not trusted" messages? Please let us know.

 

-Dan

Webroot Threat Research
Community Guide

Re: Microsoft.store wants to connect to the internet

No. I think the last time it happened was yesterday morning.

 

Thank you.