New
#1
Is Microsoft Taking Stealth Screenshots For 'Feedback' Purposes?
I've just discovered a folder, in the pictures folder, called 'Feedback' which contained a sub-folder with a GUID for a name. This sub-folder contained a screenshot called Capture001.png.
Something like:
C:\Users\Nus\Pictures\Feedback\{B2367SDG-3AF8-84KN-NBUJ-K89W37Y844HJK}\Capture001.png
It was created a week ago and I know exactly what I was doing at the time the folders and screenshot were created: organising files in File Explorer.
I can only find one other occurrence of this in Google search, here. The MS tech gives a generic response about scanning for viruses.
I have all the known MS feedback, spy and telemetry stuff disabled. Which is what makes me think that this is happening on other systems in a stealthy fashion, as part of the 'feedback' programme -- the stealth obviously failed here, perhaps because of my hacks.
No other applications, besides File Explorer, were running at the time; no background apps, no 3rd-party services. System has been scanned with MBAM since and was clean. Pressing WINKEY + PrtScr takes a screenshot that goes in a Pictures\Screenshot folder.
Has this happened to anyone else?
Do you know how this scenario can be recreated?
Any other explanations, theories, thoughts?