This morning, a folder icon stayed visible above every window and would not disappear. The night before, I had connected my phone to the computer to copy photos and other files, while also playing a game through Steam and watching videos. I assumed the icon was just a display glitch, so I restarted the computer. Instead of restarting normally, the BIOS screen appeared and began installing several updates without asking me first, including a Flash update for the main firmware, an Intel Management Engine firmware update, and an OEM embedded-controller firmware update. The computer then shut down, rebooted, and seemed to work normally. I have owned it for about six years and have never seen firmware updates happen this way. Could this indicate malware or someone compromising the computer, and what should I do to check?
3 Answers
Those updates can be delivered through Windows Update or the computer manufacturer's update utility. Firmware updates may be staged in Windows and then applied automatically during the next restart, especially after being postponed for a while. The names you saw sound like motherboard firmware components rather than typical malware activity. Check Windows Update history and your manufacturer's support page to see whether the firmware versions match official releases.
Make sure the firmware update names and versions correspond to your exact computer or motherboard model. Look in the BIOS update history, Windows Update history, and the manufacturer's support tools. If the system is stable and the files came from the official update process, there is usually no need to reflash anything manually. Change important passwords and review recent account activity only if you find other warning signs, such as unknown programs, disabled security tools, or unexplained account logins.
Connecting your phone is unlikely to have triggered a BIOS update by itself. If you did not install software from an untrusted source, this is more likely an automatic OEM or Windows firmware update than a compromise. Still, run a full scan and an offline scan for reassurance. In Windows Security, open Virus & threat protection, choose Scan options, select Microsoft Defender Offline scan, and start it; the computer will restart and scan before Windows loads.
I did not knowingly install anything unusual, although the unexpected firmware screen made me concerned because I had just copied files from my phone. I will check the update history and run the offline scan.