How to Investigate Unexpected Microsoft SharePoint Software on PC
Question details
The user needs to resolve an issue where Microsoft SharePoint runs unexpectedly in the background and reappears after being deleted, likely caused by downloading files from an unfamiliar website.

- Product
- Microsoft SharePoint
- Device & OS
- not provided
- Scenario
- The user downloaded software from an unknown source and subsequently noticed persistent, suspicious background activity labeled as Microsoft SharePoint.
- Observed behavior
- Microsoft SharePoint appears to run automatically in the background and continuously reinstalls or returns even after the user attempts to delete it.
Before proceeding with any system scans, save your current work and temporarily disconnect your PC from the internet to prevent potential malware from communicating with remote servers.
Run a Full System Malware Scan
Use a trusted anti-malware application to detect and remove potentially unwanted programs (PUPs) or malware that may be disguising themselves as Microsoft SharePoint.
Malicious programs often use legitimate application names, such as Microsoft SharePoint, to hide in the background and avoid detection by the user. If you did not install SharePoint and it keeps returning, a deep system scan is necessary.
Open your web browser and navigate to the official Malwarebytes website (malwarebytes.com) to download the free version of the software.
Locate the downloaded installation file, double-click it, and follow the on-screen prompts to install the program on your computer.
Launch Malwarebytes from your desktop or Start menu, and click on the 'Scan' button to initiate a comprehensive check of your system files and background processes.
Allow the scan to finish completely. Once done, review the list of detected threats, click 'Quarantine' to neutralize them, and restart your computer to apply the changes.

Switch to WPS Office for a Safe and Lightweight Experience
If you are concerned about bloated software, unexpected background processes, or complex Office installations, consider switching to WPS Office. It provides a secure, all-in-one suite without unnecessary background tasks.
- 1. Download WPS Office: Visit the official WPS website and click the download button to get the free, lightweight installer.
- 2. Install the Suite: Run the setup file and follow the quick installation guide to securely install WPS Office on your PC.
- 3. Open Your Documents: Launch WPS Office and instantly open your existing Microsoft Word, Excel, and PowerPoint files without any format loss.

Frequently Asked Questions
Why does Microsoft SharePoint keep running in the background?
Legitimate SharePoint or OneDrive for Business installations run background sync processes to keep your files up to date. However, if you never installed it, malware might be using the 'SharePoint' name to operate undetected.
Can malicious software disguise itself as Microsoft SharePoint?
Yes. Cybercriminals frequently name their malicious processes after legitimate Microsoft services, such as SharePoint or svchost, to bypass user suspicion and prevent manual deletion.
How do I permanently uninstall legitimate Microsoft SharePoint?
You can remove it by navigating to Windows Settings > Apps > Apps & features, locating Microsoft SharePoint or Microsoft Office, and clicking 'Uninstall'. If the program persistently returns, it is highly likely to be a malware infection rather than the genuine application.




