Unsolved
2 Intern
•
5.8K Posts
0
7872
Malwarebytes Adwcleaner detects pre-installed Dell Software
This is probably not new information, but I have not run an AdwCleaner scan for some years. But since purchasing Win10 systems and finally getting around to an AdwCleaner scan (for no particular reason) I got these positive detections:
***** [ Preinstalled Software ] *****
Preinstalled.DellCustomerConnect Folder C:\Program Files (x86)\DELL CUSTOMER CONNECT
Preinstalled.DellCustomerConnect Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{04A41EBC-AB30-4574-A14D-E0CDFE31AB70}
Preinstalled.DellHelp&Support Folder C:\Program Files\DELL\DELL HELP & SUPPORT
Preinstalled.DellHelp&Support Folder C:\ProgramData\DELL\DELL HELP & SUPPORT
Preinstalled.DellHelp&Support Folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DELL\DELL HELP & SUPPORT
Preinstalled.DellHelp&Support Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8917AEA5-01A5-476F-AA27-A52EA6C94212}
Preinstalled.DellHelp&Support Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{8917AEA5-01A5-476F-AA27-A52EA6C94212}
Preinstalled.DellSupportAssistAgent Folder C:\Program Files\DELL\SAREMEDIATION\PLUGIN
Preinstalled.DellSupportAssistAgent Folder C:\Program Files\DELL\SUPPORTASSISTAGENT
Preinstalled.DellSupportAssistAgent Folder C:\ProgramData\DELL\SAREMEDIATION\PLUGIN
Preinstalled.DellSupportAssistAgent Folder C:\ProgramData\SUPPORTASSIST\CLIENT\TECHNICIANTOOLKIT
Preinstalled.DellUpdateforWindows10 File C:\Users\joe53\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Dell Update.lnk
Preinstalled.DellUpdateforWindows10 Folder C:\Program Files (x86)\DELL\UPDATE
Preinstalled.DellUpdateforWindows10 Folder C:\Program Files (x86)\DELL\UPDATESERVICE
Preinstalled.DellUpdateforWindows10 Folder C:\ProgramData\DELL\UPDATE
Preinstalled.DellUpdateforWindows10 Folder C:\ProgramData\DELL\UPDATESERVICE
Preinstalled.DellUpdateforWindows10 Folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DELL\UPDATE
Preinstalled.DellUpdateforWindows10 Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{5EBBC1DA-975F-44A0-B438-F325BCD45577}
To be fair, these Dell registry entries are not described as malware, but as "pre-installed software" that one might like to remove, following a routine on-demand scan.
My own take on these Dell Assist and Update and Help/support agents is that they are unnecessary but benign programs. They have never solved any Dell PC problems I have had, but have occasionally run random system scans I did not authorize. At worst they are a nuisance. On previous Windows operating systems I have deleted them without any regrets.
Any feedback is welcomed.
RoHe
10 Elder
10 Elder
•
44.4K Posts
0
April 22nd, 2020 12:00
Dell SupportAssist Remediation Service has been shown to cause random ~3-5 sec freezes on the XPS 8930, so perhaps not so benign...
rmit
1 Rookie
1 Rookie
•
19 Posts
0
April 7th, 2021 04:00
Its showing on all new Dell laptops.
Location: 'C:\ProgramData\Dell\SARemediation\dellsupport\apps\bin\osri\audit\audit_util.zip\PSTools/PsExec64.exe'
I dont know why Dell in this age will ship PSEXEC in their laptops when its know, it can be exploited.
Narendra001
1 Rookie
1 Rookie
•
3 Posts
0
March 1st, 2024 10:30
Dear Team,
Please update why your are using this..
Location: 'C:\ProgramData\Dell\SARemediation\dellsupport\apps\bin\osri\audit\audit_util.zip\PSTools/PsExec64.exe'
sysinternal ‘PsExec64.exe'
Due to this Admin tool Detected as Potentially Unwanted Application (PUA).
RoHe
10 Elder
10 Elder
•
44.4K Posts
0
March 1st, 2024 22:58
@Narendra001 - This is a user-to-user forum, and we won't know why Dell installed PsExec64.exe.
Exactly which PC model do you have, what version of Windows, and what app is flagging PsExec64.exe as a PUA? Could just be a false positive by that malware scanner...