Start a Conversation

Unsolved

Closed

2 Intern

 • 

5.8K Posts

7872

April 21st, 2020 20:00

Malwarebytes Adwcleaner detects pre-installed Dell Software

This is probably not new information, but I have not run an AdwCleaner scan for some years. But since purchasing Win10 systems and finally getting around to an AdwCleaner scan (for no particular reason) I got these positive detections:

***** [ Preinstalled Software ] *****

Preinstalled.DellCustomerConnect Folder C:\Program Files (x86)\DELL CUSTOMER CONNECT
Preinstalled.DellCustomerConnect Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{04A41EBC-AB30-4574-A14D-E0CDFE31AB70}
Preinstalled.DellHelp&Support Folder C:\Program Files\DELL\DELL HELP & SUPPORT
Preinstalled.DellHelp&Support Folder C:\ProgramData\DELL\DELL HELP & SUPPORT
Preinstalled.DellHelp&Support Folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DELL\DELL HELP & SUPPORT
Preinstalled.DellHelp&Support Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8917AEA5-01A5-476F-AA27-A52EA6C94212}
Preinstalled.DellHelp&Support Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{8917AEA5-01A5-476F-AA27-A52EA6C94212}
Preinstalled.DellSupportAssistAgent Folder C:\Program Files\DELL\SAREMEDIATION\PLUGIN
Preinstalled.DellSupportAssistAgent Folder C:\Program Files\DELL\SUPPORTASSISTAGENT
Preinstalled.DellSupportAssistAgent Folder C:\ProgramData\DELL\SAREMEDIATION\PLUGIN
Preinstalled.DellSupportAssistAgent Folder C:\ProgramData\SUPPORTASSIST\CLIENT\TECHNICIANTOOLKIT
Preinstalled.DellUpdateforWindows10 File C:\Users\joe53\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Dell Update.lnk
Preinstalled.DellUpdateforWindows10 Folder C:\Program Files (x86)\DELL\UPDATE
Preinstalled.DellUpdateforWindows10 Folder C:\Program Files (x86)\DELL\UPDATESERVICE
Preinstalled.DellUpdateforWindows10 Folder C:\ProgramData\DELL\UPDATE
Preinstalled.DellUpdateforWindows10 Folder C:\ProgramData\DELL\UPDATESERVICE
Preinstalled.DellUpdateforWindows10 Folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DELL\UPDATE
Preinstalled.DellUpdateforWindows10 Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{5EBBC1DA-975F-44A0-B438-F325BCD45577}

To be fair, these Dell registry entries are not described as malware, but as "pre-installed software" that one might like to remove, following a routine on-demand scan.

My own take on these Dell Assist and Update and Help/support agents is that they are unnecessary but benign programs. They have never solved any Dell PC problems I have had, but have occasionally run random system scans I did not authorize. At worst they are a nuisance. On previous Windows operating systems I have deleted them without any regrets.

Any feedback is welcomed.

10 Elder

 • 

44.4K Posts

April 22nd, 2020 12:00

Dell SupportAssist Remediation Service has been shown to cause random ~3-5 sec freezes on the XPS 8930, so perhaps not so benign... 

1 Rookie

 • 

19 Posts

April 7th, 2021 04:00

Its showing on all new Dell  laptops.

Location: 'C:\ProgramData\Dell\SARemediation\dellsupport\apps\bin\osri\audit\audit_util.zip\PSTools/PsExec64.exe'

I dont know why Dell in this age will ship PSEXEC in their laptops when its know, it can be exploited. 

1 Rookie

 • 

3 Posts

March 1st, 2024 10:30

Dear Team,

Please update why your are using this.. 

 Location: 'C:\ProgramData\Dell\SARemediation\dellsupport\apps\bin\osri\audit\audit_util.zip\PSTools/PsExec64.exe'

sysinternal  ‘PsExec64.exe' 

 

Due to this Admin tool Detected as Potentially Unwanted Application (PUA).

10 Elder

 • 

44.4K Posts

March 1st, 2024 22:58

@Narendra001  - This is a user-to-user forum, and we won't know why Dell installed PsExec64.exe. 

Exactly which PC model do you have, what version of Windows, and what app is flagging PsExec64.exe as a PUA?  Could just be a false positive by that malware scanner...

No Events found!

Top