Potentially Unwanted Program Blocked!

[djr]

Hi!

I recently installed McAfee Internet Security on an older HP Pavilion about a week ago.

After the first full scan yesterday the scan found a 'pup' called RemAdm-PSKill from c:\HP\Bin\Killwind.exe. I understand this pup program is old and been around for some time. F/what I understand, this is supposedly not a virus but a 'tool' used by HP in order to remotely control your HP computer in the event you need HP tech support. My computer is 5 yrs. old and out of warranty so I will not be needing HP tech support. I read,however, that this type of program could be hijacked and used for malicious intent. I quarantined it but now I keep getting periodic alerts f/McAfee that RemAdm-PSKill has been blocked from c:\system volume information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP267\A0049930.exe.

How can I stop the above alerts for this annoying program?

DJR.

[djr]

I just found another link on here where Ex-brit recommended to temporarily disable system restore and re-boot and it s/b gone!

Would that work in this case?

Another user decided to just 'trust' it since it was indicated by some to be an HP tool

What should I do?

DJR.

[k3tg]

I would suggest you try what ExBrit recommended

[djr]

Hi Tom,

Sorry for the late reply! After further research on this particular 'potentially unwanted program' I decided to just 'trust' this program. It  appears to be an HP program tool that may have more than one component.

My understanding is this particular program is a legit HP program used by HP tech support that was pre-installed on my computer when new, should I ever need HP tech support. I don't need HP tech support anymore as my computer is out of warranty. F/what I've read so far, this program may have something to do w/HP updates and also appears to be tied to system restore. My previous security software never detected this program so its been on my computer for yrs. I just think McAfee is set more aggressive in detecting these kinds of programs, which is good. At least it gives you a chance to check out a program that you would have otherwise not known about! In this particular case I don't think its anything to worry about so I will just leave it alone IMO.

Cheers,

DJR

[Dinz]

Hello DJR,

Need not to worry, since McAfee has quaratined it becasue when  a file is quarantined, there are 3 things that VirusScan does to render the file virtually harmless.  – The file is encrypted with an algorithm that can only be decrypted by VirusScan.. (ii) The extension of the file is changed to .VIR and the file is locked. ; (iii) The file is moved to the quarantine directory.

Regards,