Malwarebytes Adwcleaner detects pre-installed Dell Software

Question

This is probably not new information, but I have not run an AdwCleaner scan for some years. But since purchasing Win10 systems and finally getting around to an AdwCleaner scan (for no particular reason) I got these positive detections: ***** [ Preinstalled Software ] ***** Preinstalled.DellCustomerConnect Folder C:\Program Files (x86)\DELL CUSTOMER CONNECTPreinstalled.DellCustomerConnect Registry HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{04A41EBC-AB30-4574-A14D-E0CDFE31AB70}Preinstalled.DellHelp&Support Folder C:\Program Files\DELL\DELL HELP & SUPPORTPreinstalled.DellHelp&Support Folder C:\ProgramData\DELL\DELL HELP & SUPPORTPreinstalled.DellHelp&Support Folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DELL\DELL HELP & SUPPORTPreinstalled.DellHelp&Support Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8917AEA5-01A5-476F-AA27-A52EA6C94212}Preinstalled.DellHelp&Support Registry HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{8917AEA5-01A5-476F-AA27-A52EA6C94212}Preinstalled.DellSupportAssistAgent Folder C:\Program Files\DELL\SAREMEDIATION\PLUGINPreinstalled.DellSupportAssistAgent Folder C:\Program Files\DELL\SUPPORTASSISTAGENTPreinstalled.DellSupportAssistAgent Folder C:\ProgramData\DELL\SAREMEDIATION\PLUGINPreinstalled.DellSupportAssistAgent Folder C:\ProgramData\SUPPORTASSIST\CLIENT\TECHNICIANTOOLKITPreinstalled.DellUpdateforWindows10 File C:\Users\joe53\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Dell Update.lnkPreinstalled.DellUpdateforWindows10 Folder C:\Program Files (x86)\DELL\UPDATEPreinstalled.DellUpdateforWindows10 Folder C:\Program Files (x86)\DELL\UPDATESERVICEPreinstalled.DellUpdateforWindows10 Folder C:\ProgramData\DELL\UPDATEPreinstalled.DellUpdateforWindows10 Folder C:\ProgramData\DELL\UPDATESERVICEPreinstalled.DellUpdateforWindows10 Folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DELL\UPDATEPreinstalled.DellUpdateforWindows10 Registry HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5EBBC1DA-975F-44A0-B438-F325BCD45577} To be fair, these Dell registry entries are not described as malware, but as 'pre-installed software' that one might like to remove, following a routine on-demand scan. My own take on these Dell Assist and Update and Help/support agents is that they are unnecessary but benign programs. They have never solved any Dell PC problems I have had, but have occasionally run random system scans I did not authorize. At worst they are a nuisance. On previous Windows operating systems I have deleted them without any regrets. Any feedback is welcomed.

RoHe · Answer

Dell SupportAssist Remediation Service has been shown to cause random ~3-5 sec freezes on the XPS 8930, so perhaps not so benign...

rmit · Answer

Its showing on all new Dell laptops.

Location: 'C:\ProgramData\Dell\SARemediation\dellsupport\apps\bin\osri\audit\audit_util.zip\PSTools/PsExec64.exe'

I dont know why Dell in this age will ship PSEXEC in their laptops when its know, it can be exploited.

Narendra001 · Answer

Dear Team,

Please update why your are using this..

Location: 'C:\ProgramData\Dell\SARemediation\dellsupport\apps\bin\osri\audit\audit_util.zip\PSTools/PsExec64.exe'

sysinternal ‘PsExec64.exe'

Due to this Admin tool Detected as Potentially Unwanted Application (PUA).

RoHe · Answer

@Narendra001 - This is a user-to-user forum, and we won't know why Dell installed PsExec64.exe.

Exactly which PC model do you have, what version of Windows, and what app is flagging PsExec64.exe as a PUA? Could just be a false positive by that malware scanner...

Virus & Spyware

Was this post helpful?