Avast - Is This A False Positive?

[polonus]

Well PUPs are potentially unwanted programs, a term invented by MacAfee's to keep them apart from general malware, these files can be classified as riskware and are malware only then when they have landed onto your computer unintentionally, so you have not installed the tool yourself or intentionally or it came bundled with another program or was placed there by a hacker for malicious purposes. It could be compared to a hammer, that can be either used to sculpt and beautify or to ruin and destruct. So you are the best judge as to exclude it or remove it and to decide on the status of it. The flag was only to warn you about the nature of the tool, executable, program, file...

polonus

[stumped2011]

what if deleted this item. I had the same hit and deleted. It is an HP computer?

[DavidR]

It is gone then, depending on the actual location and file name ?
If it were in the recovery partition it may well be protected. (you would have to check and see if it is still in the original location).

Deletion isn't really a good first option (you have none left), 'first do no harm' don't delete, send virus to the chest (a protected area) and investigate.

There is no rush to delete anything from the chest, a protected area where it can do no harm. Anything that you send to the chest you should leave there for a few weeks. If after that time you have suffered no adverse effects from moving these to the chest, scan them again (inside the chest) and if they are still detected as viruses, delete them.

[stumped2011]

Yes I know, mouse sliped and clicked the wrong option and followed through ewith the action with out thinking. Can the file be found somewhere on the net do you know?

[DavidR]

Not unless you have some deleted items recovery tool.

Since we don't know a) what the file name was or b) where it was located, we don't know if a replacement can be downloaded or if it can be restored to what might be a protected area.

[Ecomikex]

I had the problem, and contacted HP. I was told it ( EndProcess.exe )is system restoration tool that is shipped on the Compaq and HP computers. The file is located here C:\HP\BIN\

If the file has been moved and or renamed it may have been hijacked and corrupted for malicious purposes, other wise it is a false positive.

[DavidR]

Well had you read the full topic including my first reply you wouldn't have need to get on to HP.

Go searching for PUPs in scans and expect to find some.

[lakrsrool]

No it isn't a false positive, you appear to have included the option to scan for PUPs (Potentially Unwanted Programs) and possibly didn't know the impact of that choice. This executable is designed to kill processes so it can be used for good or evil and that intent/purpose isn't something an AV can really decide.

The Full System Scan I suspect that you have changed the default settings as I mentioned and the right click scan has different settings.

No this was the "default setting" apparently since I've changed NOTHING.

[DavidR]

I refer you back to my reply in the other topic in which you also posted this, http://forum.avast.com/index.php?topic=65799.msg809838#msg809838.