Preinstalled.HPJumpStartApps on self-built PC?

[rexbinary]

Hello,

 

I ran AdwCleaner 7.4 on my self-built PC with an ASUS mobo and it found Preinstalled.HPJumpStartApps. I've never installed anything from HP, including any type of printer drivers. Any idea why this might show up on my PC? False positive, or something else?

AdwCleaner[S00].txt AdwCleaner[C00].txt

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the AdwCleaner Help forum.

Someone will reply shortly, but in the meantime here are a few resources which may help resolve your issue:

• AdwCleaner user guide
• A malicious element isn't being detected? Submit the sample here!
• Need help with another Malwarebytes product or malware removal?
  • Click here for home support
  • Click here for business support
  • Click here for malware removal help

Thanks in advance for your patience.

-The Malwarebytes Forum Team

[exile360]

Greetings,

It may be a false positive.  Please restore the item from quarantine assuming you have not deleted it, then perform another scan with ADWCleaner and once it shows the detection, expand the detected item using the + next to it (if there is one) and extend the UI window to show the full details of the detected item and either note it and reproduce it here or simply take a screenshot of it and post it here for review.

Thanks

[jboursier]

@rexbinary Hello!

Please refer to this blogpost to understand the scope and reasons behind those new `Preinstalled.xx` detection: https://blog.malwarebytes.com/malwarebytes-news/2019/07/your-device-your-choice-adwcleaner-now-detects-preinstalled-software/

Regards,

[rexbinary]

@exile360 There is no "+" or anything to expand unfortunately.

@fr33tux Thanks. Interesting article, but it doesn't really address finding HP bloatware on a non-HP machine.

I believe it's just a false positive. Thanks everyone.

[exile360]

I see, thanks.  You should be able to view further details by expanding the size of the window.  There should be another column there that shows the full path of the detection.  That will give us a better idea of what might be triggering the FP.  If there isn't, then you should still be able to right-click the entry and choose the option to always ignore is so that it is added to your exclusions to prevent it from being detected in future scans.

[rexbinary]

I tried both expanding the window and right-clicking. Neither exposed any further information unfortunately.

[jboursier]

@rexbinary You are right, no additional details are available for those detection (as there is on the PUP/Adware side). The only way to know more here would be with the debug logfile (Settings > Debug Mode: `On`) prior scanning, or by sharing the quarantine content (C:\AdwCleaner\Quarantine) so that we can look more into it.

Regards,

[Elisabeth]

Hi @rexbinary,

It's definitely an FP. We'll fix it for the next release. Meanwhile, you can exclude it as @exile360 suggested. If the right click doesn't work, you can exclude it from the Exclusions panel (in "Settings" menu).

Thanks!