westtxamber wrote:
Yes it's an HP and yes thats the file that was detected. MBAM is being installed as we speak, by the avast techhnician remotely.
Hi westtxamber:
First things first. The endprocess.exe file is part of the HP Recovery Manager and is responsible for safely stopping open applications when you are trying to perform a system restore or re-install your Windows OS so it's essential that we recover this file from the Avast chest - assuming the Avast technician hasn't done so already.
I've never used Avast but there is an excellent article here in the Avast knowledge base titled Restoring a False Positive From the Virus Chest. Once the file is restored, check to make sure that you can find it on your hard drive in its original location, which is usually c:/hp/bin/ on most HP laptops (please confirm the correct location on your particluar system). According to the post by Pondus here in the Avast forum, a copy of the endprocess.exe file will remain in the chest - I would leave the copy in the chest until you are absolutely certain that it's restored properly.
If you have any problems restoring the endprocess.exe file it may be necessary to first prevent Avast from detecting the endprocess.exe as a PUP by creating a scan exclusion for this file as described here in the Avast knowledge base article On-access Protection - File Exclusion.
Once you are certain that you have the endprocess.exe restored to its original local on your hard drive, I would uninstall Avast from your Windows Control Panel (Start | Control Panel | Programs and Features) since you have decided to use NIS 2012 as your security program for now. I'm not sure what version of Avast you installed, but before uninstalling Avast you may need to disable its self -defense feature first by right-clicking the Avast "A-ball" icon in the system tray, choosing Avast! Shields Control and selecting Disable Permanently.
Uninstalling Avast (as well as security software from other manufacturers) sometimes leaves behind residual registry entries and files on the hard disk that can still interfere with your Norton product, so for good measure I would re-boot your PC after uninstalling Avast and then download run the Avast uninstall utility as instructed here to wipe it off your system. To start your laptop in Safe Mode (step 2 of the instructions) just re-boot your computer, tap the F8 key every second or so before Windows starts, and then select Safe Mode from the advanced boot options menu.
And worst case scenario - if for any reason you can't restore the endprocess.exe file correctly before uninstalling Avast, you can download a zipped copy here and extract it to your hard drive as long as you know the original location (e.g., c:/hp/bin/).
Let us know if you have any problems with the endprocess.exe restore or Avast uninstall. NIS 2012 should work fine after all this but if it starts behaving oddly after you remove Avast from your system (e.g., LiveUpdates won't install, high number of false positives detected during a NIS full system scan, etc.) let us know and we can provide step-by-step instructions on how to perform a clean re-install of NIS.
Once Avast is removed from your system check the www.curse.com site and report back if you're still having problems.
Edit:
And thanks to bjm_ for the kind words. Please jump in any time to help - all opinions and suggestions are greatly appreciated, especially since I'm not an expert when it comes to Avast.
--------
Windows Vista Home Premium 32-bit SP2 * NIS 2011 v. 18.6.0.29 * IE 9.0 * Firefox 9.0.1
HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS
