I've been getting this security risk alert frequently (multiple times a day sometimes and at startup). I have had Norton remove it, rebooted, and it returns. I have run Malwarebytes and it hasn't found anything other than tracking cookies. Is it related to McAfee, which was hidden in an Adobe update and which I removed? Is it a false positive? If not, I'd appreciate advice on how to get rid of it . I'm running a PC with Windows 7 and here is the report from the last instance. Thanks.
Filename: framepkg.exe
Threat name: SONAR.Heuristic.120
Full Path: Not Available
____________________________
Details
Very Few Users, Mature, Risk High
Origin
Downloaded from
Unknown
Activity
Actions performed: 19
____________________________
On computers as of
11/2/2014 at 12:00:32 PM
Last Used
11/2/2014 at 12:00:32 PM
Startup Item
No
Launched
Yes
____________________________
Very Few Users
Fewer than 5 users in the Norton Community have used this file.
Mature
This file was released more than 31 days 5 months ago.
High
This file risk is high.
SONAR Protection monitors for suspicious program activity on your computer.
____________________________
Source: External Media
Source File:
framepkg.exe
__________________________
File Actions
File: c:\programdata\dell\kace\kbots_cache\packages\kbots\242\ framepkg.exe Removed
File: c:\windows\temp\mcafeelogs\ frminst_judith-pc.log Removed
File: c:\windows\temp\mfe7c12.tmp\ __temp.zip Removed
Directory: c:\windows\temp\ mcafeelogs Removed
Directory: c:\windows\temp\ mfed4cb.tmp No Action Required
Directory: c:\windows\temp\ mfe7c12.tmp Removed
____________________________
System Settings Actions
Event: Process start (Performed by c:\programdata\dell\kace\kbots_cache\packages\kbots\242\framepkg.exe, PID:2256) No action taken
(Performed by c:\programdata\dell\kace\kbots_cache\packages\kbots\242\framepkg.exe, PID:2256) No action taken
Event: PE file creation: c:\windows\temp\mfed4cb.tmp\ cabinet.dll (Performed by c:\programdata\dell\kace\kbots_cache\packages\kbots\242\framepkg.exe, PID:2256) No action taken
Event: PE file creation: c:\windows\temp\mfed4cb.tmp\ cleanup.exe (Performed by c:\programdata\dell\kace\kbots_cache\packages\kbots\242\framepkg.exe, PID:2256) No action taken
Event: PE file creation: c:\windows\temp\mfed4cb.tmp\ frminst.exe (Performed by c:\programdata\dell\kace\kbots_cache\packages\kbots\242\framepkg.exe, PID:2256) No action taken
Event: PE file creation: c:\windows\temp\mfed4cb.tmp\ mfeagent.msi (Performed by c:\programdata\dell\kace\kbots_cache\packages\kbots\242\framepkg.exe, PID:2256) No action taken
Event: Process start: c:\windows\temp\mfed4cb.tmp\ frminst.exe, PID:3492 (Performed by c:\programdata\dell\kace\kbots_cache\packages\kbots\242\framepkg.exe, PID:2256) No action taken
Event: Process start: c:\programdata\dell\kace\kbots_cache\packages\kbots\242\ framepkg.exe, PID:2256 (Performed by c:\programdata\dell\kace\kbots_cache\packages\kbots\242\framepkg.exe, PID:2256) No action taken
Event: Process start (Performed by c:\programdata\dell\kace\kbots_cache\packages\kbots\242\framepkg.exe, PID:1536) No action taken
(Performed by c:\programdata\dell\kace\kbots_cache\packages\kbots\242\framepkg.exe, PID:1536) No action taken
Event: PE file creation: c:\windows\temp\mfe7c12.tmp\ cabinet.dll (Performed by c:\programdata\dell\kace\kbots_cache\packages\kbots\242\framepkg.exe, PID:1536) No action taken
Event: Process start: c:\programdata\dell\kace\kbots_cache\packages\kbots\242\ framepkg.exe, PID:1536 (Performed by c:\programdata\dell\kace\kbots_cache\packages\kbots\242\framepkg.exe, PID:1536) No action taken
____________________________
Suspicious Actions
(Performed by c:\programdata\dell\kace\kbots_cache\packages\kbots\242\framepkg.exe, PID:2256) No action taken
____________________________
File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available