Needing help with scan results please (Solved)

[queenslander]

Having done a full scan there were four results that said they were suspicious with the explanation "Alternative data stream"
What does that mean?

The possible actions listed and not greyed out were Extract, Delete, and Go to OASIS.
Delete I understand ( see I am a bit clever :) ) but not the other two.

The fifth one was KillWind.exe that I set to Run Safer as it appears to be a HP program reputed to be variously (after a google search) -
a)to allow HP techs access to help with problems,
b) to enable software updates or -
c) a possible spyware/virus/adaware program

advice varied from leave it there to delete it immediately.

Anyone have any concrete, irrefutable certainty about what to do with it?

[catprincess]

Hi Queenslander,

You need to extract the alternate data streams to a temporary folder (ie you could create a new folder on your desktop) and then scan this folder with ++. OA can't scan the ADS, it can only detect them, but once you've extracted them it can scan them. If this scan comes up clean then they should be safe :)

With your killwind file, did you see what OASIS says about it?

[queenslander]

Hi Queenslander,

You need to extract the alternate data streams to a temporary folder (ie you could create a new folder on your desktop) and then scan this folder with ++. OA can't scan the ADS, it can only detect them, but once you've extracted them it can scan them. If this scan comes up clean then they should be safe :)

With your killwind file, did you see what OASIS says about it?

Thank you for the first part.

Re the second part it said
c:\hp\KillWind.exe\RiskWare.RiskTool.Win32.psKill. p!2

[queenslander]

What does Go to OASIS mean - as in what happens/needs to be done when I get there

[catprincess]

What does Go to OASIS mean - as in what happens/needs to be done when I get there

It opens the OASIS page for the file in question and allows you to look over the details that OASIS has on this file.

I'm sorry I didn't reply further about Killwind. I thought I had done so, but obviously it slipped my mind. It would seem to be a HP related software utility (possibly installed with Backweb) like you mentioned earlier. If your computer isn't under warranty then you could likely uninstall Backweb if you wanted to. Otherwise I'd just leave it as it's not doing any harm, and mark it as trusted and OA ++ will stop detecting it :)

[queenslander]

Ta muchly for that

[catprincess]

You're welcome, Queenslander :)