Windows 10: Is 1. Microsoft Update Health Tools 2. rempl 3. UNP folders in program files are Microsoft...

Hi,


Yesterday after updation of Microsoft Windows, I have noted following 3 folders in program files:


1. Microsoft Update Health Tools

2. rempl

3. UNP


Please let me know whether the above folders are valid or any of the folder is trojan virus.

If any of those folders is trojan virus then please guide on how to remove it.


Looking forward for expert advice from Microsoft Team on above concerns.


Thanks and regards

Raju

:)

 

remple folder with no remsh.exe lurking at my program files

So basically i was looking in program files only to find a folder named rempl inside that has few files and of them 2 executables run as services and 1 as a scheduled task , and it had been generating log files every 12 hours from the period 28/9 to 24/10 this year . so by googling i get to realize that its some sort of an update microsoft impose on us pre major updates to collect data out of no reason but then what concerns me really is how to get rid of it ?

PS all posts keep referring to it as remsh.exe folder , yet i dont see remsh.exe file included :

 

unp folder after creators update?

So after doing the creators update I noticed there was a folder named UNP in program files. Is it a microsoft folder or can be dangerous?

***Post moved by the moderator to the appropriate forum category.***

 

"UNP" in Program Files

There's mixed information about UNP. Some say it's a virus but it seems to be a 1909 November Update of some sort. You may be able to uninstall it or at least do something just as effective. For some reason I only have a UNP folder in my System32 folder, not in my Program Files directory. Of course, certain programs and features of Windows aren't paired with their own Uninstall.exe file to actually uninstall them. It may be listed in one of the "Uninstall" directories as a SystemComponent, in which case switching the value from 1 to 0. If it isn't listed in any of those Registry areas (listed below) then it probably just doesn't have an Uninstall.exe command combo'd with it.

If you'd like to uninstall it (or remove it, effectively), I have a few ideas for you:

Uninstall it:
-Check the Registry areas to see if it's set as a SystemComponent (1). It'd be something like "UNP" or "UNPUX*".
-Check the Event Viewer for the first occurrence of UNP and check if an update was installed around that time. If there was, roll that update back.

Effectively remove it:
-Use a Registry key finder to parse through your computer's Registry, like Nirsoft's RegScanner. Search for UNP / UNPUX and delete all that are possible.
-After that, download Explorer++, it's really good at quickly searching all subdirectories. Select your root directory and then use the Find functions (Ctrl + F) to search for "UNP" and delete all of those folders.
-If you don't have access to delete those files, download TakeOwnership from Walter Glenn's article on HowToGeek, then if needed you can edit permissions through the Security tab in the Properties for the directories and give Full Access to Everyone / your user / Administrators. Sometimes there are errors where it annoyingly says "You need permission from Everyone to...", covering those three will minimize those chances.
-It may be being used, you can use a program like Process Explorer to find out what's using it and try to end it, even if it comes down to running taskkill /f on it. If that doesn't work and you're dead-set on removing it for some reason you can always replace osk.exe with a copy of cmd.exe and run it from the Accessibility tab on the login screen after logging out or you can run rmdir command from the Advanced Startup Command Prompt.
-After that you can check scheduled tasks but they'd be pretty useless at that point, you can remove those. There's a duplicate UNP folder in WinSxS.

Hope this helps,