Lenovo too.

It's called Windows Platform Binary Table, and lets the firmware provide an EXE for Windows to execute on boot. So even if you install a clean OS, this will run, and there is no mandatory prompt (if it's run through this approach and you see a prompt, then the software that was run was nice enough to ask, it was not Windows asking you to confirm whether that is OK).