Kb891711.exe is the result of a security patch installed that handles the cursor and icon format handling vulnerability found in Microsoft Win98/Me. Other words -Having Windows load a large image file (bmp, cur, ico, …) leads to a memory buffer overflow and presents external sources with an opportunity to execute external code (commands) on you computer. Microsoft lists this as critical so leave it running.