Re: AdwCleaner dont remove mail.ru progs on WinXP

Hello,

What makes you say that these software are malicious and have to be removed ?

Re: AdwCleaner dont remove mail.ru progs on WinXP

because these programs are installed along with other necessary programs, and are not removed through Add or Remove Programs applet setup

Re: AdwCleaner dont remove mail.ru progs on WinXP

AdwCleaner and now finds and removes it, for example log

# AdwCleaner v5.201 - Logfile created 12/08/2016 at 09:07:29
# Updated 30/06/2016 by ToolsLib
# Database : 2016-08-12.1 [Server]
# Operating system : Microsoft Windows XP Service Pack 3 (X86)
# Username : User - A75751305
# Running from : C:\Documents and Settings\User\Desktop\adwcleaner_5.201.exe
# Option : Scan
# Support : https://toolslib.net/forum

***** [ Services ] *****

Service Found : Updater.Mail.Ru

***** [ Folders ] *****

Folder Found : C:\Documents and Settings\All Users\Application Data\Mail.Ru
Folder Found : C:\Program Files\Mail.Ru

***** [ Files ] *****


***** [ DLL ] *****


***** [ WMI ] *****


***** [ Shortcuts ] *****

Shortcut Infected : C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk ( hxxp://start.webalta.ru )
Shortcut Infected : C:\Documents and Settings\All Users\Desktop\Opera.lnk ( hxxp://start.webalta.ru )

***** [ Scheduled tasks ] *****


***** [ Registry ] *****

Key Found : HKLM\SOFTWARE\Clients\StartMenuInternet\amigo.exe
Key Found : HKLM\SOFTWARE\Clients\StartMenuInternet\Amigo.SC6QBJT2RBLIXCXIAUHQJLU27M
Key Found : HKLM\SOFTWARE\Classes\nsWebAlta.WebAltaSearchBar
Key Found : HKCU\Software\Classes\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29161}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FE704BF8-384B-44E1-8CF2-8DBEB3637A8A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{8E8F97CD-60B5-456F-A201-73065652D099}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E8F97CD-60B5-456F-A201-73065652D099}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FE704BF8-384B-44E1-8CF2-8DBEB3637A8A}
Key Found : HKCU\Software\Mail.Ru
Key Found : HKCU\Software\Amigo
Key Found : HKLM\SOFTWARE\Mail.Ru
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Webalta Toolbar
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebaltaService
Key Found : HKU\.DEFAULT\Software\Mail.Ru
Key Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Mail.Ru
Key Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Amigo
Key Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater
Key Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Uninstall\Webalta Toolbar
Key Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo
Key Found : HKU\S-1-5-18\Software\Mail.Ru
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{61EB20A4-D4D5-4276-A2C9-DCCE8CE9F633}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}
Key Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Microsoft\Internet Explorer\SearchScopes\{61EB20A4-D4D5-4276-A2C9-DCCE8CE9F633}
Key Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [MailRuUpdater]
Value Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run [MailRuUpdater]

***** [ Web browsers ] *****


*************************

C:\AdwCleaner\AdwCleaner[S1].txt - [3498 bytes] - [12/08/2016 09:07:29]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [3571 bytes] ##########

 

Re: AdwCleaner dont remove mail.ru progs on WinXP

1) The folders will be deleted and the files as well.

2) There were no shortcuts on my test system and that's why they are not in the log. Otherwise they would be deleted.

If AdwCleaner don't delete those files on your system:

1) Check that you use the latest version of the program and please share the whole logfile.

2) Please write what files are not deleted.