Hello, I'd like to report a false positive

# AdwCleaner v6.000 - Logfile created 15/08/2016 at 01:08:43
# Updated on 12/08/2016 by ToolsLib
# Database : 2016-08-15.1 [Server]
# Operating System : Windows 7 Ultimate  (X64)
# Username : Gamefan - GAMEFAN-PC
# Running from : C:\Users\Gamefan\Desktop\adwcleaner_6.000.exe
# Mode: Scan
# Support : https://toolslib.net/forum

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious keys found.

***** [ Shortcuts ] *****

No infected shortcut found.

***** [ Scheduled Tasks ] *****

No malicious task found.

***** [ Registry ] *****

Key Found:  HKLM\SOFTWARE\Classes\ColaBrowser.LHExplorerBar
Key Found:  HKLM\SOFTWARE\Classes\ColaBrowser.LHExplorerBar.1

***** [ Web browsers ] *****

No malicious Firefox based browser items found. No malicious Chromium based browser items found.

 

I checked the 2 registry keys it found in regedit both belong to HP Smart Web Printing, legit software that works with my HP printer

did a websearch on this CLSID  (I think thats what it's called), associated with it

{555D4D79-4BD2-4094-A395-CFC534424A05}

And it's also associated with HP Smart Web Printing.

Any way to whitelist this?

Re: ADW False postiive registry reporting

If you need a file name or so

hpswp_bho.dll. I did a websearch and saw a filename associated with that CLSID as well

found it on

https://forums.techguy.org/threads/my-windows-7-64-bit-desktop-is-infected-with-malware.1088456/

line:

EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\Hp\Digital Imaging\Smart Web Printing\hpswp_bho.dll

Again, it's legit HP software thats on the installation disc that came with my printer

Re: ADW False postiive registry reporting

Greetings,

I've fixed these FP. They should no longer be detected, can you confirm it?

Thanks!

Regards.

Re: ADW False postiive registry reporting

Yep it's been removed from the detections so adwcleaner didn't find anything.

 

Thank you!