Potential false positives?

Hi

I'm running the latest version of ADW cleaner and got this back as my report.

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.CrossRider, C:/Users\Gamefan\AppData\Roaming\app

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

...

False positives?

Are these keys FPs? Could someone verify this? Thank you.

# AdwCleaner 7.0.0.0 - Logfile created on Sun Jul 23 10:21:28 2017 # Updated on 2017/17/07 by Malwarebytes # Database: 07-16-2017.1 # Running on Windows 7 Home Premium (X86) # Mode: scan # Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders...

Re: Can I remove these folders/keys safely with adware cleaner?

PUP is a potentially unwanted program. Basically, something that comes with bundleware or through other sources. As fr33tux mentioned, you should just remove them and not worry about it much. In general, if you see something with WARE in scans, it is some form of malware.

Many Bugs 7.0.1.0

Hello, firstly, thanks for this amazing tool

 

I can't see the Quarantine items (file(s)/folder(s)/registry etc..)

 

I  see that message(every scan)

2017-07-22 21:35:20.459 DEBUG [4180] [MainUI::buttonScanClicked@292] [i] Scan button clicked (-31986)
2017-07-22 21:35:20.463 DEBUG [2356] [MainUI::Entry@1241] [+] Checking for update...
2017-07-22 21:35:21.399 DEBUG [2356] [AdwCleanerSDK...

Re: Version 7 FPs (262 elements)

Hello,

  1. Download FRST 
  2. Download fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

Run FRST/FRST64 and press the...

Re: Version 7 FPs (262 elements)

Hello,

As you can see in the logfile, the database is not up-to-date:

# Database: 07-16-2017.1

So it means that AdwCleaner was not able to retrieve the latest database version online. That's why fr33tux is asking about the proxy.

Re: Version 7 FPs (262 elements)

I have no proxies on either machine.

Just updated and ran scan - still same result as yesterday as below - 280 entires found!

The Chrome entries found are simply my personalisations for the Chrome start up page! Should definately not be selected or cleaned!

# AdwCleaner 7.0.0.0 - Logfile created on Fri Jul 21 08:26:44 2017 # Updated on 2017/17/07 by Malwarebytes # Database: 07-16-2017.1 # Ru...

V7 tools/options changes not sticking in both Win 7 and Win 10

The latest version 7 options changes are not sticking. Wth Win 7 the tools/options window which opens does not have an Okay or reset button and any changes made dont even stick for the immediate scan ie the delete tracing keys and reset the Winsock cannot be changed even though the ticks can be removed as soon as the options window is closed and then reopended the ticks are back. Then Win 10 to...

Re: PUP.Legacy.Optional - 3 Threats Identified

Thanks for the feedback. The first time browser reset to duck was after identifying and removing 2 unwanted objectes (PUP.LEGACY.OPTIONAL). The second time it happened, however, was after the next safe mode scan in which no unwanted objects were detected. 

Re: PUP.Legacy.Optional - 3 Threats Identified

Hello,

It's not a browser hijack, it's the search-engine setting that AdwCleaner set after removing a malicious one. This will be back to google.com by default, with a dropdown in the Options UI to choose between seevral search engines.

Just to be sure, you say that Duckduckgo has been set even if you didn't get any Chrome or Firefox detections?