Major difficulties with AdwCleaner v. 7.0.3.1

I am helping a friend clean a grossly infected computer. Windows 10. Uses McAfee AV.

He ran Malwarebytes 3 without difficulty and it cleaned with no problem at all. I do have the log if needed but cannot find a way to attach the text file

He then attempted to use AdwCleaner v. 7.0.3.1 but it would not complete cleaning and received a box with notification that a problem had stopped the clean....

Re: Problème erreur avec ADWCleaner

Bonjour,

Pouvez-vous partager le rapport d'analyse de AdwCleaner ?

Merci.


cocochepeau, 2017-09-22 16:56:49 (UTC)

Bonsoir, 

Je vous partage le rapport ........... ;)  Toujours le même problème au nettoyage.  

# AdwCleaner 7.0.2.1 - Logfile created on Fri Sep 22 18:52:08 2017 # Updated on 2017/29/08 by Malwarebytes  # Database: 09-20-2017.1 # Running on Windows 10 Enterprise Insider Previ...

Re: Can anyone help me identify if any of these deleted registry keys are essential

Greetings,

First of all, sorry for the late answer.

Can you share the scan logfile as well? Thanks.

Regards.


cocochepeau, 2017-09-19 06:55:31 (UTC)

# AdwCleaner 7.0.2.1 - Logfile created on Sun Sep 10 01:05:26 2017 # Updated on 2017/29/08 by Malwarebytes  # Database: 09-08-2017.1 # Running on Windows 7 Home Basic (X64) # Mode: scan # Support: https://www.malwarebytes.com/support

***** [...

Can anyone help me identify if any of these deleted registry keys are essential for windows?

# AdwCleaner 7.0.2.1 - Logfile created on Sun Sep 10 01:06:01 2017 # Updated on 2017/29/08 by Malwarebytes  # Running on Windows 7 Home Basic (X64) # Mode: clean # Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

Deleted: C:\Users\lenovo\AppData\Local\Bundled software uninstaller Deleted: C:\Users\lenovo\AppData\Ro...

Re: Is this a false positive?

on AdwCleaner by Nec

The fact that this is Spanish(Maybe?) makes it very VERY difficult to read.... Any way you could turn it into English? On the first glance noticed some things that MIGHT be potential issues, unsure, cause..... I am not yet used to reading the logs, and different language doesn't help the issue :)


JoshRoss, 2017-09-07 14:26:07 (UTC)

Of course sorry.

If you see something that is not translat...

Re: Is this a false positive?

on AdwCleaner by Nec

Ports, applications, accessibility. Maybe your other device is used a lot less, you haven't messed with any ports or have any applications that require forwarding. Honestly, very weird issue, I would need to investigate the files. Can you scan your PC With Farbar MiniToolBox and Malwarebytes JRT? Post the logs that you get.


JoshRoss, 2017-09-06 13:16:38 (UTC)

MiniToolBox by Farbar  Version...

Re: Did AdwCleaner Remove Required Registry Files?

Thanks John! That is reassuring. Do you think you could check about the files for another computer of mine? I just want to be sure that the registry will be okay.

 

# AdwCleaner 7.0.1.0 - Logfile created on Sat Aug 26 17:28:02 2017 # Updated on 2017/05/08 by Malwarebytes  # Database: 08-25-2017.1 # Running on Windows 10 Home (X64) # Mode: scan # Support: https://www.malwarebytes.com/support

...

Re: False Positives V7

Herewith registry log:

***** [ Registry ] *****

PUP.Optional.SavepathDeals, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F66C7EC4-63CC-4452-A8C9-5A2E898F8EFF} PUP.Optional.SavepathDeals, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F8698E62-9284-432A-9C62-C1293A2B1DD3} Adware.BrowseFox, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\A...

Re: More false positives

Hello. Sure.

# AdwCleaner 7.0.2.0 - Logfile created on Wed Aug 23 17:39:18 2017 # Updated on 2017/29/08 by Malwarebytes # Database: 08-22-2017.2 # Running on Windows 7 Ultimate (X64) # Mode: scan # Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files...

Re: More false positives

Cheeky monkey :P I paid for this thanks lol.

Yes you're right :) Better to save up and buy! best way.

The beta doesn't show the false positives any more

the only thing it shows now are the immunization entries

and they are

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{B9507101-E464-4B3B-A4CB-291AAEDD94F2} PUP.Optional.Legacy, [Key] - HKLM\SOF...