Re: My First Post: Are These Internet Explorer\ActiveX Compatibility Entries False Positives

Thanks, I much appreciate the input... It would also be much appreciated if one of the administrators would chime in on this topic to verify that all the "ActiveX Compatibility" registry entries are truly FP's, and if so will there be an update to correct this.

In the thread, "False Positives V7" by, SWBUser, his log file also contains a long list of  "ActiveX Compatibility" registry entries a...

Re: False Positives V7

ActiveX detection started after the new update. I am getting the same pop-ups. I can assure you it is not malware. ActiveX detections are usually guidelines for processes and services to follow. While they can be exploited, I doubt this is the case.

Re: My First Post: Are These Internet Explorer\ActiveX Compatibility Entries False Positives

ActiveX detections are usual FP's. Try doing an additional scan with Malwarebytes to confirm that. But I am fairly certain that these should not be detected. According to the internet and research that I did, ActiveX sets guidelines for processes, it can be exploited to some degree, but Adwcleaner would have removed them if found.

Re: False Positives V7

Herewith registry log:

***** [ Registry ] *****

PUP.Optional.SavepathDeals, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F66C7EC4-63CC-4452-A8C9-5A2E898F8EFF} PUP.Optional.SavepathDeals, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F8698E62-9284-432A-9C62-C1293A2B1DD3} Adware.BrowseFox, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\A...

Re: False Positives V7

Hello,

Thanks for the feedback. Please also share a logfile showing these detections, thanks!

False Positives V7

Since V7 I've been getting false positives on all my machines - often ones reported by others.  I suspect they are down to using SypwareBlaster.  This is an old but quite safe program which puts kill bits in the registry to prevent undesireable stuff running.  I think it would be worth installing SpywareBlaster then "enabling all protection", then see what ADWCleaner makes of it.  Thanks.

My First Post: Are These Internet Explorer\ActiveX Compatibility Entries False Positives

# AdwCleaner 7.0.1.0 - Logfile created on Thu Aug 24 18:42:33 2017

# Updated on 2017/05/08 by Malwarebytes # Database: 08-22-2017.4 # Running on Windows 7 Professional (X64) # Mode: scan # Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

...

Re: False positives?

Still that same single result...

***** [ Registry ] *****

PUP.Optional.Legacy, [Data] - HKCU\Software\Microsoft\Internet Explorer\Main | ImageStoreRandomFolder [mv9xu40]

Re: More false positives

You know that, i know that, but a schoolstudent does not. As a servicedeskmanager i have been promoting adwcleaner for years on our schools but now it's causing confusion among collegues and other cliënts when adwcleaner is stating that there might be a problem or maybe something is a PUP while there isnt anything wrong. I understand there's a behavior pattern wich puts it in a categorie for ma...