More false positives

Hello,

Those are partially fixed since yesterday beta, and will be fully fixed in tonight beta.

Sorry for the issue.

Best regards,

Hello, never experienced problems with ADWcleaner, what happend since you are Malwarebytes? New CEO? The beta version tells me: PUP.Optional.DriverBooster But i have bought this registered program and installed for years and is not a PUP. Maybe  for someone but nut for me. iTunes for me is a PUP but i need it for my bloody iPad.  

False positives can happen from time to time, nothing new there. If the application is interacting at a system level and is not known, it will flag that it as a potential issue. AdwCleaner getting bought by Malwarebytes did nothing but good, so I am not sure. You can report the file or software that is causing the pop-up.

Hello,

The beta version tells me: PUP.Optional.DriverBooster

---

snabbeltax, 2017-08-07 10:15:05 (UTC)

Can you share a logfile showing this?

These are still detected, they're actually related to a music application too called MASCHINE by Native Instruments and pose no threat,

where as the registry detections are immunization entries created by either Spybot S&D or SpywareBlaster. Checked this several times over.

Would it be better to use the beta for now then ?

Try using the beta, see if that elevate the false positives. However, if your software is obtained in illegitimate ways (I know music software can get quite expensive), it might have some form of virus or malware attached to it. You can never discount the possibility.

Cheeky monkey :P I paid for this thanks lol.

Yes you're right :) Better to save up and buy! best way.

The beta doesn't show the false positives any more

the only thing it shows now are the immunization entries

and they are

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{B9507101-E464-4B3B-A4CB-291AAEDD94F2} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{2316C625-B487-4410-A1A5-FF040B65245F} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{D77AA852-DEF3-43CB-A3F5-BD679DE72F32} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F66C7EC4-63CC-4452-A8C9-5A2E898F8EFF} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F8698E62-9284-432A-9C62-C1293A2B1DD3} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}

Cheers! have a good day.

Hello,

Can you share the whole logfile please? (including the header)

Thanks,

Hello. Sure.

# AdwCleaner 7.0.2.0 - Logfile created on Wed Aug 23 17:39:18 2017 # Updated on 2017/29/08 by Malwarebytes # Database: 08-22-2017.2 # Running on Windows 7 Ultimate (X64) # Mode: scan # Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{B9507101-E464-4B3B-A4CB-291AAEDD94F2} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{2316C625-B487-4410-A1A5-FF040B65245F} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{D77AA852-DEF3-43CB-A3F5-BD679DE72F32} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F66C7EC4-63CC-4452-A8C9-5A2E898F8EFF} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F8698E62-9284-432A-9C62-C1293A2B1DD3} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

Hello,

The beta version tells me: PUP.Optional.DriverBooster

---

snabbeltax, 2017-08-07 10:15:05 (UTC)

Can you share a logfile showing this?

---

fr33tux, 2017-08-23 00:30:14 (UTC)

# AdwCleaner 7.0.2.0 - Logfile created on Mon Aug 07 10:03:39 2017 # Updated on 2017/29/08 by Malwarebytes  # Database: 08-06-2017.2 # Running on Windows 10 Pro (X64) # Mode: scan # Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

PUP.Optional.DriverBooster, C:\Users\Henk\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Driver Booster.lnk

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

Plugin found: MapsGalaxy - 

/!\ Please Reset the Chrome Synchronization before cleaning the Chrome Preferences: https://support.google.com/chrome/answer/3097271 

*************************

C:/AdwCleaner/AdwCleaner[C10].txt - [2737 B] - [2017/2/20 14:46:36] C:/AdwCleaner/AdwCleaner[C11].txt - [3227 B] - [2017/3/20 11:30:28] C:/AdwCleaner/AdwCleaner[C12].txt - [2945 B] - [2017/5/20 14:40:23] C:/AdwCleaner/AdwCleaner[C1].txt - [4305 B] - [2015/11/23 11:42:58] C:/AdwCleaner/AdwCleaner[C2].txt - [1447 B] - [2015/12/2 15:1:8] C:/AdwCleaner/AdwCleaner[C3].txt - [1954 B] - [2015/12/25 11:10:55] C:/AdwCleaner/AdwCleaner[C4].txt - [9841 B] - [2016/9/23 8:12:57] C:/AdwCleaner/AdwCleaner[C5].txt - [6859 B] - [2016/9/29 9:8:47] C:/AdwCleaner/AdwCleaner[C6].txt - [6001 B] - [2016/10/11 8:24:43] C:/AdwCleaner/AdwCleaner[C7].txt - [6711 B] - [2016/10/29 12:0:7] C:/AdwCleaner/AdwCleaner[C8].txt - [5175 B] - [2016/11/6 11:23:8] C:/AdwCleaner/AdwCleaner[C9].txt - [10616 B] - [2017/2/7 16:49:36] C:/AdwCleaner/AdwCleaner[S10].txt - [5281 B] - [2016/11/6 11:18:29] C:/AdwCleaner/AdwCleaner[S11].txt - [10390 B] - [2017/2/7 16:46:52] C:/AdwCleaner/AdwCleaner[S12].txt - [2907 B] - [2017/2/20 14:31:7] C:/AdwCleaner/AdwCleaner[S13].txt - [3285 B] - [2017/3/20 11:29:40] C:/AdwCleaner/AdwCleaner[S14].txt - [3141 B] - [2017/5/20 14:39:4] C:/AdwCleaner/AdwCleaner[S1].txt - [4048 B] - [2015/11/23 11:41:35] C:/AdwCleaner/AdwCleaner[S2].txt - [1298 B] - [2015/12/2 14:59:41] C:/AdwCleaner/AdwCleaner[S3].txt - [1775 B] - [2015/12/25 11:8:53] C:/AdwCleaner/AdwCleaner[S4].txt - [12030 B] - [2016/9/23 8:11:15] C:/AdwCleaner/AdwCleaner[S5].txt - [9269 B] - [2016/9/29 9:7:58] C:/AdwCleaner/AdwCleaner[S6].txt - [3266 B] - [2016/10/8 10:14:17] C:/AdwCleaner/AdwCleaner[S7].txt - [8234 B] - [2016/10/11 8:22:23] C:/AdwCleaner/AdwCleaner[S8].txt - [6217 B] - [2016/10/29 11:47:5] C:/AdwCleaner/AdwCleaner[S9].txt - [6290 B] - [2016/10/29 11:48:52]

########## EOF - C:\AdwCleaner\AdwCleaner[S14].txt ##########

Yesterday the Windows 10 machine from my wife was scanned by 7.0.1.0 and referred Zylom games and TryMedia as suspicious. Removal of it all led to no gaming anymore because these files (and dirs) are apearently necessary to run and check validation of the Zylom Games. Such a shame because a noob does not understand that.  

# AdwCleaner 7.0.1.0 - Logfile created on Mon Aug 21 19:08:44 2017 # Updated on 2017/05/08 by Malwarebytes  # Database: 08-17-2017.2 # Running on Windows 10 Home (X64) # Mode: scan # Support: https://www.malwarebytes.com/support

***** [ Services ] *****

PUP.Adware.Heuristic, syncagentsrv ***** [ Folders ] *****

PUP.Optional.Legacy, C:\ProgramData\Trymedia PUP.Optional.Legacy, C:\ProgramData\Application Data\Trymedia PUP.Optional.Legacy, C:\Users\All Users\Trymedia PUP.Adware.Heuristic, C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 ***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

Adware.TryMedia, [Key] - HKLM\SOFTWARE\Trymedia Systems Adware.Wajam, [Key] - HKLM\SOFTWARE\WInterEn ***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

Plugin found: MapsGalaxy - 

/!\ Please Reset the Chrome Synchronization before cleaning the Chrome Preferences: https://support.google.com/chrome/answer/3097271  *************************

C:/AdwCleaner/AdwCleaner[C0].txt - [4083 B] - [2017/8/10 18:35:18] C:/AdwCleaner/AdwCleaner[S0].txt - [1063 B] - [2015/1/29 19:53:46] C:/AdwCleaner/AdwCleaner[S1].txt - [4360 B] - [2017/8/10 18:33:16]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt ##########

Hello,

These detections are not FPs - please refer to this page to ask for changes.

Best regards,

You know that, i know that, but a schoolstudent does not. As a servicedeskmanager i have been promoting adwcleaner for years on our schools but now it's causing confusion among collegues and other cliënts when adwcleaner is stating that there might be a problem or maybe something is a PUP while there isnt anything wrong. I understand there's a behavior pattern wich puts it in a categorie for malware scanners labelled a "be carefull" or a "maybe" but thats not what we want do we? The fact that TryMedia is labelled as PUP gives me a reason to remove all instances related to this. It turns out this is a importan part of Zylom games. For instance: the removal of the regkey and all the folders of TryMedia resulted in a not-working Zylom game and we had to reinstall or buy again. Luckily for my wife i just restored the folders from the recycle bin and the game was executed again. This is a small example where things can go wrong but in the situation where i am in my recording studio and use many VST's with Cubase or Native Instruments(like member whatisit stated above here) to produce music for groups and artists i don't want these suggestions from Adwcleaner. I hope you understand that not everybody is an expert in IT of heuristic behavior patterns and things should be carefully examined before flagging an entry in the rootkit or elsewere in regkey's. kind regards, Henk Scheerooren