False Positives V7

Hello,

Thanks for the feedback. Please also share a logfile showing these detections, thanks!

Herewith registry log:

***** [ Registry ] *****

PUP.Optional.SavepathDeals, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F66C7EC4-63CC-4452-A8C9-5A2E898F8EFF} PUP.Optional.SavepathDeals, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F8698E62-9284-432A-9C62-C1293A2B1DD3} Adware.BrowseFox, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{B9507101-E464-4B3B-A4CB-291AAEDD94F2} Adware.Searchbar, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{1568A0B0-9ACF-4F20-98DF-0F1525075BA1} Adware.Searchbar, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{33AA987A-C47F-4C84-AA3B-3DDB9D22C6A5} PUP.Optional.ShopToWin, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{67D688EC-87DA-4A28-BFA5-C4DB8BE5C9EA} PUP.Optional.ShopToWin, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0095C290-A428-4BDD-B98C-E0A116F1C702} PUP.Optional.ShopToWin, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{20FEC4E7-F7B7-438B-8191-33D2EFC5EBEA} PUP.Optional.ShopToWin, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{27376903-C3DA-492B-9622-E4AB4DEBBE54} PUP.Optional.StartNow, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{1BC1FC4B-B0D2-4D8D-9307-2E40E2A8C257} PUP.Optional.WebConnect, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{2316C625-B487-4410-A1A5-FF040B65245F} PUP.Optional.YahooChrome, [Key] - HKLM\SOFTWARE\Yahoo\SS PUP.Optional.BProtect, [Value] - HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing | bProtectShowTabsWelcome PUP.Optional.InfoG, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{DABA66F2-5B6F-4EF2-9257-D0AE82191297} PUP.Optional.HRSearch, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{074CBB23-DF20-45E8-B32A-C6D346FB2F46} PUP.Optional.Winsearchag, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0AEEFF1A-2239-484D-98CC-4398D0B923B8} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3EF359D7-0482-406A-8AB0-B19C3ACFD0CD} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3EF359D7-0482-406a-8AB0-B19C3ACFD0C6} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3EF359D7-0482-406a-8AB0-B19C3ACFD0C7} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3D556137-234E-4ed4-9DCF-F4F2469073E2} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3EF359D7-0482-406a-8AB0-B19C3ACFD0CF} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3EF359D7-0482-406a-8AB0-B19C3ACFD0C8} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3EF359D7-0482-406a-8AB0-B19C3ACFD0C9} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3D832BC9-918A-4a13-B231-5591BC3A60B4} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3D832BC9-918A-4a13-B231-5591BC3A60B2} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3EF359D7-0482-406a-8AB0-B19C3ACFD0C2} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3D556137-234E-4ed4-9DCF-F4F2469073E5} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3EF359D7-0482-406a-8AB0-B19C3ACFD0C1} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3D556137-234E-4ed4-9DCF-F4F2469073E3} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3D556137-234E-4ed4-9DCF-F4F2469073E7} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3EF359D7-0482-406a-8AB0-B19C3ACFD0C5} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3D556137-234E-4ed4-9DCF-F4F2469073E8} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3D556137-234E-4ed4-9DCF-F4F2469073E9} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3EF359D7-0482-406a-8AB0-B19C3ACFD0C3} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3D832BC9-918A-4a13-B231-5591BC3A60B3} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3D832BC9-918A-4a13-B231-5591BC3A60B0} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3EF359D7-0482-406a-8AB0-C3002ACFD0CD} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3D556137-234E-4ed4-9DCF-F4F2469073E4} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3D556137-234E-4ed4-9DCF-F4F2469073E6} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3D832BC9-918A-4a13-B231-5591BC3A60B1} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3D832BC9-918A-4a13-B231-5591BC3A60B5} Adware.WinsHelp, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3EF359D7-0482-406a-8AB0-B19C3ACFD0C4} Adware.Withmoa, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{46ABCABA-C7AF-49DF-92D8-A24EA2C9E9B4} PUP.Optional.UtilZone, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{1C5099DD-7923-45E8-9680-5F285DC61213}

ActiveX detection started after the new update. I am getting the same pop-ups. I can assure you it is not malware. ActiveX detections are usually guidelines for processes and services to follow. While they can be exploited, I doubt this is the case.

Since V7 I've been getting false positives on all my machines - often ones reported by others.  I suspect they are down to using SypwareBlaster.  This is an old but quite safe program which puts kill bits in the registry to prevent undesireable stuff running.  I think it would be worth installing SpywareBlaster then "enabling all protection", then see what ADWCleaner makes of it.  Thanks.

---

SWBUser, 2017-08-24 22:25:13 (UTC)

I do use SpywareBlaster and have for many, many years with All Protection Enabled. With version 7.0.1.0 of AdwCleaner I have found the same happenings as the original poster, SWBUser.

ActiveX findings, 43 of them. If I have them cleaned then upon reboot SpywareBlaster will then have 43 items with Protection Disabled. These 43 items are the exact findings by AdwCcleaner and the exact same listings shown in the log posted by SWBUser in the post above.

This obviously is caused by AdwCleaner v. 7.0.1.0. How do I set AdwCleaner to NOT flag these items? It is disabling a very good protection program. If this cannot be fixed then I shall stop using AdwCleaner and stop recommending others use it also.

Is anyone from the AdwCleaner team able to comment about this yet?

Is anyone from the AdwCleaner team able to comment about this yet?

---

SWBUser, 2017-08-29 20:09:30 (UTC)

It would be nice wouldn't it? I am solving this myself, by uninstalling AdwCleaner and not recommending it to those requesting help on a forum where I am a mod. Too bad, very good tool, one of the best for removing PUP's but not going to sacrifice SpywareBlaster's ability to block them so that AdwCleaner can mistakenly identify SpywareBlaster's blocking database protection listings as malware and disable it. I will stick with Protection I receive from SpywareBlaster and wait until somebody decides to fix this problem in AdwCleaner.

Hello,

Is anyone from the AdwCleaner team able to comment about this yet?

Yes.

Please consider using the 7.0.2.1 - https://toolslib.net/downloads/viewdownload/1-adwcleaner/

Thanks,

Hello,

Is anyone from the AdwCleaner team able to comment about this yet?

Yes.

Please consider using the 7.0.2.1 - https://toolslib.net/downloads/viewdownload/1-adwcleaner/

Thanks,

---

fr33tux, 2017-08-31 01:34:45 (UTC)

Happy to tell you that I downloaded and ran version 7.0.2.1  and it worked perfectly!

Yep, all fixed - thanks very much.  SpywareBlaster (SWB) updates its data base about every two weeks.  Can you tell me if the fix was such that it will no longer generally report SWBs preventative measures?  I fully accept that the odd false positive can happen but the quantity had become very high of late.

Just to add that SWB has just updated its data base and I've immunised the usual quantity.  Pleased to report that I ran AdwCleaner afterwards and there were no new reports.  Seems I've answered my last question.

Many thanks - pleased to see you've fixed it..