Search

hi Several weeks ago a had an issue with malware in Firefox and CHROME.

I opened a thread in this german Firefox forum: http://www.camp-firefox.de/forum/viewtopic.php?f=1&t=114723

We tried several times to remove the malware with some tools (ADW cleaner and tools like MBAM and JRT).

It didnt work so the moderators told me to refresh firefox (see https://support.mozilla.org/en-US/kb/refresh-f...

Hello, can you please check if the following Firefox extensions are really Ad/Malware.

More Tools Menu 1.2.4.1-signed see also http://www.systemlookup.com/FF_Extensions/2151-9a7a67d3_3048_47fb_acde_d0f7ae51f86a_xpi.html

and

Super Drag 0.15.1-signed see also http://www.systemlookup.com/FF_Extensions/3197-superdrag_enjoyfreeware_org_xpi.html

Part of AdwCleaner Log

# AdwCleaner v5.023 - Beri...

Hello,

Can you provide the GeekBuddy detections from AdwCleaner ?

As rufus415 said, GeekBuddy is often bundled with other software and installed without any user consent. If you are a Product Manager, I hope that you'll take note of this remark and stop to distribute GeekBuddy using such a tendancious way.

Regards,

Bonjour Maxjules.

Pour commencer, on va faire l'export du dossier d'Extensions de Google Chrome.

• Via l'explorateur, rends toi ici :

  C:\Users\max\AppData\Local\Google\Chrome\User Data\Default\

• Ensuite fais un clic droit sur le dossier "Extensions", sélectionne "Envoyez-vers" puis "Dossier compressé".
• Un fichier Extensions.zip est alors créé.
• Rends toi sur up2sha.re.
• Héberge ce fichier ...

Ok, I think I get it. InterStat seems to be also the name of a known adware...

We are Interstat SAS (France) and have nothing to do with the adware one. I personally use AdwCleaner for some years now, and it never interfered with our legit softwares. A recent update in the detection base seems to target our softwares too now. 

%appdata%\Interstat

HKCU\Softwares\Interstat

What should we do...

Hello,

We'll use MBAM to remove some stuff, and then clean the remainings with ZHPFix like you did with Chapi if needed :

• Launch MalwareByte's Anti Malware from your desktop
• Click on the tab Settings -> Detection & Protection -> PUP/PUM and check "Treat these detections like malware".
• Tab Exam choose Threats, click on Scan now, and click on Launch the exam.
• If something is detected, cho...

Hello,

AdwCleaner has two functions to avoid problems with false detections, first it has a scan only method, that allow us to see what it will delete, and second, it has a quarantine function for when a mistake occcured.

I'm here to help you, and to be sure that all items detected by AdwCleaner must be delete, I will need more data about them. So can you post us the entire log file ?

You ca...

Bonjour,

Pour toutes les personnes ayant le souci de détection, le problème a été corrigé. Le numéro de version n'a pas changé, le problème ne concernant qu'une (petite) partie des utilisateurs.

Le lien de téléchargement : https://toolslib.net/downloads/viewdownload/1-adwcleaner/

Ensuite, en cas de doute sur ce qui doit/ne doit pas être supprimé, postez l'intégralité des rapports d'analyse g...

Bonjour,

Afin que nous puissions corriger d'éventuels problèmes de détections, merci de fournir les rapports intégraux (C:\AdwCleaner\), sinon nous ne pouvons rien faire..

Bonjour,

Comme promis, la détection a été supprimée de Norton AV il y a quelques heures :

Upon further analysis and investigation we have verified your submission and, as such, the detection(s) for the following file(s) will be removed from our products:

	3BC8A1F156BCB1EBB190418FCDA4739D - adwcleaner_5.021.exe

Cordialement,