Bonjour,
Le répertoire protected créé par une de mes applications est systématiquement mis en quarantaine. Est-ce normal ?
Ci-après un extrait du log:
# AdwCleaner v4.112 - Logfile created 18/03/2015 at 18:01:18
# Updated 09/03/2015 by Xplode
# Database : 2015-03-15.1 [Server]
# Operating system : Windows 7 Enterprise Service Pack 1 (x64)
# Username : XXXXXXX - XXXXXXXXXXXX
# Running from : C:\My Program Files\adwcleaner_4-112_fr_430277.exe
# Option : Cleaning
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\Users\XXXXXXX\Documents\protected
***** [ Scheduled tasks ] *****
…
Par avance merci de votre aide.
AdwCleaner works really well. Thank you! It would be great if you could add SimpleHelp 4.2 Remote Access service to the whitelist. I get disconnected from the remote computer during the cleaning process. This is remote support software similar to TeamViewer and others. Thank you!
@sweetytoktok - Try 'TDSSKiller' from Kaspersky Lab. http://support.kaspersky.com/viruses/disinfection/5350
what is the best tool to remove rootkits ???
because adw-cleaner didn't succeed in removing them from my computer :(
As far as I can see from log,it looks like scanning is stuck at Pale Moon.
IE11 and Firefox 36 are scanned.Everything was fine 7 days ago.Maybe something is wrong with
database.
@anonsubmitter, yes you are right. But, most free software downloaded on the Web come bundled up with useless crapware anyway. The YTD downloader box, if you don't want the app, can easily be unchecked while installing your main program. Unckeck all boxes for programs unrelated to the main program. If you need YTD or Hotspot Shield, they have a website where you can get them. No need to be bundled up to anything. They are already very popular. They both can be uninstalled very easily from Programs & Features, so they should not be removed by AdwCleaner. Removing Hotspot Shield this way messes up the Internet connection.
For those who don't usually pay attention while installing software, a program like Unchecky could be very useful. That way, you won't be flooding the malware removal forums all over the Web.
http://unchecky.com/
OK! Issue solved! I had knowingly installed the iSafe Key-logger on that computer. This is supposedly invisible to cleaners and registry. AdwCleaner removed the invisible iSafe folder but not its registry entries. That caused instability in the system, probably related to the specificity of the key-loggers. Restoring the iSafe folder from within the AdwCleaner Quarantine Manager solved the issue. No need to do anything in the registry. I hope this helps!
False positives (it's a legitimate VPN extension):
C:\Users\User\AppData\Local\Hola
HKLM\SOFTWARE\Google\Chrome\Extensions\ncffjdbbodifgldkcbhmiiljfcbgjag
If I remember correctly there's also a false positive for the Hola Unblocker Firefox add-on. However, the Firefox add-on stopped working for me - possibly due to AdwCleaner cleaning away files needed for it to work - and re-installing it doesn't help, so I can't submit a report for that add-on. The add-on can be installed from here if anyone wants to have a look at it: http://hola.org/
Hi again, I found the reports at C:\AdwCleaner. You may find them on the same link http://1drv.ms/16uCsum
Concerning the uninstall procedure I explained below, the pictures were actually from the Quarantine Manger. Thanks!
@cocochepeau Hi, As, after AdwCleaner requested to restart the computer after scan and clean, I was not able to log in anymore into the standard account from where I ran AdwCleaner, Therefore I didn't get the report, but I guess it should still be somewhere on my computer. I ran again AdwCleaner but with starting the scan, just to see if it sees the report, but the Report button is grayed out. I downloaded several versions of AdwCleaner, so I may not ran the same version. I don't know if that matters. On the other hand, if I press uninstall (without actually starting the uninstall) I see the files from the quarantine, but not the changes made to the registry. For the files you may take a look at: http://1drv.ms/16uCsum
