I wonder if there's more distinct Changelog about what got fixed, specially with false positives!
Previous version crippled me with Chrome where it tought that the ScriptBlock addon was a threat.
Dear Xplode!
I LOVE AdwCleaner it helps me a lot! I love that it first kills almost all processes in order to do a good job after. In older versions it terminated the TeamViewer applications process too but I noticed that now it trusts TV so it leavs it alone. This is great! As I understand there is a "whitelist" for apps that won't be terminated before a clean? If so I would like to propose a new addition to this list: Ammyy. Ammyy is just like TV: a legit remote admin app. It has a free version also I think a lot of people use it. Sometimes I user it instead of TV but now I can't run Adw through it because then I "close my self out" of the computer: without "local" user interaction I won't be able to get back in the computer after I click ADW Clean. Their website: http://www.ammyy.com/en/
What do you think? Thanks for your answer in advance and KEEP UP THE GOOD WORK! Thank you in the name of all the users of ADW!
Bonjour,
je viens de mettre à jour le logiciel adwcleaner et je viens d'effectuer une analyse.
est ce que la clé se situant dans le registre est un faux positif ?
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet setting
merci d'avance pour votre réponse
Bonjour,
AdwCleaner v4.110 et la nouvelle version v4.111 mentionnent 3 clés appartenant à AVS dont je reprend le contenu partiel ci-dessous.
[HKEY_LOCAL_MACHINESOFTWAREWow6432NodeClassesCLSID{28C02550-6572-401a-A2AE-5BC703C9BBA6}InprocServer32]
@="C:Program Files (x86)Common FilesAVSMediaActiveXAVSAudioDXPlayer3.dll"
[HKEY_LOCAL_MACHINESOFTWAREWow6432NodeClassesCLSID{A1CCCE0D-AE21-42A2-BE58-8E6109410995}InprocServer32]
@="C:Program Files (x86)Common FilesAVSMediaActiveXAVSAudioDxPlayer4.dll"
[HKEY_LOCAL_MACHINESOFTWAREWow6432NodeClassesCLSID{CD4D7B0F-45C6-4bb2-A1E7-54D1754E7FC5}InprocServer32]
@="C:Program Files (x86)Common FilesAVSMediaActiveXAVSAudioDXTransform3.dll"
Je pense qu'il s'agit de faux positifs car ces clés semblent nécessaires.
D'avance merci
Voilà un mini-programme pour se débarrasser de logiciels espions en un minimum de temps ! Un grand merci !
Malheur à ceux qui ont été habituée à utiliser un logiciel espion…
Hélas, il enlève aussi par défaut deux modules bien utiles: HTML Validator sur Firefox et New Tab Redirect sur Chrome (cela dit, peut-être effectivement malveillants).
Oui, il suffit de décocher les lignes, mais encore faut-il connaître avant la première suppression la correspondance de la ligne avec le logiciel ou module…
@anonsubmitter
At least the hackers were stupid enough to not make it identical... Unfortunately, idiots will fall for it, as usual...
Hola tengo infectado el ordenador con un nuevo virus, y no tengo forma de eliminarlo con ningun antivirus, a ver si podeis ayudarme por favor, se ha instalado en los navegadores, cuando abro el browser me sale esta pagina http://search.noticiastime.org/ , buscando por google esta misma pagina, ni si quiera la encuentra, espero que puedan ayudar, saludos y gracias por el programa.
Just downloaded to update my version, but can't run it because Norton antivirus detects a thread and deletes it immediately. The threat is identified as 'Suspicious.Cloud.7.EP'.
Not sure if this is a false positive, but don't want to take a chance on it. Please verify the software, clean it if necessary and update the download link (or post a note). Txs.
The following entries are false positives:
C:\Documents and Settings\User\Application Data\ProgSense (included with some software to look for updates - nothing malicious or deceiving)
C:\Documents and Settings\User\Application Data\Simple Adblock (adblocker now known as Adblock Plus knowingly installed by user for Internet Explorer)
C:\Documents and Settings\User\Local Settings\Application Data\Hola (knowingly installed by user)
HKCU\Software\ProgSense (included with some software to look for updates - nothing malicious or deceiving)
HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762} (belongs to ZoomBrowser EX, a Canon camera utility)
The following are proxy settings knowingly added by user:
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - socks=localhost:1234
Thanks in advance for correcting the issue.
@marie54 Vous pouvez toujours désactiver la protection résidente d'Avast pendant l'utilisation d'AdwCleaner. Sinon, d'ici quelques jours, vous devriez pouvoir télécharger cette version. Les versions récentes d'AdwCleaner sont très souvent détectées à tort pendant quelques temps après la mise en ligne de celles-ci.
