Seems to have been happening for awhile for geekbuddy
https://malwaretips.com/blogs/comodo-geekbuddy-removal/
Maybe your users can uncheck the removal of geekbuddy before cleaning, If they are sure it was installed for a legitimate program and not bundled with other software as mentioned in the article
Just a suggestion. Since the adware is known as Interstat (as is your software) change the installation of your software to InterstatSAS or something besides just Interstat. Might help.
Ok, I think I get it. InterStat seems to be also the name of a known adware...
We are Interstat SAS (France) and have nothing to do with the adware one. I personally use AdwCleaner for some years now, and it never interfered with our legit softwares. A recent update in the detection base seems to target our softwares too now.
%appdata%\Interstat
HKCU\Softwares\Interstat
What should we do...
Hi,
I'm working with Interstat, a marketing research firm developping a suite of suite of Excel Add-Ins for our customers. It is similar as tools such as xlStats if you will.
Our softwares are not distributed to the general public but only to our licensed customers. I just noticed that Our registry keys and application path are flagged in the latest version of ADWcleaner.
%appdata%\Inter...
Suite des opérations.
Dans "Google dashboard" le synchronisation devait etre désynchroniser si j'en juge par la ligne au bas deman dant si on veut "redémarrer la synchronisation". Je n'ai donc rien touché sur cette page.
J'ai fait l'analyse avec adw cleaner dont voici le rapport. Comme il se doit le pc a été redémarrer les fenetres malwaresbytes antimalware réapparaissent.
rapport adw cleane...
Depuis quelque temps avec adwcleaner j'ai toujours ces fichiers à éradiquer après ce résultat
ces fichiers sont supprimés mais ils reviennent toujours.
# AdwCleaner v5.023 - Rapport créé le 02/12/2015 à 16:22:45
# Mis à jour le 30/11/2015 par Xplode
# Base de données : 2015-11-30.1 [Serveur]
# Système d'exploitation : Windows 7 Professional Service Pack 1 (x64)
# Nom d'utilisateur : max - MA...Here's the Report after running the ZHPFix tool, but didn't select the ZHPFix REMOVAL while it was running. Was I right?
Script ZHPFix: O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {0099B484-C24C-4D5F-8167-B0F6DF196E72} © HKLM\SOFTWARE\Wow6432Node\McAfee HKLM\SOFTWARE\Wow6432Node\Safer Networking Limited HKCU\SOFTWARE\BitDefender HKCU\SOFTWARE\McAfe...
Here's the Report after running the ZHPFix tool, but didn't select the ZHPFix while it was running. Was I right?
Script ZHPFix:
O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {0099B484-C24C-4D5F-8167-B0F6DF196E72} ©
HKLM\SOFTWARE\Wow6432Node\McAfee
HKLM\SOFTWARE\Wow6432Node\Safer Networking Limited
HKCU\SOFTWARE\BitDefender
HKCU\SOFTWARE\McAfee
P2 - EX...here is AdwCleaner[S0]:
# AdwCleaner v4.106 - Report created 21/12/2014 at 17:33:54
# Updated 21/12/2014 by Xplode
# Database : 2014-12-21.4 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : Albert - JEAN
# Running from : C:\Users\Albert\Downloads\adwcleaner_4.106 (1).exe
# Option : Clean
***** [ Services ] *****
[#] Service Deleted : CltMngSvc Service Deleted : netfilter64
[#...Hello,
Please repeat what you did with Chapi with ZHPFix, but using the following content :
Script ZHPFix:
O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {0099B484-C24C-4D5F-8167-B0F6DF196E72} ©
HKLM\SOFTWARE\Wow6432Node\McAfee
HKLM\SOFTWARE\Wow6432Node\Safer Networking Limited
HKCU\SOFTWARE\BitDefender
HKCU\SOFTWARE\McAfee
P2 - EXT: (...) -- C:\Progr...