I would like to personally thank you guys, I have had a nasty piece of adware on my pc for a long time, and I had finally snapped! I couldn't find any help online, then someone discreetly commented adwcleaner! I could not believe this didn't come up anywhere else and it instantly solved my problem! Thanks alot.
BTW - The adware was called DNS.Keeper. Brutal stuff!
@Xplode..This is probably one of the best programs that I have used and has helped me so much when dealing with all those annoying ads on multiple browsers. This program has always worked for me whether I am using Windows.7 or 8; however, I ran into an issues when I was dealing with some malware called "DNS Unlocker." Your program actually removed all the software that was related with "DNS Unlocker," but it was unable to revert the changes that it did. "DNS Unlocker" actually modified my TCP/IPv4 settings and set it from automatic to a custom IP address. It took me a while to figure out why I still had coupon pop ups when I was visiting different sites. I believe since the creator of "DNS Unlcoker" made it possible to change your settings, he might be redirecting traffic through his server which allows him to capture all ID and passwords for any user. Is there a way you might be able to implement a setting on your program to set the TCP/IPv4 settings, which are located under your Network adapter settings, back to default, which would be automatic? This would be so awesome!
Download the latest version 4.113... still cannot remove the infected registry keys below....
secman.DLL\
HKLM\SOFTWARE\Classes\AppID\
secman.OutlookSecurityManager.1\
HKLM\SOFTWARE\Classes\
secman.OutlookSecurityManager\
HKLM\SOFTWARE\Classes\
secman.DLL\
HKLM\SOFTWARE\Classes\Wow6432Node\AppID\
Anyone could help in rolling back what AdwCleaner did to my registry, please? See the issues described below! Adwcleaner reports can be seen at http://1drv.ms/16uCsum. Thanks!
The following entries are false positives:
C:\Documents and Settings\User\Application Data\ProgSense (included with some software to look for updates - nothing malicious or deceiving)
C:\Documents and Settings\User\Application Data\Simple Adblock (adblocker now known as Adblock Plus knowingly installed by user for Internet Explorer)
C:\Documents and Settings\User\Local Settings\Application Data\Hola (knowingly installed by user)
HKCU\Software\ProgSense (included with some software to look for updates - nothing malicious or deceiving)
HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762} (belongs to ZoomBrowser EX, a Canon camera utility)
The following are proxy settings knowingly added by user:
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - socks=localhost:1234
Thanks in advance for correcting the issue.
Hi again, I found the reports at C:\AdwCleaner. You may find them on the same link http://1drv.ms/16uCsum
Concerning the uninstall procedure I explained below, the pictures were actually from the Quarantine Manger. Thanks!
@cocochepeau
Here are most of the entries I could find. I believe the Hotspot Shield drivers might be the culprit. One user had a driver inside Device Manager. Replacing that driver with one from another working computer seems to have corrected the connection issue.
Folder Deleted : C:\ProgramData\hotspot shield
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hotspot shield
Folder Deleted : C:\Program Files (x86)\hotspot shield
Folder Deleted : C:\Windows\SysWOW64\hotspot shield
File Deleted : C:\Windows\System32\drivers\taphss6.sys
File Deleted : C:\Windows\System32\drivers\hssdrv6.sys
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\hotspotshield
Key Deleted : HKLM\SOFTWARE\hotspotshield
Key Deleted : HKCU\Software\anchorfree
Folder Found : C:\Users\Sid\AppData\Roaming\hotspot shield
Folder Found : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\hotspot shield
The only virus here is the "behind the keyboard device". It's not a virus, don't believe people who even don't really realize what is a definition/signature. This saved me tons of work. Keep the good job.
just like to say thank you your cleaner sorted my p.c out i had been plagued with ads and i couldn't get rid of them so after watching a clip on you tube i came straight to your website and downloaded your cleaner.I couldn't believe it worked and it was so simple to use now i'm ad free and everything is running fine now
@cam & @mjcampbell2 It's a false positive.
Get Malwarebytes for powerful protection against adware and threats.
Get Malwarebytes Now