Thank you very much for this masterpiece of software. i was infected by some kind of zeroaccess. not the original one. the one i have is not to detect with "normal" and promoted methods like tdss killer and similar. i did many research and from the traces i found, i conclude it might be zeroaccess. no one was able to help me until now. not even so called "experts". everyone told me i didnt have any issue. then i ran your program. the log showed anything suspicious i found over the last months. and it directley fixed it. restarting the machine and.. everything gone. i still can not believe it. your a genius man. the only one who could help me. you can be proud of yourself. thank you very much. greetings andi.
Ich war genervt durch das Ständige sich selbst öffnen von Werbefenstern. Außerdem mußte ich immer aufpassen, dass ich nicht zufällig über markierte Wörter mit dem Mauszeiger fuhr, direkt wurde irgendeine Werbung eingeblendet. Anfangs dachte ich, dass muß so sein, weil ich diese Werbefenster immer auf den gleichen Finanz-Nachrichtenseiten hatte. Mit dem ADW Cleaner sind diese Probleme beseitigt. Die Prozedur ging schnell und einfach von statten. Nun hoffe ich, dass das Ergebnis nachhaltig ist.
The problem remains< Hao169 malware still changes the default page back to hao169.cn through the shortcut manipulation< i tried every malware tool even spyhunter and it didn't work.
i searched the internet for a solution and i have found non.
the cause of this malware is this application: https://firedrop.com/cde80bce1d89426b
i hope the developer of this app can study it.
This Adware Cleaner is the bomb! Awesome!! It took all the junk out. Thank you Adware Cleaner.
I have a couple of false positives to report that keep getting flagged, but shouldn't be.
1. Under Scheduled Tasks, RunAsStdUser Task is C:\Program Files\GPSoftware\Directory Opus\dopus.exe
This is a legit Directory Opus entry.
2. Under Shortcuts, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeraByte Unlimited\TeraByte OSD Tool Suite Pro\Ready To Run Scripts\INISTART - Reset Windows Startup.lnk
This is a legit Terabyte Image for Windows shortcut.
hao 169 can't be removed, please check it, i'm on win10 and every time the malware changes the browsers shortcut to hao 169 webpage.
The new version is detecting this Registry Key:
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{196BB40D-1578-3D01-B289-BEFC77A11A1E}
And according with the Google "{196BB40D-1578-3D01-B289-BEFC77A11A1E}" is the product code of Visual C++ 2010 Redistributable Package (x86).
I don't know if it should detect this registry key.
version 5.114 not support remove adware from chrome / remove greatdeals, so I used version 5.108
@ibanez0r You're welcome to continue using our free version of GlassWire indefinitely. Our free software is extremely powerful on its own and it never expires or stops working. We chose to interface with the Windows Firewall API because the Windows Firewall is used by over a billion Windows users world-wide. Also we think software that disables the Windows Firewall feels sketchy to us, but maybe we're just paranoid. :)
