The following entries are false positives:
C:\Documents and Settings\User\Application Data\ProgSense (included with some software to look for updates - nothing malicious or deceiving)
C:\Documents and Settings\User\Application Data\Simple Adblock (adblocker now known as Adblock Plus knowingly installed by user for Internet Explorer)
C:\Documents and Settings\User\Local Settings\Application Data\Hola (knowingly installed by user)
HKCU\Software\ProgSense (included with some software to look for updates - nothing malicious or deceiving)
HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762} (belongs to ZoomBrowser EX, a Canon camera utility)
The following are proxy settings knowingly added by user:
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - socks=localhost:1234
Thanks in advance for correcting the issue.
bonjour meme avec la version 4.110 il y a toujours un faux positif pour le logiciel IDM (Internet Download Manager http://www.internetdownloadmanager.com/download.html ) si on supprime les clé de registre affichés cela demande ensuite de reinstaller IDM et on a toujours ce faux positif Rapport pour IDM:
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0055C089-8582-441B-A0BF-17B458C2A3A8}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0055C089-8582-441B-A0BF-17B458C2A3A8}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{0055C089-8582-441B-A0BF-17B458C2A3A8}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}
Clé Trouvée : [x64] HKLM\SOFTWARE\Classes\CLSID\{0055C089-8582-441B-A0BF-17B458C2A3A8}
Clé Trouvée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}
egalement faux positif pour les logiciel Lastpass https://lastpass.com/misc_download2.php et faux positif pour le logiciel Driver Genius http://www.driver-soft.com/
Actually, I get the same behavior on a newly created standard account: welcome, black screen and then logging off. I have Windows 7 Pro 64 bit. Thanks!
Hi, After running AdwCleaner and reboot I cannot log anymore in into my standard Windows 7 account, I get a black screen and then it makes log off. This is an account without password protection. I ran AdwCleaner from inside that standard account, by entering the admin password when asked. Luckily, I can still log in into my admin account. Is there anything to fix this issue? If not, can I undo what AdwCleanr did? Thanks!
@cocochepeau
Here are most of the entries I could find. I believe the Hotspot Shield drivers might be the culprit. One user had a driver inside Device Manager. Replacing that driver with one from another working computer seems to have corrected the connection issue.
Folder Deleted : C:\ProgramData\hotspot shield
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hotspot shield
Folder Deleted : C:\Program Files (x86)\hotspot shield
Folder Deleted : C:\Windows\SysWOW64\hotspot shield
File Deleted : C:\Windows\System32\drivers\taphss6.sys
File Deleted : C:\Windows\System32\drivers\hssdrv6.sys
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\hotspotshield
Key Deleted : HKLM\SOFTWARE\hotspotshield
Key Deleted : HKCU\Software\anchorfree
Folder Found : C:\Users\Sid\AppData\Roaming\hotspot shield
Folder Found : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\hotspot shield
I'm afraid I need to ask again. Seems my concern was overlooked. The problem can be seen on many computer help forums. Original message:
"AdwCleaner removes Hotspot Shield. However, many users have messed up their Internet connections in the process. If you're reading this, please see what you can do to correct the issue. Thanks"
I don't know why it's seeing Hotspot Shiled as adware. It's a legitimate application.
Thank you for fixing the issue, and for this very useful program.
Bonsoir Xplode
AdwCleaner 4.109 détecte bien ColorMedia et propose la suppression des services cmwr et cmwfp ainsi que la suppression des fichiers C:\WINDOWS\System32\drivers\cmwr.sys et C:\WINDOWS\System32\drivers\cmwf.sys mais au reboot du PC les services et les fichiers annoncés comme supprimés par AdwCleaner sont toujours là!
Voici un extrait du fichier des logs:
***** [ Services ] *****
[#] Service Supprimé : ColorMedia
Service Supprimé : cmwf
[#] Service Supprimé : cmwr
[#] Service Supprimé : CMWFP
***** [ Fichiers / Dossiers ] *****
Fichier Supprimé : C:\WINDOWS\System32\drivers\cmwr.sys
Fichier Supprimé : C:\WINDOWS\System32\drivers\cmwf.sys
Cordialement
latest update says it is not compatible with my operating system... windows 8.1 :/
before it was my favorite though.
This latest version has many false positives. In favorites, i have a folder name 'online' it is detecting that folder. In registry, it is detecting IDM helper addon for IE (I have Internet download manager installed). In firefox, it is detecting an addon xpi file 'SuperDrag', i have been using this addon for months it is not a adware. Please fix this problems if possible.
Thanks a lot for this superb program.
Bonjour,
Les 2 dernières versions suppriment l'historique de "Windows Update".....
Pour être certaine de ce que j’affirme, j'ai fait 2 fois un restaure système. Sur ma restauration il y a des dates avec des mises à jours et après avoir utiliser "AdwCleaner", il n'y a plus aucune dates disponibles. Le seul moyen de les consulter est de passer par le "Programmes et fonctionnalités".
Je suis avec Windows 7 pro 64....
Bonne journée
Edelweiss
